Describe one version.
curl --request GET \ --url https://stratum.example.com/v1/projects/example/asg/launch-templates/example/versions/example \ --header 'Authorization: Bearer <token>'Cedar-gated on asg:DescribeLaunchTemplate.
Authorizations
Section titled “Authorizations”Parameters
Section titled “Parameters”Path Parameters
Section titled “Path Parameters”Responses
Section titled “Responses”The version.
object
An active image visible to the project.
Instance type name (m1.medium), as Compute takes it.
static launches into subnetId; inherited lets the group pick a subnet by AZ balance. Defaults to static when subnetId is given, else inherited.
Required with static; forbidden with inherited.
Allocate a floating IP from this pool at launch.
0 = the image’s size.
Storage class (by name) for each instance’s root volume; omitted =
the image’s own class. Must be one of the image’s
launchableStorageClasses: checked when the version is saved, 409
IMAGE_POOL_MISMATCH otherwise.
placement group — the only spread mechanism inside one AZ.
Raw cloud-config / Ignition (NOT base64). Returned on describe; the audit trail carries only its SHA-256.
An active instance profile in the same project.
Per-instance AWS-shape IMDS options. Returned on
the Instance and settable at launch (CreateInstanceRequest) or via the
modify-metadata-options action. httpEndpoint is enforced: when
disabled the whole IMDS surface (including the Stratum SSH-CA agent
plane) is off for the instance. httpTokens + httpPutResponseHopLimit
are recorded for AWS parity only — Stratum’s IMDS always requires a
session token (effectively IMDSv2-only), so optional does not relax
that in v1. Omitted fields default to enabled / required / 1.
object
Whether IMDS is reachable for the instance. Default enabled.
IMDSv2 token requirement (recorded; Stratum is always v2). Default required.
Recorded for AWS parity. Default 1.
When enabled the guest can read its own tags at /latest/meta-data/tags/instance/. Default disabled; the image builder enables it on a build instance.
Per-device overrides for a multi-volume image; every data device the image carries is launched (cloned from its snapshot and attached before first boot) whether or not it is named here. 400 for a device the image does not have or a size below the snapshot’s.
A per-device override for one of the data devices a
multi-volume image carries. deviceIndex must be one the image has
(>= 1; device 0 is the root, sized by rootVolumeSizeBytes);
sizeBytes must be at or above the snapshot’s; absent fields keep the
image’s values. Devices not named are launched as the image mapped them.
object
false launches without the instance agent; the group’s instance health mode then rides lifecycle state alone.
Tags stamped on every launched instance (reserved prefixes refused).
object
ltv-…
Monotonic from 1; immutable.
Example
{ "subnetIdStrategy": "static", "metadataOptions": { "httpEndpoint": "enabled", "httpTokens": "optional", "instanceMetadataTags": "enabled" }, "agentEnabled": true}Authenticated but not authorized.
object
The findings of a rejected IAM policy document (custom and resource policies).
One finding of a rejected IAM policy document. A rejection lists every finding, so the author fixes the document in one round trip.
object
The finding, e.g. INVALID_DOCUMENT, UNKNOWN_ACTION, ACTION_NOT_APPLICABLE.
Index of the statement at fault; -1 for the document as a whole.
The offending action, where one is at fault (ACTION_NOT_APPLICABLE).
Field errors, for codes that carry them: each problem at its field
(see FieldError). Documented on the responses that set it, e.g.
approveNodeJoin’s INVALID_INPUT and JOIN_APPROVAL_REFUSED.
Absent otherwise.
One field’s problem, the stage-2 installer API’s shape.
field is the field’s path, message what is wrong with it.
object
The field’s path, e.g. links[0].interface, disks[1].confirm,
mgmt.address or role; empty for the whole request.
Structured facts about the refusal, for codes that carry them. The
shape is fixed per code and documented on the response that answers
it, e.g. IMAGE_POOL_MISMATCH (see ImagePoolMismatchDetails) and
IMAGE_IN_USE. Absent for codes that carry none.
object
Example
{ "issues": [ { "code": "ACTION_NOT_APPLICABLE", "action": "compute:CreateVpc" } ]}Resource not found.
object
The findings of a rejected IAM policy document (custom and resource policies).
One finding of a rejected IAM policy document. A rejection lists every finding, so the author fixes the document in one round trip.
object
The finding, e.g. INVALID_DOCUMENT, UNKNOWN_ACTION, ACTION_NOT_APPLICABLE.
Index of the statement at fault; -1 for the document as a whole.
The offending action, where one is at fault (ACTION_NOT_APPLICABLE).
Field errors, for codes that carry them: each problem at its field
(see FieldError). Documented on the responses that set it, e.g.
approveNodeJoin’s INVALID_INPUT and JOIN_APPROVAL_REFUSED.
Absent otherwise.
One field’s problem, the stage-2 installer API’s shape.
field is the field’s path, message what is wrong with it.
object
The field’s path, e.g. links[0].interface, disks[1].confirm,
mgmt.address or role; empty for the whole request.
Structured facts about the refusal, for codes that carry them. The
shape is fixed per code and documented on the response that answers
it, e.g. IMAGE_POOL_MISMATCH (see ImagePoolMismatchDetails) and
IMAGE_IN_USE. Absent for codes that carry none.
object
Example
{ "issues": [ { "code": "ACTION_NOT_APPLICABLE", "action": "compute:CreateVpc" } ]}