Add flow-0.10.86 and update documentation

examples/values.yaml

@@ -9,7 +9,7 @@ global:
   namespace: ""
   
   # -- Image registry for all Flow services
-  imageRegistry: "cr.kn.entit.eu"
+  imageRegistry: "entit.azurecr.io"
   # -- Image pull secrets (list of existing secret names)
   imagePullSecrets: []
   
@@ -25,9 +25,9 @@ global:
     # Individual services can override this with their own image.pullPolicy
     pullPolicy: "IfNotPresent"
   
-  # -- Image registry credentials for private registries (e.g., Harbor)
+  # -- Image registry credentials for private registries (e.g., ACR)
   # When enabled, creates a dockerconfigjson secret for pulling images
-  # This is required for Harbor even for public repositories
+  # This is required for ACR even for public repositories
   imageCredentials:
     # -- Enable creation of image pull secret from credentials
     enabled: false
@@ -371,6 +371,7 @@ global:
     aiAssistant: "http://{{ .Release.Name }}-ai-assistant.{{ .Release.Namespace }}.svc.cluster.local:80"
     mcpServer: "http://{{ .Release.Name }}-mcp-server.{{ .Release.Namespace }}.svc.cluster.local:80"
     configurationStore: "http://{{ .Release.Name }}-configuration-store.{{ .Release.Namespace }}.svc.cluster.local:80"
+    dataStore: "http://{{ .Release.Name }}-data-store.{{ .Release.Namespace }}.svc.cluster.local:80"
     auditLog: "http://{{ .Release.Name }}-audit-log.{{ .Release.Namespace }}.svc.cluster.local:80"
     templateStore: "http://{{ .Release.Name }}-template-store.{{ .Release.Namespace }}.svc.cluster.local:80"
     gitSync: "http://{{ .Release.Name }}-git-sync.{{ .Release.Namespace }}.svc.cluster.local:80"
@@ -986,6 +987,46 @@ configurationStore:
   extraVolumeMounts: []
   extraVolumes: []
 
+# -- Data Store service configuration (cross-workflow key-value store)
+dataStore:
+  enabled: true
+  replicaCount: 1
+
+  image:
+    repository: flow/datastore
+    tag: ""
+    pullPolicy: IfNotPresent
+
+  service:
+    type: ClusterIP
+    port: 80
+
+  resources:
+    limits:
+      cpu: 500m
+      memory: 512Mi
+    requests:
+      cpu: 100m
+      memory: 256Mi
+
+  autoscaling:
+    enabled: false
+    minReplicas: 1
+    maxReplicas: 10
+    targetCPUUtilizationPercentage: 75
+
+  nodeSelector: {}
+  tolerations: []
+  affinity: {}
+
+  podDisruptionBudget:
+    enabled: false
+    maxUnavailable: 1
+
+  extraEnv: []
+  extraVolumeMounts: []
+  extraVolumes: []
+
 # -- Template Store service configuration
 templateStore:
   enabled: true
@@ -1589,6 +1630,21 @@ azureDevOpsActivity:
     repository: flow/azuredevopsactivity
     tag: ""
 
+databaseCdcActivity:
+  enabled: true
+  replicaCount: 1
+  image:
+    repository: flow/databasecdcactivity
+    tag: ""
+
+# -- Data Store Activity (cross-workflow key-value store)
+dataStoreActivity:
+  enabled: true
+  replicaCount: 1
+  image:
+    repository: flow/datastoreactivity
+    tag: ""
+
 # -- Container Activity Host
 # Runs Docker containers as workflow activities (Python, Node, Go, etc.)
 containerActivity:
@@ -2232,6 +2288,10 @@ redis:
 # -- Pod security context
 podSecurityContext:
   fsGroup: 1000
+  runAsNonRoot: true
+  runAsUser: 1000
+  seccompProfile:
+    type: RuntimeDefault
 
 # -- Container security context
 securityContext:
@@ -2242,6 +2302,8 @@ securityContext:
     drop:
       - ALL
   readOnlyRootFilesystem: true
+  seccompProfile:
+    type: RuntimeDefault
 
 # -- Service account configuration
 serviceAccount:
@@ -2735,6 +2797,8 @@ tls:
       additionalDnsNames: []
     templateStore:
       additionalDnsNames: []
+    dataStore:
+      additionalDnsNames: []
 
 # =============================================================================
 # Monitoring (Prometheus Operator + Grafana)