An agent's revocation is pending

What it means#

An agent was revoked, or its new bundle withdrew an earlier credential, but the hub’s message server hasn’t applied the withdrawal yet. Until it does, the old credential can still connect.

What raises it#

The hub can’t confirm that the message server revoked the credential. It sends the revocation again every 60 seconds until the server applies it, and the hub’s log says why it fails.

What to check#

Read the hub’s warnings about the revocation:

$ weikio platform logs backend --since 15m --level warn

On a hub server, in the stack’s folder, run the checks, whose agent revocations line fails while the revocation of a revoked agent is pending:

$ docker compose run --rm infra weikio-backend doctor

How to fix it#

The usual cause is a message server that the hub can’t reach or that refuses the change. Fix what the log names, and the problem clears once the server applies the revocation.