Abstract: The disclosure describes a system for enforcing role-based access control in a multi-tenant compute cluster with cross-namespace references. A control plane of the compute cluster receives a custom-resource request from a tenant to create or modify a first custom resource in a tenant namespace. The first custom resource references if a second custom resource in an administrative namespace. In response to the request, the control plane transmits a validating admission request to a data-protection controller registered as a webhook endpoint for admission validation. The data-protection controller retrieves access metadata from the referenced second custom resource and generates an admission determination indicating whether the tenant's request satisfies cross-namespace access conditions defined in the metadata. The controller returns the admission determination to the control plane, which admits or denies the custom-resource request accordingly.

Abstract: Systems, methods, and software are disclosed herein for phased-in restoration of an application hosted on a cloud orchestration platform in various implementations. In an implementation, a computing apparatus receives a configuration for a multiphase restoration process for restoring resources of an application to a destination platform, the restoration occurring in phases. To implement the multiphase restoration process, the computing apparatus captures a backup of application data of the application, then restores a phase including selected resources of the application to the destination platform based on the backup and according to the configuration. The computing apparatus validates the selected resources at the destination platform, then restores a next phase to the destination platform based on the backup and according to the configuration.

Abstract: A system can comprise a memory that stores computer executable components, and a processor that executes the computer executable components stored in the memory. The computer executable components can comprise a correlation component that, based on performance data, such as current performance data and/or historical performance data, for an application stored at a storage system, correlates a performance category with the application, and an execution component that, based on the performance category correlated to the application, executes a modification at the storage system, wherein the modification at the storage system comprises changing a functioning of the storage system relative to the application. In an embodiment, the data comprised by the application can be maintained in a non-accessed state to execute the modification at the storage system.

Abstract: A system can comprise a memory that stores computer executable components, and a processor that executes the computer executable components stored in the memory. The computer executable components can comprise a correlation component that, based on performance data, such as current performance data and/or historical performance data, for an application stored at a storage system, correlates a performance category with the application, and an execution component that, based on the performance category correlated to the application, executes a modification at the storage system, wherein the modification at the storage system comprises changing a functioning of the storage system relative to the application. In an embodiment, the data comprised by the application can be maintained in a non-accessed state to execute the modification at the storage system.

Abstract: A system can comprise a memory that stores computer executable components, and a processor that executes the computer executable components stored in the memory. The computer executable components can comprise a correlation component that, based on performance data, such as current performance data and/or historical performance data, for an application stored at a storage system, correlates a performance category with the application, and an execution component that, based on the performance category correlated to the application, executes a modification at the storage system, wherein the modification at the storage system comprises changing a functioning of the storage system relative to the application. In an embodiment, the data comprised by the application can be maintained in a non-accessed state to execute the modification at the storage system.

Abstract: Methods, non-transitory machine readable media, and computing devices that assign a quality of service (QoS) policy to an instantiated storage object. The assigned QoS policy includes a throughput parameter including a number of input/output (I/O) operations per second (IOPS) based on a storage operation block size. Storage operations are executed with the storage object according to the throughput parameter. Metadata is monitored including a size attribute of the storage object. The QoS policy is then automatically modified to adjust the throughput parameter based on the size attribute. This technology configures, manages, and scales performance provided to storage objects based on a monitored used or allocated size of the storage objects.

Abstract: Methods, non-transitory machine readable media, and computing devices that assign a quality of service (QoS) policy to an instantiated storage object. The assigned QoS policy includes a throughput parameter including a number of input/output (I/O) operations per second (IOPS) based on a storage operation block size. Storage operations are executed with the storage object according to the throughput parameter. Metadata is monitored including a size attribute of the storage object. The QoS policy is then automatically modified to adjust the throughput parameter based on the size attribute. This technology configures, manages, and scales performance provided to storage objects based on a monitored used or allocated size of the storage objects.

Abstract: A method, non-transitory computer readable medium, and device that assists with dynamic resource reservation based on classified input/output requests includes receiving an input/output request from a client computing device. The input/output request is classified as a first priority request, wherein the first priority request has priority to a second priority request. A deadline time period to execute the received input/output request classified as the first priority request is determined and the first priority request is added to a first priority queue. The first priority request in the first priority queue is processed by assigning a plurality of reserved resources.