feat(table-catalog): add durable catalog backups (#8266)

* feat(table-catalog): add durable catalog backups

* fix(table-catalog): preserve migration lock ordering

* fix(table-catalog): preserve backup recovery fences

* fix(table-catalog): order backup publication locks

* fix(table-catalog): preserve recovery publication fences

* test(table-catalog): use the storage facade for recovery fencing

* test(ecstore): repair catalog publication fixtures

* fix(table-catalog): address catalog backup clippy failures

* test(table-catalog): adapt generation races to publication fencing

---------

Co-authored-by: Henry Guo <marshawcoco@users.noreply.github.com>
Co-authored-by: overtrue <anzhengchao@gmail.com>
This commit is contained in:
Henry Guo
2026-10-07 14:53:53 +08:00
committed by GitHub
parent 8fea8ef600
commit 3b92708011
34 changed files with 4519 additions and 237 deletions
+6
View File
@@ -312,6 +312,12 @@ The smoke test also probes catalog-backed advanced Iceberg surfaces:
and snapshot refs remain protected. Orphan candidates are read-only observations,
not deletion authorization. Object-backed reports share one recovery observation
but do not provide a cross-object linearizable snapshot.
diagnostics fail closed if the strong snapshot changes during inspection;
until strong maintenance configuration is persisted, diagnostics use a
conservative zero-file retention default. Durable catalog backup and restore
are controlled durable-strong operations; backup artifacts record catalog and
referenced-object watermarks, while restore verifies them and retains a
recoverable intent when maintenance-state finalization is interrupted.
## Client Matrix