Skip to content

Orphaned PolicyBindings for deleted Users not garbage collected #536

@scotwells

Description

@scotwells

Problem

4 PolicyBindings in production reference User 352457597745370893 which no longer exists. These bindings are stuck in SubjectValidationFailed state.

Examples

  • organization-chips-coding-uvwh3v/member-352457597745370893-... → User not found
  • organization-sf-zack-dbfxx9/member-352457597745370893-... → User not found

Expected behavior

When a User is deleted, all PolicyBindings that reference the user as a subject should be automatically cleaned up — either via owner references, a finalizer on the User, or a controller that watches for User deletions.

Impact

These orphaned bindings create noise in the PolicyBinding controller logs and inflate error counts on monitoring dashboards.

Discovered during

Authorization performance optimization work — tracking issue.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions