omni/internal
Utku Ozdemir 1bbe869bb7
fix: clean up stale identity last active resources on identity removal
Add a cleanup controller that removes the identity last active resource when its corresponding identity is destroyed. This covers all identity types uniformly: users, service accounts, and infra providers.

Previously, users and service accounts had manual cleanup in their destroy paths, but infra providers did not, leaving orphaned resources. Remove the manual cleanup from user and service account destruction, as the controller now handles it.

Add a migration to remove any already-orphaned identity last active resources that have no matching identity.

Signed-off-by: Utku Ozdemir <utku.ozdemir@siderolabs.com>
2026-03-27 15:20:56 +01:00
..
2026-01-21 15:30:49 +01:00