Optimize username resolution with durable identities (#1320)

List users by quering the users table.
The previous method of querying lots of different tables that have a "users" field in them was very inefficent and slow

Author: ecolternv

deployments/charts/service/migrations/007_v6_4_0_users_backfill.json

@@ -0,0 +1,9 @@
+{
+  "operations": [
+    {
+      "sql": {
+        "up": "LOCK TABLE public.users, public.workflows, public.apps, public.app_versions, public.credential IN SHARE ROW EXCLUSIVE MODE; DO $$ BEGIN IF EXISTS (SELECT 1 FROM public.users WHERE id = '') OR EXISTS (SELECT 1 FROM public.workflows WHERE submitted_by = '') OR EXISTS (SELECT 1 FROM public.apps WHERE owner = '') OR EXISTS (SELECT 1 FROM public.app_versions WHERE created_by = '') THEN RAISE EXCEPTION 'empty persistent user identity'; END IF; INSERT INTO public.users (id, created_by) SELECT historical.id, 'migration' FROM (SELECT submitted_by AS id FROM public.workflows WHERE submitted_by IS NOT NULL UNION SELECT owner AS id FROM public.apps WHERE owner IS NOT NULL UNION SELECT created_by AS id FROM public.app_versions WHERE created_by IS NOT NULL) AS historical ON CONFLICT (id) DO NOTHING; DELETE FROM public.credential AS credential WHERE NOT EXISTS (SELECT 1 FROM public.users WHERE users.id = credential.user_name); IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conrelid = 'public.credential'::regclass AND conname = 'credential_user_name_fkey') THEN ALTER TABLE public.credential ADD CONSTRAINT credential_user_name_fkey FOREIGN KEY (user_name) REFERENCES public.users(id) ON DELETE CASCADE NOT VALID; END IF; ALTER TABLE public.credential VALIDATE CONSTRAINT credential_user_name_fkey; END $$; CREATE INDEX IF NOT EXISTS users_base_username_id_idx ON public.users ((split_part(id, '@', 1)), id)"
+      }
+    }
+  ]
+}

deployments/charts/service/migrations/BUILD

@@ -0,0 +1,21 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# SPDX-License-Identifier: Apache-2.0
+
+filegroup(
+    name = "migration_files",
+    srcs = glob(["*.json"]),
+    visibility = ["//deployments/charts/service/migrations/tests:__pkg__"],
+)

deployments/charts/service/migrations/tests/BUILD

@@ -0,0 +1,32 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# SPDX-License-Identifier: Apache-2.0
+
+load("//bzl:py.bzl", "osmo_py_test")
+load("@osmo_python_deps//:requirements.bzl", "requirement")
+
+osmo_py_test(
+    name = "test_users_backfill_migration",
+    srcs = ["test_users_backfill_migration.py"],
+    data = ["//deployments/charts/service/migrations:migration_files"],
+    deps = [
+        "//src/tests/common",
+        "//src/utils/connectors",
+        "@rules_python//python/runfiles",
+        requirement("psycopg2-binary"),
+    ],
+    size = "medium",
+    tags = ["requires-network"],
+)