Fix data race around static secret capability manager

hashicorp · Oct 9, 2024 · 338df3b · 338df3b
1 parent 60d7051
commit 338df3b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/command/agentproxyshared/cache/static_secret_capability_manager.go b/command/agentproxyshared/cache/static_secret_capability_manager.go
@@ -144,8 +144,8 @@ func (sscm *StaticSecretCapabilityManager) StartRenewingCapabilities(indexToRene
 		capabilitiesIndex.IndexLock.RLock()
 		token := capabilitiesIndex.Token
 		indexReadablePathsMap := capabilitiesIndex.ReadablePaths
-		capabilitiesIndex.IndexLock.RUnlock()
 		indexReadablePaths := maps.Keys(indexReadablePathsMap)
+		capabilitiesIndex.IndexLock.RUnlock()
 
 		client, err := sscm.client.Clone()
 		if err != nil {