Diagnostic code

ZC-E0801

a peer's credential is not signed by this cluster

Kind

error

Blame

external

Exit code

3

What it means

A node presented a credential that the cluster's certificate authority did not sign: its key id is not this cluster's, or its signature does not verify. The connection was closed before anything was exchanged.

The control plane is the authority. A node gets its credential when its agent joins (POST /v1/agent/nodes/<node>/credential). A node that never joined, or joined a different cluster, is refused by every peer.

Check that the node's agent talks to this cluster's server, and that its ca.pub in the agent state directory is the one this server serves. Deleting the agent's peer.cred makes it join again.

Offline

The same text, without a network:

zcube explain E0801