Rebase velero

[MaloLelandais]

• add huaweicloud as provider
• Adding Support For VolumeAttributes in Resource Policy (Adding Support For VolumeAttributes in Resource Policy velero-io/velero#8383)
• Added ResourceModifier to Velero Documentation (Added ResourceModifier to Velero Documentation velero-io/velero#8467)
• internal/hook/wait_exec_hook_handler_test.go: Remove unused change struct
• design for multi-arch build and windows build
• design for multi-arch build and windows build - add local build to tar
• design for multi-arch build and windows build - remove input parameter for GCR
• ping kopia to 0.18.2
• Make BackedUpItems thread safe
• Add nil check for updating DataUpload VolumeInfo in finalizing phase.
• Fix: AWS Go SDK URL Signed-off-by: Sylvain Chen sylvain.chen1@gmail.com
• Add SecurityContext to restore-helper
• fix prepare timeout issue
• Issue 8433: add third party labels to data mover pods when the same labels exist in node-agent pods (Issue 8433: add third party labels to data mover pods when the same labels exist in node-agent pods velero-io/velero#8487)
• build hybrid image
• build hybrid image
• build hybrid image
• support specified buildx instance
• move the accepted info from annotations to DU/DD CR
• Set hinting region to use for GetBucketRegion() in pkg/repository/config/aws.go
• Refactor the migration cases.
• issue 8267: add informative logs when expose error
• add diagnostic for data mover exposer
• add diagnostic for data mover exposer
• add diagnostic for data mover exposer
• Fix backup post hook issue
• Fix issue: backup schedule pause/unpause doesn't work
• fix gcr image missing problem
• hybrid deploy
• hybrid deploy
• add use-node-agent-windows
• restict velero server in linux nodes
• add use-node-agent-windows
• hybrid deploy
• hide restic deprecation warning for install with crd-only
• CVE-2024-45337 CVE-2024-45338
• Bug fix: increase the WaitGroup counter before start the goroutine
• backup repo crd changes
• isolate repo maintenane history
• add repo maintain result in history
• backup repo crd changes for repo maintenance history
• add repo maintain result in history
• Skip the deprecation message for the dry-run install CLI JSON output.
• Modify the Init logic to fix the migration case error.
• Bump Restic go.mod to fix CVEs.
• fail fs-backup for windows nodes
• wait node-agent for Windows
• fail fs-backup for windows nodes
• data mover backup for Windows nodes
• disable block volume data mover on windows
• fs uploader skip system folders on windows
• fs uploader and block uploader support Windows nodes
• Clear validation errors when schedule is valid (Clear validation errors when schedule is valid velero-io/velero#8575)
• Merge restore helper image into Velero server image
• Don't include excluded items in ItemBlocks
• issue 8044: generic restore - allow to ignore WaitForFirstConsumer
• Skip patching the PV in finalization for failed operation
• add event burst
• golangci-lint: enable int-conversion and fiximports rule of perfsprint
• data mover restore for Windows
• fix: dupword on tests
• Update .golangci.yaml
• Update .golangci.yaml
• Check the PVB status via podvolume Backupper rather than calling API server to avoid API server issue
• change udmrepo config file location to tmp
• data mover pod misc enhancement for windows
• chore: enable revive default rules
• update du/dd progress on completion
• distribute dd evenly across nodes
• avoid to create new repo when BSL is readonly
• Always create DataUpload configmap in restore namespace
• recall existing repo maintenance to history
• always use job's time
• repo maintenance job out of repo manager
• recall repo maintenance history on restart
• recall repo maintenance history on restart
• move maintenance to a separate folder
• recall repo maintenance history on restart
• get maintenance result only for failed jobs
• add maintenance wait backoff log
• repo maintenance for windows
• chore: enable var-declaration from revive (chore: enable var-declaration from revive velero-io/velero#8636)
• Clean up leaked CSI snapshot for incomplete backup
• Handle update conflict when restoring the status
• windows support smoking test
• bump up kopia
• e2e: Ignore containerdv2 KinD cluster
• refactor pod volume context
• rename cancel function
• chore: enable use-any from revive
• Bump actions/stale from 9.0.0 to 9.1.0
• chore: enable increment-decrement from revive
• chore: enable unnecessary-stmt from revive
• Add Design for Allowing Instance-Level Resource Status Restore
• Fix WaitGroup panic issue
• Allowing Object-Level Resource Status Restore
• Implement parallel ItemBlock processing via backup_controller goroutines
• Don't run maintenance on the ReadOnly BackupRepositories.
• validate --from-schedule flag
• add changelog
• refactor code
• Add the design of cleaning artifacts generated during CSI B/R
• Upgrade go.mod k8s.io/ go.mod to v0.31.3 and set klog.SetLogger() for client-go (Make logs format more consistent by using server logger for client-go, controller-runtime, requiring upgrade of k8s.io/ to v0.31.3 velero-io/velero#8450)
• Run backup post hooks inside ItemBlock synchronously
• e2e: skip more containerdv2 kind images
• Update Makefile to support pushing images to an insecure registry
• Modify golangci configuration to make it work.
• Design to add label selector as a criteria for volume policy
• Ignore debug.test from vscode debug*
• Configurable Kopia Maintenance Interval
• Pass all backupRepoConfig keys to storageVariables, and thus RepoOptions.
• Address Configurable Kopia Maintenance Interval velero-io/velero#8581 (review)
• Address Configurable Kopia Maintenance Interval velero-io/velero#8581 (review)
• doc updates
• lint
• doc update, move under kopia repo header
• add to unmarshal test
• log only if not equal
• empty string case
• add more maintenance interval unit tests
• Copy SecurityContext from Containers[0] if present for PVR
• Delete VolumeSnapshotContent from the backup sync process.
• Modify CSI related DeleteItemActions.
• Delete VSC after backup completes.
• Modify VS and VSC restore actions.
• issue 8706: for immediate volumes, get node from volumeattachment
• issue 8706: for immediate volumes, get node from volumeattachment
• Add labels as a criteria for volume policy (Add labels as a criteria for volume policy velero-io/velero#8713)
• bump up kopia to 0.19.0
• Return directly if no pod volme backup are tracked
• issue 8475: refactor build-from-source doc
• add doc for maintenance history
• Bump golangci-lint from v1.57.2 to v1.64.5 (Bump golangci-lint from v1.57.2 to v1.64.5 velero-io/velero#8641)
• chore: update Go to 1.23 and toolchain to 1.23.6 (chore: update Go to 1.23 and toolchain to 1.23.6 velero-io/velero#8717)
• CVE-2025-22869 + go1.23
• dockerfile go:1.23
• issue-8426: add doc for Windows support
• issue-8426: add doc for Windows support
• issue 8733: add doc for restorePVC
• go-mod-upgrade: golang.org/x/oauth2@v0.27.0 (CVE-2025-22868 go-mod-upgrade: golang.org/x/oauth2@v0.27.0 velero-io/velero#8752)
• Fix typo "Defaults is"
• Add docs for object level status restore
• Add docs for volume policy with labels as a criteria
• Fix incorrect indent in doc
• issue 8754: add third party annotation support
• Move pvc annotation removal from CSI RIA to regular PVC RIA
• issue 8649: host_pods should not be mandatory to node-agent
• Bump golang.org/x/net from 0.34.0 to 0.36.0
• Fix the JSON format error in the repository-maitenance.md
• Issue node-agent not waiting for PV removal velero-io/velero#8772 ensure pv removed (Issue #8772 ensure pv removed velero-io/velero#8777)
• issue8720: log doesn't show pv name (issue8720: log doesn't show pv name velero-io/velero#8771)
• Bump kind cli to v0.27.0 (Bump kind cli to v0.27.0 velero-io/velero#8699)
• Modify how the restore workflow using the resource name.
• Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 (Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 velero-io/velero#8806)
• Enable containerdv2 images
• Document schedule skipImmediately (Document schedule skipImmediately behavior from implementation velero-io/velero#8802)
• issue 8803: use deterministic name to create backupRepository
• add third party annotation support for maintenance job
• update readme and implemented design for 1.16
• Bump the golang.org/x/net to v0.36.0 to fix Restic CVE.
• add doc for upgrade to 1.16
• add 1.16 doc
• Fix the non data mover migration failure.
• add 1.16 changelog
• Bump the migration and upgrade E2E test source version.
• Align the E2E upgrade test's CLI and image version.
• Update the nightly trivy scan targets. (Update the nightly trivy scan targets. velero-io/velero#8833)
• Add s390x binary support (Binary support for s390x velero-io/velero#7505)
• issue8294: inherit k8s default volumeSnapshotClass (issue8294: inherit k8s default volumeSnapshotClass velero-io/velero#8721)
• update development doc (issue8785: Development page lists deprecated requirements velero-io/velero#8835)
• E2E support sets the --item-block-worker-count. (E2E support sets the --item-block-worker-count. velero-io/velero#8836)
• issue 8847: inherit pod info from node-agent-windows
• chore: bump golangci-lint to v2 (chore: bump golangci-lint to v2 velero-io/velero#8839)
• Bump golang.org/x/net from 0.36.0 to 0.38.0 (Bump golang.org/x/net from 0.36.0 to 0.38.0 velero-io/velero#8872)
• Add default bakcup repository configuration for E2E.
• chore: define common aliases for k8s packages (chore: define common aliases for k8s packages velero-io/velero#8672)
• issue8827: Pass logger in call chain (issue8827: Pass logger in call chain velero-io/velero#8875)
• Propagate dns settings to backup pods (Propagate dns settings to backup pods velero-io/velero#8845)
• Fix undefined v1 for corev1api
• Bump golang.org/x/net to v0.38.0 to fix CVE. (Bump golang.org/x/net to v0.38.0 to fix restic CVE. velero-io/velero#8896)
• issue-8878: relief node os deduction error checks (Issue 8878: relief node os deduction error checks velero-io/velero#8891)
• For not found errors on managed fields, add restore warning
• Bump golangci/golangci-lint-action from 7 to 8 (Bump golangci/golangci-lint-action from 7 to 8 velero-io/velero#8905)
• Remove pushing images to GCR.
• Add VolumeSnapshotContent into the RIA and the mustHave resource list. (Add VolumeSnapshotContent into the RIA and the mustHave resource list. velero-io/velero#8924)
• Support using image registry proxy in more cases.
• switch reference to the latest version to 1.16 (fix upgrade instruction link velero-io/velero#8876)
• Call WaitGroup.Done() once only when PVB changes to final status the first time to avoid panic
• Add velero.io APIs availability check in Velero E2E install function.
• dm controller refactor for cancel
• Support Windows E2E.
• dm controller refactor for cancel
• Replace security@vmware.com with velero-security.pdl@broadcom.com. (Replace security@vmware.com with velero-security.pdl@broadcom.com velero-io/velero#8954)
• Add Velero-installed namespace to exlucde list for scale test.
• fix: update mc command in minio-deployment example (fix: update mc command in minio-deployment example velero-io/velero#8982)
• issue 8960: implement PodVolume exposer for PVB/PVR
• Skip namespace in terminating state in backup resource collection.
• issue 8960: implement PodVolume exposer for PVB/PVR
• Remove CSI VS and VSC metadata from backup.
• Mark BackupRepository not ready when BSL changed
• Add support for configuring VGS label key (Add support for configuring VGS label key velero-io/velero#8938)
• issue 8960: implement PodVolume exposer for PVB/PVR
• Add design for VolumeGroupSnapshot support
• update itemblock case 3
• Update the VGS B/R workflows
• remove vgsc open question
• delegate cleanup to VGS BIA
• fix typo
• update csi plugin changes, diagram and snippets
• Update CSI plugin common branch flow and add mechanism to determine VGSClass
• Update VGSClass determination mechanism
• Add notes regarding compat, perf, reqs and testing
• data path for vgdp ms pvb
• data path for vgdp ms pvb
• Add BSL status check for backup/restore operations.
• Documentation for ephemeral-storage (Ephemeral-storage documentation update for plugin requirements velero-io/velero#8244)
• Skip VS and VSC not created by backup.
• Add .config/ to gitignore
• Refactor affinity tests to use require and assert for better readability and error reporting
• vgdp ms pvb controller
• vgdp ms pvr data path
• vgdp ms pvr data path
• vgdp ms pvr data path
• vgdp ms pvb controller
• Extend PVCAction itemblock plugin to support grouping PVCs under VolumeGroupSnapshot label
• vgdp ms pvr controller
• vgdp ms pvr controller
• vgdp ms pvb controller
• chore: bump golang.org/x/oauth2 to fix restic CVE-2025-22868
• The modification of VGDP affinity design.
• windows support for vgdp ms for pvb
• bump kopia v0.20.1
• pvr controller for legacy restic restore
• legacy pvr controller for restic path
• support cancel for PVB/PVR in backups/restores
• cancel pvb/pvr on velero server restarts
• fix len rule from testifylint
• fix empty rule from testifylint
• fix equal-values rule from testifylint
• fix require-error rule from testifylint
• copy security context from origin pod
• handle velero server and node-agent restarts for vgdp ms for pvb
• handle velero server and node-agent restarts for vgdp ms for pvb
• resume PVB/PVR on node-agent restart
• add image registry proxy option to E2E test configuration Signed-off-by: Priyansh Choudhary im1706@gmail.com
• Typo Fix
• Update README.md
• Typo Fix
• Remove dependency with VolumeSnapshotClass in DataUpload. (Remove dependency with VolumeSnapshotClass in DataUpload. velero-io/velero#9040)
• Add UT for maintenance's DeleteOldJobs function. (Add UT for maintenance's DeleteOldJobs function velero-io/velero#9013)
• Add Kopia repository ownership issue in troubleshooting.md (Add Kopia repository ownership issue in troubleshooting.md velero-io/velero#9039)
• Add provision for labels and annotations in E2E tests. (Add provision for labels and annotations in E2E tests. velero-io/velero#9043)
• Remove username/password credential handling from newConfigCredential (Remove username/password credential handling from newConfigCredential velero-io/velero#9041)
• The backup and restore data mover node selection.
• Allow for proper tracking of multiple hooks per container
• Make the backup repository controller doesn't invalidate the BSL on restart.
• Add Gauge metric for BSL availability
• issue 8813: remove restic from the valid uploader type
• Clarify thirdparty label/annotations on the maintenance jobs (Clarify thirdparty label/annotations on the maintenance jobs velero-io/velero#8930)
• issue 8857: support third party tolerations
• chore: enable usetesting linter
• Add tests for backup and restore metrics with adhoc backups
• Add support for image registry proxy in Kibishii installation (Add support for image registry proxy in Kibishii installation velero-io/velero#9063)
• design for node agent soothing (Design for node agent soothing velero-io/velero#9067)
• issue 8185: allow to disable node-agent host path (Issue 8185: allow to disable node-agent host path velero-io/velero#9068)
• chore: enable exptostd linter (chore: enable exptostd linter velero-io/velero#9086)
• Mounted cloud credentials should not be world-readable (Mounted cloud credentials should not be world-readable velero-io/velero#8919)
• Issue 8344: constrain data path expose (Issue 8344: constrain data path expose velero-io/velero#9064)
• PVR action to remove restore-wait init container on restore (Remove restore-wait initcontainer if not needed on restore velero-io/velero#8880)
• Issue 9053: remove selected-node annotation during PVC restore (Issue 9053: remove selected-node annotation during PVC restore velero-io/velero#9076)
• Implement newAzureCredential function for Azure authentication and refactor credential retrieval Signed-off-by: Priyansh Choudhary im1706@gmail.com
• Refactor Snapshot Checkpoint in E2E Tests (Refactor Snapshot Checkpoint in E2E Tests velero-io/velero#9083)
• Accommodate VGS workflows in PVC CSI plugin
• issue 9077: don't block backup deletion on list VS error
• Enable parameterized kubelet mount path during node-agent installation (Enable parameterized kubelet mount path during node-agent installation velero-io/velero#9074)
• bump up kopia to v0.21.1
• bump up kopia to v0.21.1
• PriorityClass Support Design Proposal (PriorityClass Support Design Proposal velero-io/velero#8882)
• Fix missing defaultVolumesToFsBackup flag output in Velero describe backup cmd (Fix missing defaultVolumesToFsBackup flag output in Velero describe backup cmd velero-io/velero#9056)
• Add imagePullSecrets inheritage for VGDP pod and maintenance job. (Add imagePullSecrets inheritage for VGDP pod and maintenance job. velero-io/velero#9096)
• Update Backup describe string for DefaultVolumesToFSBackup flag (Update Backup describe string for DefaultVolumesToFSBackup flag velero-io/velero#9105)
• Use 1.24 instead of v1.24.0, and remove toolchain.
• Avoid checking the VS and VSC status in the backup finalizing phase.
• Make ResticIdentifier optional for kopia repositories (Make ResticIdentifier optional for kopia BackupRepositories velero-io/velero#8987)
• Enhance File System Backup documentation with details on volume snapshot behavior and backup method decision flow (Enhance File System Backup documentation with details on volume snapshot behavior and backup method decision flow velero-io/velero#9091)
• Add disabled PV re-provisioning by StorageClasses option on restore

Thank you for contributing to Velero!

Please add a summary of your change

Does your change fix a particular issue?

Fixes #(issue)

Please indicate you've done the following:

• Accepted the DCO. Commits without the DCO will delay acceptance.
• Created a changelog file (make new-changelog) or comment /kind changelog-not-required on this PR.
• Updated the corresponding documentation in site/content/docs/main.