From 704a104397546a4e6cbbcf87c46cbbc8d29335b8 Mon Sep 17 00:00:00 2001
From: Gavin Frazar <gavin.frazar@goteleport.com>
Date: Wed, 26 Apr 2023 09:41:36 -0700
Subject: [PATCH] Move db cert renewal message to debug log (#25097)

---
 lib/client/local_proxy_middleware.go | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/lib/client/local_proxy_middleware.go b/lib/client/local_proxy_middleware.go
index 07e20239f71..edf4e4ecc1e 100644
--- a/lib/client/local_proxy_middleware.go
+++ b/lib/client/local_proxy_middleware.go
@@ -123,8 +123,7 @@ func (c *DBCertChecker) renewCerts(ctx context.Context, lp *alpnproxy.LocalProxy
 		return trace.Wrap(err)
 	}
 	certTTL := leaf.NotAfter.Sub(c.clock.Now()).Round(time.Minute)
-	fmt.Fprintf(c.tc.Stderr,
-		"Database certificate renewed: valid until %s [valid for %v]\n",
+	log.Debugf("Database certificate renewed: valid until %s [valid for %v]",
 		leaf.NotAfter.Format(time.RFC3339), certTTL)
 	// reduce per-handshake processing by setting the parsed leaf.
 	tlsCert.Leaf = leaf