rule: Ensure rule matcher is locked before updating (#159)

Lock CachedMatcher before rules are updated when HTTPMatcher refreshes to avoid concurrent map iteration and map write errors.

Signed-off-by: Julian Tescher <[email protected]>

rule/matcher_cached_http.go

@@ -52,6 +52,8 @@ func (m *HTTPMatcher) Refresh() error {
 		return errors.Errorf("unable to fetch rules from backend, got status code %d but expected %d", response.StatusCode, http.StatusOK)
 	}
 
+	m.Lock()
+	defer m.Unlock()
 	inserted := map[string]bool{}
 	for _, r := range rules {
 		if len(r.Match.Methods) == 0 {