zitadel/zitadel · error

%s get instance IDs: %w

Error message

%s get instance IDs: %w

What it means

The SetupWebkeys migration (setup step 59) failed querying instance IDs from the eventstore: the search for instance-added events (excluding instance-removed) could not be executed. This is a database/eventstore read failure that aborts the whole setup step before any webkeys are generated.

Source

Thrown at cmd/setup/59.go:34

	eventstore *eventstore.Eventstore
	commands   *command.Commands
}

func (mig *SetupWebkeys) Execute(ctx context.Context, _ eventstore.Event) error {
	instances, err := mig.eventstore.InstanceIDs(
		ctx,
		eventstore.NewSearchQueryBuilder(eventstore.ColumnsInstanceIDs).
			OrderDesc().
			AddQuery().
			AggregateTypes(instance.AggregateType).
			EventTypes(instance.InstanceAddedEventType).
			Builder().ExcludeAggregateIDs().
			AggregateTypes(instance.AggregateType).
			EventTypes(instance.InstanceRemovedEventType).
			Builder(),
	)
	if err != nil {
		return fmt.Errorf("%s get instance IDs: %w", mig, err)
	}
	conf := &crypto.WebKeyRSAConfig{
		Bits:   crypto.RSABits2048,
		Hasher: crypto.RSAHasherSHA256,
	}

	for _, instance := range instances {
		ctx := authz.WithInstanceID(ctx, instance)
		logging.Info(ctx, "prepare initial webkeys for instance", "instance", instance, "migration", mig)
		if err := mig.commands.GenerateInitialWebKeys(ctx, conf); err != nil {
			return fmt.Errorf("%s generate initial webkeys: %w", mig, err)
		}
	}
	return nil
}

func (mig *SetupWebkeys) String() string {
	return "59_setup_webkeys"

View on GitHub (pinned to 13948f2bcd)

Solutions

  1. Check database connectivity and eventstore health
  2. Inspect the wrapped error for the underlying SQL/query failure
  3. Rerun `zitadel setup` — the step is idempotent and will retry the query
Defensive patterns

Strategy: retry

When it happens

Trigger: Thrown at cmd/setup/59.go:34 when the library encounters an invalid state.

Common situations: See trigger scenarios.


AI-assisted analysis of zitadel/zitadel@13948f2bcd (2026-09-06). Data as JSON: /api/errors/79b7b6222d136505. Report an issue: GitHub.