1 files changed, 21 insertions, 0 deletions
diff --git a/lib/gitlab/background_migration/remove_invalid_deploy_access_level_groups.rb b/lib/gitlab/background_migration/remove_invalid_deploy_access_level_groups.rb
new file mode 100644
index 00000000000..0a107a136b0
--- /dev/null
+++ b/lib/gitlab/background_migration/remove_invalid_deploy_access_level_groups.rb
@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+module Gitlab
+  module BackgroundMigration
+    # This class removes invalid `protected_environment_deploy_access_levels.group_id` records.
+    class RemoveInvalidDeployAccessLevelGroups < BatchedMigrationJob
+      operation_name :remove_invalid_deploy_access_level_groups
+      feature_category :database
+
+      scope_to ->(relation) do
+        relation.joins('INNER JOIN namespaces ON namespaces.id = protected_environment_deploy_access_levels.group_id')
+                .where.not(protected_environment_deploy_access_levels: { group_id: nil })
+                .where("namespaces.type = 'User'")
+      end
+
+      def perform
+        each_sub_batch(&:delete_all)
+      end
+    end
+  end
+end