Skip to content

Resolve the effective custom-shape policy for a launch.

GET
/v1/projects/{projectId}/regions/{region}/custom-shape-policy
Code sample: Shell / cURL
curl --request GET \
--url https://stratum.example.com/v1/projects/example/regions/example/custom-shape-policy \
--header 'Authorization: Bearer <token>'

Returns the folded view CreateInstance applies to a custom- shape launch in this (project, region) pair. enabledScope names which level supplied the enabled value so a customer rejected by the policy gate knows exactly where to ask for the override. Cedar action: compute:GetEffectiveCustomShapePolicy..

projectId
required
string
/^p-[a-z0-9-]+$/
region
required
string
/^[a-z][a-z0-9]+(-[a-z0-9]+)*$/

The resolved effective policy for this scope.

Media typeapplication/json

The folded view CreateInstance enforces against a custom- shape launch. Every field resolved against the project -> region -> install precedence chain. enabledScope names which scope supplied the enabled value so customers rejected by the gate know exactly where to ask for the override..

object
projectId
required
string
region
required
string
enabled
required
boolean
enabledScope
required
string
Allowed values: install region project ""
minVcpus
required
integer
maxVcpus
required
integer
minMemoryMib
required
integer
maxMemoryMib
required
integer
alignmentMib
required
integer
standardMinMibPerVcpu
required
integer
standardMaxMibPerVcpu
required
integer
extendedEnabled
required
boolean
extendedMaxMibPerVcpu
required
integer

Example

{
"enabledScope": "install"
}

Authenticated but not authorized.

Media typeapplication/problem+json
object
type
required
string format: uri
title
required
string
status
required
integer
>= 400 <= 599
detail
string
instance
string format: uri-reference
requestId
required
string
code
required
string
issues

The findings of a rejected IAM policy document (custom and resource policies).

Array<object>

One finding of a rejected IAM policy document. A rejection lists every finding, so the author fixes the document in one round trip.

object
code
required

The finding, e.g. INVALID_DOCUMENT, UNKNOWN_ACTION, ACTION_NOT_APPLICABLE.

string
statement
required

Index of the statement at fault; -1 for the document as a whole.

integer
>= -1
detail
required
string
action

The offending action, where one is at fault (ACTION_NOT_APPLICABLE).

string
errors

Field errors, for codes that carry them: each problem at its field (see FieldError). Documented on the responses that set it, e.g. approveNodeJoin’s INVALID_INPUT and JOIN_APPROVAL_REFUSED. Absent otherwise.

Array<object>

One field’s problem, the stage-2 installer API’s shape. field is the field’s path, message what is wrong with it.

object
field
required

The field’s path, e.g. links[0].interface, disks[1].confirm, mgmt.address or role; empty for the whole request.

string
message
required
string
details

Structured facts about the refusal, for codes that carry them. The shape is fixed per code and documented on the response that answers it, e.g. IMAGE_POOL_MISMATCH (see ImagePoolMismatchDetails) and IMAGE_IN_USE. Absent for codes that carry none.

object
key
additional properties
any

Example

{
"issues": [
{
"code": "ACTION_NOT_APPLICABLE",
"action": "compute:CreateVpc"
}
]
}

Resource not found.

Media typeapplication/problem+json
object
type
required
string format: uri
title
required
string
status
required
integer
>= 400 <= 599
detail
string
instance
string format: uri-reference
requestId
required
string
code
required
string
issues

The findings of a rejected IAM policy document (custom and resource policies).

Array<object>

One finding of a rejected IAM policy document. A rejection lists every finding, so the author fixes the document in one round trip.

object
code
required

The finding, e.g. INVALID_DOCUMENT, UNKNOWN_ACTION, ACTION_NOT_APPLICABLE.

string
statement
required

Index of the statement at fault; -1 for the document as a whole.

integer
>= -1
detail
required
string
action

The offending action, where one is at fault (ACTION_NOT_APPLICABLE).

string
errors

Field errors, for codes that carry them: each problem at its field (see FieldError). Documented on the responses that set it, e.g. approveNodeJoin’s INVALID_INPUT and JOIN_APPROVAL_REFUSED. Absent otherwise.

Array<object>

One field’s problem, the stage-2 installer API’s shape. field is the field’s path, message what is wrong with it.

object
field
required

The field’s path, e.g. links[0].interface, disks[1].confirm, mgmt.address or role; empty for the whole request.

string
message
required
string
details

Structured facts about the refusal, for codes that carry them. The shape is fixed per code and documented on the response that answers it, e.g. IMAGE_POOL_MISMATCH (see ImagePoolMismatchDetails) and IMAGE_IN_USE. Absent for codes that carry none.

object
key
additional properties
any

Example

{
"issues": [
{
"code": "ACTION_NOT_APPLICABLE",
"action": "compute:CreateVpc"
}
]
}