Opensearch CPU spike due to permissions logs on Dedicated Tenant

Summary

During Dedicated Capacity planning shift, I found this issue on a specific tenant middle_purple_beaver: https://gitlab.com/gitlab-com/gl-infra/capacity-planning-trackers/gitlab-dedicated/-/work_items/613#note_3065313671

Starting from 29/01/26, sidekiq is emitting tons of logs in batch that cause spike on opensearch CPU.

Those jobs are related to feature category = permission.

More info here

Impact

Opensearch CPU is always breaching the soft and hard SLO

Recommendation

Verification

To verifiy this, check the opensearch logs and grafana dashboards on the link attached to the capacity planning investigation

/cc @denhams @ajaythomasinc @reprazent @stejacks-gitlab @lmcandrew