pre-delete changed entity in invalidation

hashicorp · Jul 24, 2024 · 6e7aea6 · 6e7aea6
1 parent eb7df5f
commit 6e7aea6
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/vault/identity_store.go b/vault/identity_store.go
@@ -742,6 +742,11 @@ func (i *IdentityStore) invalidateEntityBucket(ctx context.Context, key string)
 					i.logger.Error("failed to remove entity aliases from changed entity", "entity_id", memDBEntity.ID, "error", err)
 					return
 				}
+
+				if err := i.MemDBDeleteEntityByIDInTxn(txn, memDBEntity.ID); err != nil {
+					i.logger.Error("failed to delete changed entity", "entity_id", memDBEntity.ID, "error", err)
+					return
+				}
 			}
 
 			err = i.upsertEntityInTxn(ctx, txn, bucketEntity, nil, false)