Severity: Medium
Category
Data Safety
Files
internal/controller/periodicjobs/job_usernaut_offboarding.go:133-151
Description
If the exclusion list config file fails to load (file not found, HTTP error, parse error) the offboarding job proceeds with an empty exclusion list. Every user becomes eligible for offboarding. If the exclusion list URL is temporarily unreachable protected accounts could be removed.
Fix
If an exclusion list is configured but fails to load, treat it as a fatal error for that job run. Return an error from Run and skip offboarding entirely rather than proceeding without the list.
Severity: Medium
Category
Data Safety
Files
internal/controller/periodicjobs/job_usernaut_offboarding.go:133-151Description
If the exclusion list config file fails to load (file not found, HTTP error, parse error) the offboarding job proceeds with an empty exclusion list. Every user becomes eligible for offboarding. If the exclusion list URL is temporarily unreachable protected accounts could be removed.
Fix
If an exclusion list is configured but fails to load, treat it as a fatal error for that job run. Return an error from
Runand skip offboarding entirely rather than proceeding without the list.