feat(graph): update netapp nodes (#26)

Author: daddycocoaman

docs/analysis/additional-nodes/netapp-account-ad-domain.md

@@ -10,8 +10,11 @@ Represents an Active Directory domain configuration for an Azure NetApp Files ac
 - `administrators` - List of administrator accounts
 - `aesEncryption` - Whether AES encryption is enabled
 - `allowLocalNfsUsersWithLdap` - Whether local NFS users are allowed with LDAP
+- `backupOperators` - Backup operator accounts for the AD domain
 - `dns` - DNS server configuration
+- `domain` - Active Directory domain name
 - `encryptDCConnections` - Whether domain controller connections are encrypted
+- `kdcIP` - Kerberos KDC IP address
 - `ldapOverTLS` - Whether LDAP over TLS is enabled
 - `ldapSigning` - LDAP signing configuration
 - `organizationalUnit` - Organizational unit for computer accounts

docs/analysis/arm-nodes/netapp/netapp-account.md

@@ -15,4 +15,5 @@ Represents an Azure NetApp Files account for managing file storage pools and vol
 
 - **IS_DEPLOYED** → **NetAppAccountADDomain** - Links to Active Directory domain configurations
 - **CONTAINS** → **NetAppCapacityPool** - Contains capacity pools
+- **HAS_BACKUP_VAULT** → **NetAppBackupVault** - Associated backup vaults
 - **HAS_POLICY** → **NetAppSnapshotPolicy** - Associated snapshot policies

docs/analysis/arm-nodes/netapp/netapp-backup-vault.md

@@ -0,0 +1,14 @@
+# NetAppBackupVault
+
+Represents a backup vault for Azure NetApp Files account backups.
+
+**Labels:** `:ArmResource`, `:NetAppBackupVault`
+
+**Properties:**
+
+- `id` - Resource identifier (primary key)
+- `provisioningState` - Current provisioning state
+
+## Relationships
+
+- **NetAppAccount** → **HAS_BACKUP_VAULT** → **NetAppBackupVault** - Associated backup vault for the NetApp account

docs/analysis/arm-nodes/netapp/netapp-volume.md

@@ -10,6 +10,7 @@ Represents a volume within an Azure NetApp Files capacity pool.
 - `baremetalTenantId` - Bare metal tenant identifier
 - `coolAccess` - Cool access configuration
 - `creationToken` - Unique creation token for the volume
+- `enableSubvolumes` - Whether subvolumes are enabled
 - `encryptionKeySource` - Source of encryption keys
 - `fileSystemId` - File system identifier
 - `isDefaultQuotaEnabled` - Whether default quota is enabled

docs/analysis/edges/has-backup-vault.md

@@ -0,0 +1,22 @@
+# HAS_BACKUP_VAULT
+
+Links NetApp accounts to their associated NetApp backup vault resources.
+
+**Relationship:** `:HAS_BACKUP_VAULT`
+
+**Direction:** `(:NetAppAccount)-[:HAS_BACKUP_VAULT]->(:NetAppBackupVault)`
+
+## Description
+
+This relationship indicates which backup vault belongs to a specific NetApp account.
+
+## Examples
+
+### NetAppAccount → NetAppBackupVault
+Connects an Azure NetApp Files account to the backup vault used to store and manage backups for that account.
+
+## Use Cases
+
+- Identifying backup coverage for NetApp accounts
+- Mapping backup dependencies for NetApp storage workloads
+- Tracing account-to-vault backup topology

src/graph/config/azure/arm/netapp/netapp_accounts.tera.yaml

@@ -16,22 +16,27 @@ cypher: |
     }
 
     // Iterate over Active Directories and create relationships
-    WITH obj, row, row.properties.activeDirectories AS activeDirectories
-    UNWIND activeDirectories AS ad
-    MERGE (adNode:{{ LABELS.NetAppAccountADDomain }} {activeDirectoryId: toLower(ad.activeDirectoryId)})
-    SET adNode += {
-        administrators: ad.administrators,
-        aesEncryption: ad.aesEncryption,
-        allowLocalNfsUsersWithLdap: ad.allowLocalNfsUsersWithLdap,
-        dns: ad.dns,
-        encryptDCConnections: ad.encryptDCConnections,
-        ldapOverTLS: ad.ldapOverTLS,
-        ldapSigning: ad.ldapSigning,
-        organizationalUnit: ad.organizationalUnit,
-        site: ad.site,
-        smbServerName: ad.smbServerName,
-        status: ad.status,
-        username: ad.username
+    CALL (obj, row) {
+        WITH obj, row, row.properties.activeDirectories AS activeDirectories
+        UNWIND activeDirectories AS ad
+        MERGE (adNode:{{ LABELS.NetAppAccountADDomain }} {activeDirectoryId: toLower(ad.activeDirectoryId)})
+        SET adNode += {
+            administrators: ad.administrators,
+            aesEncryption: ad.aesEncryption,
+            allowLocalNfsUsersWithLdap: ad.allowLocalNfsUsersWithLdap,
+            backupOperators: ad.backupOperators,
+            dns: ad.dns,
+            domain: ad.domain,
+            encryptDCConnections: ad.encryptDCConnections,
+            kdcIP: ad.kdcIP,
+            ldapOverTLS: ad.ldapOverTLS,
+            ldapSigning: ad.ldapSigning,
+            organizationalUnit: ad.organizationalUnit,
+            site: ad.site,
+            smbServerName: ad.smbServerName,
+            status: ad.status,
+            username: ad.username
+        }
+        MERGE (obj)-[:{{ REL.IS_DEPLOYED }}]->(adNode)
     }
-    MERGE (obj)-[:{{ REL.IS_DEPLOYED }}]->(adNode)
     RETURN count(*) AS _

src/graph/config/azure/arm/netapp/netapp_backup_vaults.tera.yaml

@@ -0,0 +1,20 @@
+name: "NetApp Backup Vaults"
+label: "{{ LABELS.NetAppBackupVault }}"
+table_name: "resources"
+resource_type: "microsoft.netapp/backupvaults"
+properties:
+  - "/id"
+  - "/properties"
+cypher: |
+    UNWIND $batch AS row
+    MERGE (obj:{{ LABELS.ArmResource }} {id: toLower(row.id)})
+    SET obj:{{ LABELS.NetAppBackupVault }}
+    SET obj += {
+        provisioningState: row.properties.provisioningState
+    }
+
+    // Create relationship to NetApp Account
+    WITH obj, row, split(toLower(row.id), '/backupvaults/')[0] AS netappAccountId
+    MERGE (n:{{ LABELS.ArmResource }} {id: toLower(netappAccountId)})
+    SET n:{{ LABELS.NetAppAccount }}
+    MERGE (n)-[:{{ REL.HAS_BACKUP_VAULT }}]->(obj)

src/graph/config/azure/arm/netapp/netapp_capacity_pool_volumes.tera.yaml

@@ -13,6 +13,7 @@ cypher: |
         baremetalTenantId: row.properties.baremetalTenantId,
         coolAccess: row.properties.coolAccess,
         creationToken: row.properties.creationToken,
+        enableSubvolumes: row.properties.enableSubvolumes,
         encryptionKeySource: row.properties.encryptionKeySource,
         fileSystemId: row.properties.fileSystemId,
         isDefaultQuotaEnabled: row.properties.isDefaultQuotaEnabled,

src/graph/config/azure/arm/netapp/netapp_capacity_pools.tera.yaml

@@ -5,6 +5,8 @@ resource_type: "microsoft.netapp/netappaccounts/capacitypools"
 properties:
   - "/id"
   - "/properties"
+index_properties:
+  - "{{ LABELS.NetAppCapacityPool }}.poolId"
 cypher: |
     UNWIND $batch AS row
     MERGE (obj:{{ LABELS.ArmResource }} {id: toLower(row.id)})

src/graph/config/constants.yaml

@@ -12,6 +12,7 @@ REL:
   HAS_ALERT: "HAS_ALERT"
   HAS_APPLICATION: "HAS_APPLICATION"
   HAS_APPROLE: "HAS_APPROLE"
+  HAS_BACKUP_VAULT: "HAS_BACKUP_VAULT"
   HAS_BUILDER: "HAS_BUILDER"
   HAS_CERTIFICATE: "HAS_CERTIFICATE"
   HAS_CONFIG: "HAS_CONFIG"
@@ -148,6 +149,7 @@ LABELS:
   ManagedHSM: "ManagedHSM"
   MLWorkspace: "MLWorkspace"
   NetAppAccount: "NetAppAccount"
+  NetAppBackupVault: "NetAppBackupVault"
   NetAppCapacityPool: "NetAppCapacityPool"
   NetAppSnapshotPolicy: "NetAppSnapshotPolicy"
   NetAppVolume: "NetAppVolume"