diff --git a/launcher/container_runner.go b/launcher/container_runner.go index 3657a405..190a85c9 100644 --- a/launcher/container_runner.go +++ b/launcher/container_runner.go @@ -359,7 +359,6 @@ func (r *ContainerRunner) measureMemoryMonitor() error { // to wait before attemping to refresh it. // The token file will be written to a tmp file and then renamed. func (r *ContainerRunner) refreshToken(ctx context.Context) (time.Duration, error) { - r.logger.Info("refreshing attestation verifier OIDC token") if err := r.attestAgent.Refresh(ctx); err != nil { return 0, fmt.Errorf("failed to refresh attestation agent: %v", err) } @@ -402,6 +401,7 @@ func (r *ContainerRunner) refreshToken(ctx context.Context) (time.Duration, erro if err != nil { return 0, fmt.Errorf("failed to format claims: %w", err) } + r.logger.Info("successfully refreshed attestation token") r.logger.Info(string(claimsString)) return getNextRefreshFromExpiration(time.Until(claims.ExpiresAt.Time), rand.Float64()), nil @@ -434,6 +434,7 @@ func (r *ContainerRunner) fetchAndWriteTokenWithRetry(ctx context.Context, r.logger.Info("token refreshing stopped") return case <-timer.C: + r.logger.Info("refreshing attestation verifier OIDC token") var duration time.Duration // Refresh token with default retry policy. err := backoff.RetryNotify(