Skip to content

Workload Credential Not Active

URI: https://docs.ankatech.co/errors/workload-credential-not-active
HTTP Status: 409 Conflict

When you see this

A rotation named a workload credential that is not ACTIVE. Only an ACTIVE key has a successor; a key in its grace window (ROTATING_OUT) or REVOKED cannot be rotated again.

Common Causes

  • The key was already rotated, and its grace window is running.
  • The key was revoked.

Response Example

{
  "type": "https://docs.ankatech.co/errors/workload-credential-not-active",
  "title": "Workload Credential Not Active",
  "status": 409,
  "detail": "Only an ACTIVE credential can be rotated. This credential is already rotating out or revoked.",
  "instance": "/api/v3/admin/tenants/7d2f4a10-9c31-4b8e-a5d6-2f11c0b47e93/workloads/9b2f6c1e-3d4a-4c8b-a1e7-5f0d2c9b8a71/credentials/9tmXKovmgVzC6lB8doVODpucSK_r_7BWspgauk7Tfso/rotate",
  "timestamp": 1730000000,
  "extensions": {
    "requestId": "550e8400-e29b-41d4-a716-446655440000"
  }
}

Content-Type: application/problem+json — the response follows RFC 9457 Problem Details.

How to Resolve

  1. Read the workload and rotate its ACTIVE key instead.
  2. To add a key without retiring another, register it with the create-credential operation.

For full schema definitions, examples, and interactive testing, see the Developer Hub Reference.