Skip to content

Orphaned PolicyBindings for deleted Users not garbage collected #536

@scotwells

Description

@scotwells

Problem

4 PolicyBindings in production reference User 352457597745370893 which no longer exists. These bindings are stuck in SubjectValidationFailed state.

Examples

  • organization-chips-coding-uvwh3v/member-352457597745370893-... → User not found
  • organization-sf-zack-dbfxx9/member-352457597745370893-... → User not found

Expected behavior

When a User is deleted, all PolicyBindings that reference the user as a subject should be automatically cleaned up — either via owner references, a finalizer on the User, or a controller that watches for User deletions.

Impact

These orphaned bindings create noise in the PolicyBinding controller logs and inflate error counts on monitoring dashboards.

Discovered during

Authorization performance optimization work — tracking issue.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions