Rewrite the query to retrieve LFS objects using CTE

ee/app/models/geo/fdw/geo_node.rb

@@ -35,7 +35,20 @@ module Geo
       def lfs_objects
         return Geo::Fdw::LfsObject.all unless selective_sync?
 
-        Geo::Fdw::LfsObject.project_id_in(projects)
+        query = Geo::Fdw::LfsObjectsProject.project_id_in(projects).select(:lfs_object_id)
+        cte = Gitlab::SQL::CTE.new(:restricted_lfs_objects, query)
+        fdw_lfs_object_table = Geo::Fdw::LfsObject.arel_table
+
+        inner_join_restricted_lfs_objects =
+          cte.table
+            .join(fdw_lfs_object_table, Arel::Nodes::InnerJoin)
+            .on(cte.table[:lfs_object_id].eq(fdw_lfs_object_table[:id]))
+            .join_sources
+
+        Geo::Fdw::LfsObject
+          .with(cte.to_arel)
+          .from(cte.table)
+          .joins(inner_join_restricted_lfs_objects)
       end
 
       def lfs_object_registries

ee/app/models/geo/fdw/lfs_objects_project.rb

@@ -7,6 +7,8 @@ module Geo
 
       belongs_to :lfs_object, class_name: 'Geo::Fdw::LfsObject', inverse_of: :projects
       belongs_to :project, class_name: 'Geo::Fdw::Project', inverse_of: :lfs_objects
+
+      scope :project_id_in, ->(ids) { joins(:project).merge(Geo::Fdw::Project.id_in(ids)) }
     end
   end
 end