Run aclMaintainer once only when starting container

1 files changed, 1 insertions, 1 deletions

diff --git a/node-admin/src/main/java/com/yahoo/vespa/hosted/node/admin/nodeagent/NodeAgentImpl.java b/node-admin/src/main/java/com/yahoo/vespa/hosted/node/admin/nodeagent/NodeAgentImpl.java
index 2fccbc7038e..4b37678e376 100644
--- a/node-admin/src/main/java/com/yahoo/vespa/hosted/node/admin/nodeagent/NodeAgentImpl.java
+++ b/node-admin/src/main/java/com/yahoo/vespa/hosted/node/admin/nodeagent/NodeAgentImpl.java
@@ -232,7 +232,6 @@ public class NodeAgentImpl implements NodeAgent {
         if (! resumeScriptRun) {
             storageMaintainer.writeMetricsConfig(containerName, node);
             storageMaintainer.writeFilebeatConfig(containerName, node);
-            aclMaintainer.run();
             stopFilebeatSchedulerIfNeeded();
             currentFilebeatRestarter = Optional.of(filebeatRestarter.scheduleWithFixedDelay(
                     () -> serviceRestarter.accept("filebeat"), 1, 1, TimeUnit.DAYS));
@@ -490,6 +489,7 @@ public class NodeAgentImpl implements NodeAgent {
                     containerState = STARTING;
                     startContainer(node);
                     containerState = UNKNOWN;
+                    aclMaintainer.run();
                 }
 
                 runLocalResumeScriptIfNeeded(node);