the request field that holds the rejected value, here name.
Cause. The token name is empty after leading and trailing blanks are removed, is longer than 64 characters, or contains a control character.
Remedy.
Give the token a name of 1 to 64 characters without control characters.
Create the token again: kyvernon auth api-tokens create <name> for your own account, or kyvernon users api-tokens <username> create <name> for another account.
error.api_token.limit
Text in the console
This account already has {max} API tokens. Remove one before creating another.
the request field that holds the rejected value, here ttlSeconds.
max
the longest lifetime in seconds.
Cause. The requested lifetime is zero, or longer than the maximum that the controller allows. The maximum is the setting api_token_max_ttl in the [identity.policy] section of the controller configuration (365 days by default).
Remedy.
Request a lifetime of at least one second and at most the value shown in the message: kyvernon auth api-tokens create <name> --ttl <seconds>.
Leave --ttl out to take the maximum of the controller.
When a longer lifetime is needed, an administrator raises api_token_max_ttl. Pass on the message id error.api_token.ttl and the lifetime you need.