backport of commit 029d151

changelog/27014.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+core: Address a data race updating a seal's last seen healthy time attribute
+```

vault/seal/seal_wrapper.go

@@ -51,29 +51,32 @@ type SealWrapper struct {
 
 func NewSealWrapper(wrapper wrapping.Wrapper, priority int, name string, sealConfigType string, disabled bool, configured bool) *SealWrapper {
 	ret := &SealWrapper{
-		Wrapper:        wrapper,
-		Priority:       priority,
-		Name:           name,
-		SealConfigType: sealConfigType,
-		Disabled:       disabled,
-		Configured:     configured,
+		Wrapper:         wrapper,
+		Priority:        priority,
+		Name:            name,
+		SealConfigType:  sealConfigType,
+		Disabled:        disabled,
+		Configured:      configured,
+		lastSeenHealthy: time.Now(),
+		healthy:         false,
 	}
 
 	if configured {
-		setHealth(ret, true, time.Now(), ret.lastHealthCheck)
-	} else {
-		setHealth(ret, false, time.Now(), ret.lastHealthCheck)
+		ret.healthy = true
 	}
 
 	return ret
 }
 
 func (sw *SealWrapper) SetHealthy(healthy bool, checkTime time.Time) {
+	sw.hcLock.Lock()
+	defer sw.hcLock.Unlock()
+
+	sw.healthy = healthy
+	sw.lastHealthCheck = checkTime
+
 	if healthy {
-		setHealth(sw, true, checkTime, checkTime)
-	} else {
-		// do not update lastSeenHealthy
-		setHealth(sw, false, sw.lastHealthCheck, checkTime)
+		sw.lastSeenHealthy = checkTime
 	}
 }
 
@@ -134,13 +137,3 @@ func getHealth(sw *SealWrapper) (healthy bool, lastSeenHealthy time.Time, lastHe
 
 	return sw.healthy, sw.lastSeenHealthy, sw.lastHealthCheck
 }
-
-// setHealth is the only function allowed to mutate the health fields
-func setHealth(sw *SealWrapper, healthy bool, lastSeenHealthy, lastHealthCheck time.Time) {
-	sw.hcLock.Lock()
-	defer sw.hcLock.Unlock()
-
-	sw.healthy = healthy
-	sw.lastSeenHealthy = lastSeenHealthy
-	sw.lastHealthCheck = lastHealthCheck
-}