From 3262fdedeadd52e53d3b0dfa6b8c59d23cd19340 Mon Sep 17 00:00:00 2001
From: novahe <heqianfly@gmail.com>
Date: Sun, 30 Mar 2025 10:46:59 +0800
Subject: [PATCH] Certificate store: ensure data is written to disk

Kubernetes-commit: 653f48d8867d0b8487e3f824b3680ddc7d85758f
---
 util/certificate/certificate_store.go | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/util/certificate/certificate_store.go b/util/certificate/certificate_store.go
index 4f9d5db0..d4fef54e 100644
--- a/util/certificate/certificate_store.go
+++ b/util/certificate/certificate_store.go
@@ -231,6 +231,11 @@ func (s *fileStore) Update(certData, keyData []byte) (*tls.Certificate, error) {
 	}
 	pem.Encode(f, keyBlock)
 
+	// Ensure data is written to disk
+	if err := f.Sync(); err != nil {
+		return nil, fmt.Errorf("failed to sync certificate data to disk: %w (file: %q)", err, certPath)
+	}
+
 	cert, err := loadFile(certPath)
 	if err != nil {
 		return nil, err