feat(helm): integrate native SeaTunnel hybrid deployment

.github/actions/helm-checks/action.yml

@@ -38,11 +38,17 @@ runs:
       helm lint helm/hugegraph -f helm/hugegraph/values-single.yaml
       helm lint helm/hugegraph -f helm/hugegraph/values-cluster.yaml
       helm lint helm/hugegraph -f helm/hugegraph/values-strict.yaml
+      helm lint helm/hugegraph -f helm/hugegraph/examples/values-seatunnel-standalone.yaml
+      helm lint helm/hugegraph -f helm/hugegraph/examples/values-seatunnel-cluster.yaml
 
   - name: packaged chart regression
     shell: 'bash -e {0}'
     run: python3 -m unittest discover -s helm -p 'test_helm_package.py' -v
 
+  - name: SeaTunnel integration regression
+    shell: 'bash -e {0}'
+    run: python3 -m unittest discover -s helm -p 'test_helm_seatunnel.py' -v
+
   - name: helm unittest
     shell: 'bash -e {0}'
     run: |
@@ -56,7 +62,8 @@ runs:
   - name: helm template
     shell: 'bash -e {0}'
     run: |
-      for preset in "" "-f helm/hugegraph/values-single.yaml" "-f helm/hugegraph/values-cluster.yaml" "-f helm/hugegraph/values-strict.yaml"; do
+      for preset in "" "-f helm/hugegraph/values-single.yaml" "-f helm/hugegraph/values-cluster.yaml" "-f helm/hugegraph/values-strict.yaml" \
+        "-f helm/hugegraph/examples/values-seatunnel-standalone.yaml" "-f helm/hugegraph/examples/values-seatunnel-cluster.yaml"; do
         # shellcheck disable=SC2086 # $preset intentionally splits into flags
         helm template ci helm/hugegraph $preset > /dev/null
       done
@@ -493,7 +500,8 @@ runs:
       curl -sSLo /tmp/kc.tar.gz https://github.com/yannh/kubeconform/releases/download/v0.6.7/kubeconform-linux-amd64.tar.gz
       echo "95f14e87aa28c09d5941f11bd024c1d02fdc0303ccaa23f61cef67bc92619d73  /tmp/kc.tar.gz" | sha256sum -c -
       tar -xzf /tmp/kc.tar.gz -C /tmp
-      for preset in "" "-f helm/hugegraph/values-single.yaml" "-f helm/hugegraph/values-cluster.yaml" "-f helm/hugegraph/values-strict.yaml"; do
+      for preset in "" "-f helm/hugegraph/values-single.yaml" "-f helm/hugegraph/values-cluster.yaml" "-f helm/hugegraph/values-strict.yaml" \
+        "-f helm/hugegraph/examples/values-seatunnel-standalone.yaml" "-f helm/hugegraph/examples/values-seatunnel-cluster.yaml"; do
         # shellcheck disable=SC2086 # $preset intentionally splits into flags
         helm template ci helm/hugegraph $preset | /tmp/kubeconform -strict -summary -kubernetes-version 1.23.0
       done

LICENSE

@@ -218,3 +218,4 @@ hugegraph-server/hugegraph-api/src/main/java/org/apache/hugegraph/opencypher/Cyp
 hugegraph-server/hugegraph-api/src/main/java/org/apache/hugegraph/opencypher/CypherPlugin.java from https://github.com/opencypher/cypher-for-gremlin
 hugegraph-struct/src/main/java/org/apache/hugegraph/type/define/Cardinality.java from https://github.com/JanusGraph/janusgraph
 hugegraph-struct/src/main/java/org/apache/hugegraph/type/Namifiable.java from https://github.com/JanusGraph/janusgraph
+helm/hugegraph/templates/seatunnel.yaml adapts the native hybrid Kubernetes deployment from Apache SeaTunnel 3.0.0 (Apache License 2.0).

NOTICE

@@ -6,6 +6,10 @@ The Apache Software Foundation (http://www.apache.org/).
 
 The initial codebase was donated to the ASF by HugeGraph Authors, copyright 2017-2021.
 
+The optional native Kubernetes deployment in helm/hugegraph/templates/seatunnel.yaml adapts resources from:
+Apache SeaTunnel
+Copyright 2021-2024 The Apache Software Foundation
+
 
 -----------------------------------------------------------------------
 This product contains code form the Apache TinkerPop Project:

helm/hugegraph/Chart.yaml

@@ -17,9 +17,9 @@
 
 apiVersion: v2
 name: hugegraph-helm
-description: Helm chart for Apache HugeGraph HStore cluster (PD + Store + Server)
+description: Helm chart for Apache HugeGraph HStore cluster with optional SeaTunnel
 type: application
-version: 0.2.0
+version: 0.3.0
 # TODO: set appVersion to "1.8.0" when the release images are published.
 appVersion: "latest"
 kubeVersion: ">=1.23.0-0"
@@ -32,6 +32,7 @@ home: https://hugegraph.apache.org/
 icon: https://hugegraph.apache.org/img/logo.svg
 sources:
   - https://github.com/apache/hugegraph
+  - https://github.com/apache/seatunnel
 maintainers:
   - name: HugeGraph Community
     url: https://hugegraph.apache.org/

helm/hugegraph/README.md

@@ -81,6 +81,28 @@ helm install hugegraph ./helm/hugegraph -n hugegraph --create-namespace \
 
 Inactive credential values may remain in the values file when auth is disabled.
 
+### Optional SeaTunnel
+
+Set `seatunnel.enabled=true` to start one persistent hybrid member alongside HugeGraph;
+set `seatunnel.mode=cluster` to use multiple members of the same native StatefulSet
+(two by default). SeaTunnel is disabled by default and its topology is independent
+of the HugeGraph single-/multi-node presets. Both modes include the engine's task UI.
+The HTTP Service inherits NodePort in `easy` mode or ClusterIP in `strict` mode;
+`seatunnel.service` can explicitly override the type and NodePort.
+
+Member/CLI port 5801 is restricted to same-release peers by a SeaTunnel ingress
+NetworkPolicy in every mode, including when the chart-wide policy flag is disabled.
+Easy mode leaves the authenticated HTTP entry open. Actual isolation requires CNI
+support and trusted namespace RBAC; full isolation additionally limits egress.
+
+The chart injects the same-release Server address, GraphSpace and administrator
+Secret references into the mounted Source/Sink examples. Create the target graph
+before submitting them manually; Helm does not create graphs or import data.
+UI and REST submission use a separate native HTTP Basic administrator account,
+whose generated Secret is retained and reused during online upgrades. Container
+security and scheduling options follow the other components; see the
+[SeaTunnel deployment guide](docs/seatunnel.md) for configuration and limits.
+
 ### Internal image registry
 
 Mirror the four component images (`hugegraph/pd`, `hugegraph/store`,