[Baylem]

Superseded by #836, which carries the reviewed commits on an upstream branch for native GitHub stacking. This PR is closed without merging; its review history remains available here.

Backup preparation could disable saving while a worker was still waiting for storage or repository access, and a stalled CSI capture could hold quiesce indefinitely. This prepares and verifies the real worker before save-off, then applies persisted deadlines to preparation, live copying and CSI capture.

• Restic workers mount the source, initialize/check the repository and become Ready before quiesce. An owned projected ConfigMap authorizes only the exact Backup, worker Pod, source identity and expiry. Workers use resource defaults and prefer the source node, with an optional hard placement requirement. First binding waits for an initial source Pod to be created and scheduled within the preparation deadline; a replacement after binding still fails closed. They receive no Kubernetes API token.
• Preparation, quiesce and CSI deadlines survive restarts and configuration changes. Copy failure/deletion revokes authorization and waits for actual worker drainage before save-on. Raw and already-stopped copies retain the full Job budget.
• Aborted CSI snapshots remain invalid even if the driver later reports readiness. Cleanup verifies snapshot/content UIDs and respects Retain policy. Restore and new snapshot-backed PVCs reject incomplete, aborted or replaced captures.
• Prepared workers record volume coverage before copy authorization and use the effective template under lifecycle ownership, including when a newer catalog revision is pending.

Includes controller, worker-script and snapshot regressions plus a dedicated two-node RWO preparation/restore CI drill. The Kind fixture does not claim qualification of attachable CSI drivers. Worker expiry assumes synchronized clocks; restoring saving after an operator outage still requires operator/agent recovery.

Dependencies included: #760 lifecycle exclusion, #766 stopped-server preparation, #767 capture metadata, #769 staged templates and its security/resource dependencies, #756 snapshot authorization, and #759 shared web build prerequisite. Review the commits for this issue group after those prerequisites. Shared restore cleanup retains ownership until failed startup drains, including force-deletion recovery. The preparation, placement and Restricted workload buckets remain registered in upstream change-based test selection.

Validation: production and regression-source compilation passed; required actionlint/offline zizmor and whitespace checks passed. Runtime unit, envtest and E2E execution remains in CI under the repository's compile-only local policy.

Closes #717.
Closes #719.

Issue coordination: #717 and #719 build on #718's exclusive ownership (#760) and #716's stopped-source path (#766).

The dependency stack now includes verified effective-template API redaction, clone password protection and diagnostics namespace isolation. Backup detail UI follows Pencil nodes zhLZN (achieved consistency and legacy volume coverage) and bHJy6 (recorded per-volume coverage), with saved JSON/PNG exports and screenshot coverage inherited from #769.

Final integrated API/operator builds and handler/controller regression-source compilation passed. Runtime and visual verification of this updated head remains pending CI.

Transient source API errors retry within the persisted copy deadlines while unverified worker authorization is revoked. Confirmed identity changes still abort. Cleanup retains lifecycle ownership and quiesce obligations until workers drain. The Garry’s Mod CI job releases unused hosted-runner SDKs and its already-loaded image archive before Kind starts, preserving the real game image and test assertions.

Inherited password protection now covers creation, cloning and unpinned edits plus unsafe template retyping. The finalized Pencil references include corrected drawer spacing, typography and centered action labels. CI uses the shared checksum-verified Trivy release installer; current runtime and visual checks remain pending.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: GameplanePanel/Gameplane
• Branch: stack/pr-769
• File: .coderabbit.yaml
• Commit: e64c075
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: fa7a0abb-d824-4ef0-9711-b1f9a55f63fc

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

[Baylem]

Updated in 327163a with the legacy cleanup fix from #766 and stopped-capture artifact retry from #764, including their regressions. Also integrated upstream’s fixes for the operator lint error and the isolated frpc dependency flagged by the image scan; the compiled binary embeds go-jose 4.1.6. Source compilation and required workflow checks passed. Fresh CI is running for the combined head.

[ValgulNecron]

This pr is editing the UI without a pencil edit. please do the edit in pencil too