ROX-35013: Replace full-table Walks with targeted WalkByQuery in compliance operator manager

[dashrews78]

Added search tags to ComplianceOperatorProfile name and cluster_id
fields, enabled search category 201 on the profile store, and replaced
3 of 4 full-table Walk calls in the manager with WalkByQuery filtered
by profile name or cluster ID.

addProfileNoLock: Walk all profiles → WalkByQuery(name = X), filter
cluster in callback. Reduces O(N) table scan to indexed query.
DeleteProfile: Walk all profiles → WalkByQuery(name = X), same pattern.
GetMachineConfigs: Walk all profiles → WalkByQuery(clusterId = X).
findProfilesWithRuleNoLock: Unchanged (searches inside repeated field).

Benchmark (20 clusters, 200 profiles concurrent):
master: 234ms, 316MB, 3.39M allocs
WalkByQuery: 103ms, 40MB, 449K allocs
Improvement: 2.3x faster, 8x less memory, 7.5x fewer allocations

Partially generated by AI.

Co-Authored-By: Claude Opus 4.6 (1M context) noreply@anthropic.com

Description

change me!

User-facing documentation

• CHANGELOG.md is updated OR update is not needed
• documentation PR is created and is linked above OR is not needed

Testing and quality

• the change is production ready: the change is GA, or otherwise the functionality is gated by a feature flag
• CI results are inspected

Automated testing

• added unit tests
• added e2e tests
• added regression tests
• added compatibility tests
• modified existing tests

How I validated my change

change me!

[dashrews78]

This change is part of the following stack:

• ROX-35012: Fix V1 compliance operator startup panic and convoy #21058
  • ROX-35013: Replace full-table Walks with targeted WalkByQuery in compliance operator manager #21059 ◀

_{Change managed by git-spice.}

[openshift-ci]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Enterprise

Run ID: a10a9035-bc1c-4d6f-a6d0-edd95743b561

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dashrews/compliance-v1-query-not-walk

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

🚀 Build Images Ready

Images are ready for commit d668412. To use with deploy scripts:

export MAIN_IMAGE_TAG=4.12.x-147-gd668412785