From f8e953ca09cd0356f1822effdb3ccbe4ec6d2f6f Mon Sep 17 00:00:00 2001
From: Jo Garnier <git@jguer.space>
Date: Mon, 27 Oct 2025 10:08:18 +0000
Subject: [PATCH] fix ticket priming in hooks

---
 pkg/registry/apis/iam/hooks.go | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkg/registry/apis/iam/hooks.go b/pkg/registry/apis/iam/hooks.go
index 6cb0ba016df..46b522ed57e 100644
--- a/pkg/registry/apis/iam/hooks.go
+++ b/pkg/registry/apis/iam/hooks.go
@@ -758,12 +758,12 @@ func (b *IdentityAccessManagementAPIBuilder) BeginRoleUpdate(ctx context.Context
 
 		// Grab a ticket to write to Zanzana
 		wait := time.Now()
-		b.zTickets <- true
+		<-b.zTickets
 		hooksWaitHistogram.WithLabelValues(roleType, "update").Observe(time.Since(wait).Seconds()) // Record wait time
 
 		go func() {
 			defer func() {
-				<-b.zTickets
+				b.zTickets <- true
 			}()
 
 			b.logger.Debug("updating role permissions in zanzana",