fix: ensure proper locking in handleBatchConfigEvent for safe config updates

Signed-off-by: Evsyukov Denis <[email protected]>

Author: Evsyukov Denis

pkg/kube_config_manager/kube_config_manager.go

@@ -324,10 +324,12 @@ func (kcm *KubeConfigManager) handleBatchConfigEvent(obj config.Event) {
 		return
 	}
 
+	// Lock to read known checksums and update config.
+	kcm.m.Lock()
+	defer kcm.m.Unlock()
+
 	if obj.Key == "" {
 		// Config backend was reset
-		kcm.m.Lock()
-		defer kcm.m.Unlock()
 		kcm.currentConfig = config.NewConfig()
 		kcm.configEventCh <- config.KubeConfigEvent{
 			Type: config.KubeConfigChanged,
@@ -337,10 +339,6 @@ func (kcm *KubeConfigManager) handleBatchConfigEvent(obj config.Event) {
 
 	newConfig := obj.Config
 
-	// Lock to read known checksums and update config.
-	kcm.m.Lock()
-	defer kcm.m.Unlock()
-
 	globalChanged := kcm.isGlobalChanged(newConfig)
 
 	// Parse values in module sections, create new ModuleConfigs and checksums map.