From 4287706ce13d82eb8355d37ed026bb63567d16a4 Mon Sep 17 00:00:00 2001
From: Alex Dadgar <alex.dadgar@gmail.com>
Date: Thu, 1 Dec 2016 11:13:36 -0800
Subject: [PATCH] Disallow stale queries when deriving Vault tokens

This PR disallows stale queries when deriving a Vault token. Allowing
stale queries could result in the allocation not existing on the server
that is servicing the request.
---
 client/client.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/client/client.go b/client/client.go
index 71e94cf53a7..e691b972ccd 100644
--- a/client/client.go
+++ b/client/client.go
@@ -1795,7 +1795,7 @@ func (c *Client) deriveToken(alloc *structs.Allocation, taskNames []string, vcli
 		Tasks:    verifiedTasks,
 		QueryOptions: structs.QueryOptions{
 			Region:     c.Region(),
-			AllowStale: true,
+			AllowStale: false,
 		},
 	}