Properly invalidate group alias in a secondary (#6564)

hashicorp · Apr 10, 2019 · 41a7517 · 41a7517
1 parent 9e08b35
commit 41a7517
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/vault/identity_store.go b/vault/identity_store.go
@@ -207,6 +207,14 @@ func (i *IdentityStore) Invalidate(ctx context.Context, key string) {
 				i.logger.Error("failed to delete group from MemDB", "group_id", group.ID, "error", err)
 				return
 			}
+
+			if group.Alias != nil {
+				err := i.MemDBDeleteAliasByIDInTxn(txn, group.Alias.ID, true)
+				if err != nil {
+					i.logger.Error("failed to delete group alias from MemDB", "error", err)
+					return
+				}
+			}
 		}
 
 		// Get the storage bucket entry