Delete an auto scaling group (drains its instances first).
curl --request DELETE \ --url https://stratum.example.com/v1/projects/example/asg/groups/example \ --header 'Authorization: Bearer <token>'Desired state: desiredSize and minSize go to 0 and the group is
marked deleting; the reconciler terminates every instance (by the
termination policy, honouring drain) and drops the group once nothing is
left. Idempotent. Cedar-gated on asg:DeleteAutoScalingGroup.
Authorizations
Section titled “Authorizations”Parameters
Section titled “Parameters”Path Parameters
Section titled “Path Parameters”Responses
Section titled “Responses”Deletion scheduled; the group is returned in state=deleting.
object
asg-…
arn:stratum:asg:<region>:<projectId>:auto-scaling-group/<id>
The VPC every subnet is on; immutable.
Derived from the subnets (amended 2026-09-15), never stored.
$LATEST, $DEFAULT or an ltv-… id; resolved at every launch.
Holds back policy-driven scaling after a scaling action; customer set-desired, replace-unhealthy and delete are immediate.
api, policy:<id> or scheduled:<id> — what last moved desiredSize.
Why the controller’s most recent launch was refused (capacity, quota, a bad launch template); absent once a launch goes through. The group’s audit trail (asg.group.instance_launch_failed) has the history.
deleting while the reconciler drains the instances; the group disappears once drained.
object
The group’s owned front door: the spec as asked, what the reconciler has made of it, and the ids of the owned rows. status moves creating → active; updating while a spec change is applied (a scheme change replaces the load balancer, a listener change replaces the listener, a health-check change is applied in place); deleting while the set is torn down; error with reason when the last pass failed — it is retried every tick. Each id is recorded the moment its row exists, so a restart resumes rather than creating twice.
object
Prober config, passed through to the axlbd data plane. Property names are the data-plane JSONB contract (snake_case). The prober only runs when enabled; disabled or empty means every target is treated healthy and no probing happens.
object
HTTP health-check path, e.g. /healthz
Accepted status codes, e.g. “200”, “200,302”, “200-299”
object
The HTTPS listener’s certificate; absent for HTTP.
The load balancer’s DNS name, once it exists.
The load balancer’s VPC-internal address, once it exists.
Example
{ "healthCheckType": "instance", "terminationPolicies": [ "Default" ], "suspendedProcesses": [ "Launch" ], "state": "active", "loadBalancer": { "scheme": "internet-facing", "healthCheck": { "protocol": "http" }, "status": "creating" }}Authenticated but not authorized.
object
The findings of a rejected IAM policy document (custom and resource policies).
One finding of a rejected IAM policy document. A rejection lists every finding, so the author fixes the document in one round trip.
object
The finding, e.g. INVALID_DOCUMENT, UNKNOWN_ACTION, ACTION_NOT_APPLICABLE.
Index of the statement at fault; -1 for the document as a whole.
The offending action, where one is at fault (ACTION_NOT_APPLICABLE).
Field errors, for codes that carry them: each problem at its field
(see FieldError). Documented on the responses that set it, e.g.
approveNodeJoin’s INVALID_INPUT and JOIN_APPROVAL_REFUSED.
Absent otherwise.
One field’s problem, the stage-2 installer API’s shape.
field is the field’s path, message what is wrong with it.
object
The field’s path, e.g. links[0].interface, disks[1].confirm,
mgmt.address or role; empty for the whole request.
Structured facts about the refusal, for codes that carry them. The
shape is fixed per code and documented on the response that answers
it, e.g. IMAGE_POOL_MISMATCH (see ImagePoolMismatchDetails) and
IMAGE_IN_USE. Absent for codes that carry none.
object
Example
{ "issues": [ { "code": "ACTION_NOT_APPLICABLE", "action": "compute:CreateVpc" } ]}Resource not found.
object
The findings of a rejected IAM policy document (custom and resource policies).
One finding of a rejected IAM policy document. A rejection lists every finding, so the author fixes the document in one round trip.
object
The finding, e.g. INVALID_DOCUMENT, UNKNOWN_ACTION, ACTION_NOT_APPLICABLE.
Index of the statement at fault; -1 for the document as a whole.
The offending action, where one is at fault (ACTION_NOT_APPLICABLE).
Field errors, for codes that carry them: each problem at its field
(see FieldError). Documented on the responses that set it, e.g.
approveNodeJoin’s INVALID_INPUT and JOIN_APPROVAL_REFUSED.
Absent otherwise.
One field’s problem, the stage-2 installer API’s shape.
field is the field’s path, message what is wrong with it.
object
The field’s path, e.g. links[0].interface, disks[1].confirm,
mgmt.address or role; empty for the whole request.
Structured facts about the refusal, for codes that carry them. The
shape is fixed per code and documented on the response that answers
it, e.g. IMAGE_POOL_MISMATCH (see ImagePoolMismatchDetails) and
IMAGE_IN_USE. Absent for codes that carry none.
object
Example
{ "issues": [ { "code": "ACTION_NOT_APPLICABLE", "action": "compute:CreateVpc" } ]}