Merge pull request #102871 from rainrambler/patch-1

kubeadm: use defer to unlock mutex in certs.go
This commit is contained in:
Kubernetes Prow Robot 2021-06-18 09:52:30 -07:00 committed by GitHub
commit ab7d8b5b5b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -477,12 +477,11 @@ func validateCertificateWithConfig(cert *x509.Certificate, baseName string, cfg
// by keeping track with a cache.
func CheckCertificatePeriodValidity(baseName string, cert *x509.Certificate) {
certPeriodValidationMutex.Lock()
defer certPeriodValidationMutex.Unlock()
if _, exists := certPeriodValidation[baseName]; exists {
certPeriodValidationMutex.Unlock()
return
}
certPeriodValidation[baseName] = struct{}{}
certPeriodValidationMutex.Unlock()
klog.V(5).Infof("validating certificate period for %s certificate", baseName)
if err := pkiutil.ValidateCertPeriod(cert, 0); err != nil {