Note

Medium Risk
Changes how cloud storage credentials are injected at deploy time; Azure adopters must use Secret key accountKey or upgrades from extraEnvs/account_key can fail silently on missing credentials.

Overview
Adds first-class Azure Blob object storage to the Convoy Helm chart for server and agent (Deployment and Rollout templates), driven by storage.type: azure_blob and new storage.azure_blob.* values that map to CONVOY_STORAGE_AZURE_* environment variables.

Account keys can be set inline or via an existing Secret (storage.azure_blob.secret), with the Secret key accountKey (documented separately from S3’s secretKey). README / README.md.gotmpl add an Object Storage section with examples and an upgrade note for teams moving off extraEnvs who may still have account_key in their Secret.

S3 wiring is tightened on the server side: optional storage.s3.prefix is emitted as CONVOY_STORAGE_AWS_PREFIX, and the S3 secret reference guard matches the agent pattern (and + non-empty check). Default values.yaml and subchart values gain matching azure_blob (and agent s3.prefix) blocks; generated README values table reflects the new fields.

^{Reviewed by Cursor Bugbot for commit 6769139. Bugbot is set up for automated code reviews on this repo. Configure here.}