don't log exception when waiting for certificates to be available

1 files changed, 5 insertions, 2 deletions

diff --git a/controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/integration/certificates/EndpointCertificateValidatorImpl.java b/controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/integration/certificates/EndpointCertificateValidatorImpl.java
index ecea1ce6913..dbb207d6607 100644
--- a/controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/integration/certificates/EndpointCertificateValidatorImpl.java
+++ b/controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/integration/certificates/EndpointCertificateValidatorImpl.java
@@ -69,8 +69,11 @@ public class EndpointCertificateValidatorImpl implements EndpointCertificateVali
             // Normally because the cert is in the process of being provisioned - this will cause a retry in InternalStepRunner
             throw new EndpointCertificateException(EndpointCertificateException.Type.CERT_NOT_AVAILABLE, "Certificate not found in secret store");
         } catch (EndpointCertificateException e) {
-            log.log(Level.WARNING, "Certificate validation failure for " + serializedInstanceId, e);
-            throw e;
+            if (e.type().equals(EndpointCertificateException.Type.CERT_NOT_AVAILABLE)) {
+                throw e; // such failures are normal and will be retried, it takes some time to show up in the secret store
+            } else {
+                log.log(Level.WARNING, "Certificate validation failure for " + serializedInstanceId, e);
+            }
         } catch (Exception e) {
             log.log(Level.WARNING, "Certificate validation failure for " + serializedInstanceId, e);
             throw new EndpointCertificateException(EndpointCertificateException.Type.VERIFICATION_FAILURE, "Certificate validation failure for app " + serializedInstanceId, e);