Adam ZhangandGitHub 85c660612b Enforce resource filters on cluster-wide items (#10455) ...

* Enforce resource filters on cluster-wide items

When backups query all namespaces (wildcard or omitted includes),
the item collector retrieved resources in bulk, bypassing
per-namespace resource filter policies in Stage 1 collection.
This caused resources not listed in the policy to be backed up.

To preserve cluster-wide query performance while enforcing policy
rules, evaluate namespace exclusions, resource kind allowlists,
and label selectors in memory for each collected item.

Signed-off-by: Adam Zhang <adam.zhang@broadcom.com>

* Optimize in-memory resource filter checks

Optimize per-item filter evaluation in the item collector:
- Precalculate GroupResource string once per resource type
- Skip filter policy evaluation when no namespaced policies exist
- Restrict in-memory filtering to cluster-wide queries
- Cache consecutive namespace lookups across collected items
- Lazily extract resource labels only when selectors are present

Signed-off-by: Adam Zhang <adam.zhang@broadcom.com>

---------

Signed-off-by: Adam Zhang <adam.zhang@broadcom.com>

2026-09-02 12:03:06 -04:00

..

actions

fix node agent rediness check issue (#10397)

2026-08-25 14:14:26 -04:00

backed_up_items_map.go

Remove the skipped item from the resource list when it's skipped by BIA.

2026-02-27 11:37:34 +08:00

backup_test.go

Report a measured zero incremental instead of erasing it (#10309)

2026-08-25 18:08:17 -04:00

backup.go

Avoid io.ReadAll in buildFinalTarball() (#10311)

2026-08-18 16:41:22 +08:00

delete_helpers.go

fix goimport noise in prep for bump to latest

2020-03-02 10:55:08 -07:00

item_backupper_test.go

implement fine-grained backup filter policies

2026-06-08 15:50:05 +08:00

item_backupper.go

Use k8s.io/api well-known label constants instead of hardcoded strings (#10279)

2026-08-17 13:37:44 +08:00

item_block_worker_pool.go

Implement parallel ItemBlock processing via backup_controller goroutines

2025-02-12 12:03:37 -05:00

item_collector_test.go

Enforce resource filters on cluster-wide items (#10455)

2026-09-02 12:03:06 -04:00

item_collector.go

Enforce resource filters on cluster-wide items (#10455)

2026-09-02 12:03:06 -04:00

itemblock.go

Replace github.com/pkg/errors by github.com/cockroachdb/errors

2026-06-10 15:55:57 +08:00

pv_skip_tracker_test.go

Add actions directory for backup and restore.

2024-03-29 13:21:50 +08:00

pv_skip_tracker.go

Modify the volume helper logic.

2024-05-23 09:57:21 +08:00

request_test.go

Make BackedUpItems thread safe

2024-12-03 15:23:45 -05:00

request.go

caching the call for GetNamespaceFilter

2026-06-15 16:18:54 +08:00

snapshots_test.go

Testing: Implement missing unit tests for pkg/backup/snapshots.go (#10315)

2026-08-20 23:40:59 +08:00

snapshots.go

Accommodate VGS workflows in PVC CSI plugin

2025-07-21 11:36:40 -07:00

volume_snapshotter_cache.go

fix 9234: Add safe VolumeSnapshotterCache

2025-09-18 17:21:25 +08:00