Add base images from the catalog (admin).
curl --request POST \ --url https://stratum.example.com/v1/images/base-images/actions/add \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data '{ "names": [ "ubuntu-26-04-cloud", "debian-13-genericcloud" ], "storageClass": "example" }'Records a global image import for each named entry that is
not already registered or importing, and answers every named entry
with its standing afterwards (202). The import is the URL import of
POST /v1/images: the lifecycle worker downloads the pinned build,
checks its size and sha256 before anything is written, and imports it
into the default storage class (or storageClass). An entry that
failed before is replaced: its image is deleted and a new import
recorded. An entry whose name another image holds is left alone and
answered nameTaken.
A download the network does not deliver (no route, no answer within
15 s, no data for 60 s, an HTTP error) fails the image in seconds with
stateReason Not downloaded: <reason>..
An unknown or repeated name refuses the whole request (400).
Authorizations
Section titled “Authorizations”Request Bodyrequired
Section titled “Request Bodyrequired”object
Catalog entry names to add. Each at most once.
Example
[ "ubuntu-26-04-cloud", "debian-13-genericcloud"]Storage class to import into. Default is the default class.
Responses
Section titled “Responses”Each named entry’s standing after the request.
object
One entry of the base-image catalog: a cloud image pinned to a dated upstream build by URL, size and sha256, and where it stands on this install.
object
The image name an added entry is registered under.
The pinned upstream build.
Size of the download, checked before the import.
SHA-256 of the download, checked before the import.
Where the control plane downloads the image from.
Where the entry stands on this install:
available: nothing is registered for it; it can be added.importing: its image is being downloaded or imported.registered: an image of the pinned build is registered (matched by sha256, whatever its name or source).failed: its import failed (stateReasonsays why). Adding it again replaces the failed image.nameTaken: another image holds the name. Delete or rename it to add the entry.
The image the status is about. Absent when available.
That image’s state.
Why that image failed, for example Not downloaded: no internet access. when the control plane cannot reach the upstream server.
Example
{ "items": [ { "name": "ubuntu-26-04-cloud", "displayName": "Ubuntu 26.04 LTS", "osDistribution": "ubuntu", "osVersion": "26.04", "version": "20260927", "format": "qcow2", "architecture": "amd64", "status": "available", "imageState": "pending" } ]}Bad request.
object
The findings of a rejected IAM policy document (custom and resource policies).
One finding of a rejected IAM policy document. A rejection lists every finding, so the author fixes the document in one round trip.
object
The finding, e.g. INVALID_DOCUMENT, UNKNOWN_ACTION, ACTION_NOT_APPLICABLE.
Index of the statement at fault; -1 for the document as a whole.
The offending action, where one is at fault (ACTION_NOT_APPLICABLE).
Field errors, for codes that carry them: each problem at its field
(see FieldError). Documented on the responses that set it, e.g.
approveNodeJoin’s INVALID_INPUT and JOIN_APPROVAL_REFUSED.
Absent otherwise.
One field’s problem, the stage-2 installer API’s shape.
field is the field’s path, message what is wrong with it.
object
The field’s path, e.g. links[0].interface, disks[1].confirm,
mgmt.address or role; empty for the whole request.
Structured facts about the refusal, for codes that carry them. The
shape is fixed per code and documented on the response that answers
it, e.g. IMAGE_POOL_MISMATCH (see ImagePoolMismatchDetails) and
IMAGE_IN_USE. Absent for codes that carry none.
object
Example
{ "issues": [ { "code": "ACTION_NOT_APPLICABLE", "action": "compute:CreateVpc" } ]}Authenticated but not authorized.
object
The findings of a rejected IAM policy document (custom and resource policies).
One finding of a rejected IAM policy document. A rejection lists every finding, so the author fixes the document in one round trip.
object
The finding, e.g. INVALID_DOCUMENT, UNKNOWN_ACTION, ACTION_NOT_APPLICABLE.
Index of the statement at fault; -1 for the document as a whole.
The offending action, where one is at fault (ACTION_NOT_APPLICABLE).
Field errors, for codes that carry them: each problem at its field
(see FieldError). Documented on the responses that set it, e.g.
approveNodeJoin’s INVALID_INPUT and JOIN_APPROVAL_REFUSED.
Absent otherwise.
One field’s problem, the stage-2 installer API’s shape.
field is the field’s path, message what is wrong with it.
object
The field’s path, e.g. links[0].interface, disks[1].confirm,
mgmt.address or role; empty for the whole request.
Structured facts about the refusal, for codes that carry them. The
shape is fixed per code and documented on the response that answers
it, e.g. IMAGE_POOL_MISMATCH (see ImagePoolMismatchDetails) and
IMAGE_IN_USE. Absent for codes that carry none.
object
Example
{ "issues": [ { "code": "ACTION_NOT_APPLICABLE", "action": "compute:CreateVpc" } ]}