spiffe / spire

The SPIFFE Runtime Environment
https://spiffe.io
Apache License 2.0
1.81k stars 478 forks source link

Stop preparing a new authority before tainting #5614

Closed MarcosDY closed 3 weeks ago

MarcosDY commented 3 weeks ago

The Fake upstream authority is creating a new authority upon receiving a tainted notification. This causes a race condition where Prepare attempts to sign the new authority simultaneously, resulting in unexpected flakiness in tests. This PR addresses the issue to ensure stable and consistent behavior.