Problem
4 PolicyBindings in production reference User 352457597745370893 which no longer exists. These bindings are stuck in SubjectValidationFailed state.
Examples
organization-chips-coding-uvwh3v/member-352457597745370893-... → User not found
organization-sf-zack-dbfxx9/member-352457597745370893-... → User not found
Expected behavior
When a User is deleted, all PolicyBindings that reference the user as a subject should be automatically cleaned up — either via owner references, a finalizer on the User, or a controller that watches for User deletions.
Impact
These orphaned bindings create noise in the PolicyBinding controller logs and inflate error counts on monitoring dashboards.
Discovered during
Authorization performance optimization work — tracking issue.
Problem
4 PolicyBindings in production reference User
352457597745370893which no longer exists. These bindings are stuck inSubjectValidationFailedstate.Examples
organization-chips-coding-uvwh3v/member-352457597745370893-...→ User not foundorganization-sf-zack-dbfxx9/member-352457597745370893-...→ User not foundExpected behavior
When a User is deleted, all PolicyBindings that reference the user as a subject should be automatically cleaned up — either via owner references, a finalizer on the User, or a controller that watches for User deletions.
Impact
These orphaned bindings create noise in the PolicyBinding controller logs and inflate error counts on monitoring dashboards.
Discovered during
Authorization performance optimization work — tracking issue.