Object-storage health (admin diagnostic).
curl --request GET \ --url https://stratum.example.com/v1/admin/objectstorage/health \ --header 'Authorization: Bearer <token>'An aggregate objectstorage-health view for operators,
beyond the per-bucket status and the generic reconciler surface: live bucket
counts by status, the worst “stuck since” age (built on the bucket
status_changed_at column), the bucket reconciler’s last tick, and a live RGW
reachability probe. Install-scope; gates on s3:GetObjectStorageHealth.
Authorizations
Section titled “Authorizations”Responses
Section titled “Responses”Object-storage health snapshot.
Aggregate objectstorage-health: bucket fleet counts, the worst stuck age, the bucket reconciler’s last tick, and RGW reachability.
object
Live bucket count by lifecycle status (every status present, 0 if none).
object
When the oldest not-yet-settled (non-available) bucket entered its current status; omitted when every live bucket is available.
Now minus oldestStuckSince in seconds (0 when nothing is stuck).
The bucket reconciler’s last tick; omitted when unavailable.
object
Live radosgw-admin reachability probe result.
Example generated
{ "buckets": { "additionalProperty": 1 }, "oldestStuckSince": "2026-04-15T12:00:00Z", "oldestStuckAgeSeconds": 1, "reconciler": { "lastTickAt": "2026-04-15T12:00:00Z", "lastTickOutcome": "example", "lastTickDurationMs": 1 }, "rgwReachable": true}Authenticated but not authorized.
object
The findings of a rejected IAM policy document (custom and resource policies).
One finding of a rejected IAM policy document. A rejection lists every finding, so the author fixes the document in one round trip.
object
The finding, e.g. INVALID_DOCUMENT, UNKNOWN_ACTION, ACTION_NOT_APPLICABLE.
Index of the statement at fault; -1 for the document as a whole.
The offending action, where one is at fault (ACTION_NOT_APPLICABLE).
Field errors, for codes that carry them: each problem at its field
(see FieldError). Documented on the responses that set it, e.g.
approveNodeJoin’s INVALID_INPUT and JOIN_APPROVAL_REFUSED.
Absent otherwise.
One field’s problem, the stage-2 installer API’s shape.
field is the field’s path, message what is wrong with it.
object
The field’s path, e.g. links[0].interface, disks[1].confirm,
mgmt.address or role; empty for the whole request.
Structured facts about the refusal, for codes that carry them. The
shape is fixed per code and documented on the response that answers
it, e.g. IMAGE_POOL_MISMATCH (see ImagePoolMismatchDetails) and
IMAGE_IN_USE. Absent for codes that carry none.
object
Example
{ "issues": [ { "code": "ACTION_NOT_APPLICABLE", "action": "compute:CreateVpc" } ]}