fix bug in which vault altered a canonical ID belonging to an alias, …

…not a clone (#27824)
hashicorp · Jul 26, 2024 · 9274d74 · 9274d74
1 parent a41c21b
commit 9274d74
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/vault/identity_store_aliases.go b/vault/identity_store_aliases.go
@@ -247,7 +247,7 @@ func (i *IdentityStore) handleAliasCreateUpdate() framework.OperationFunc {
 		if mountEntry.NamespaceID != ns.ID {
 			return logical.ErrorResponse("matching mount is in a different namespace than request"), logical.ErrPermissionDenied
 		}
-		alias, err := i.MemDBAliasByFactors(mountAccessor, name, false, false)
+		alias, err := i.MemDBAliasByFactors(mountAccessor, name, true, false)
 		if err != nil {
 			return nil, err
 		}