Diagnostic code

ZC-E0817

an identity could not be issued

Kind

error

Blame

user

Exit code

1

What it means

A workload or server certificate was not made because its request breaks a bound: more labels than x509_labels_max, a label key or value over its limit or with a character that is not allowed, label keys not sorted and unique, labels together over x509_labels_bytes_max, a cluster or service name that does not make a SPIFFE ID spiffe://<cluster>/service/<name>, a DNS name that is not lowercase, has a wildcard or an all-digit label, or a lifetime that is empty or over x509_leaf_ttl_ms_max (x509_ca_ttl_ms_max for a CA), or a subject key that is not a valid Ed25519 public key (off the curve, or in a small subgroup), which no honest holder has.

The cause names the rule. Correct the request and issue again; nothing was written.

Offline

The same text, without a network:

zcube explain E0817