Skip to content

Object-storage health (admin diagnostic).

GET
/v1/admin/objectstorage/health
Code sample: Shell / cURL
curl --request GET \
--url https://stratum.example.com/v1/admin/objectstorage/health \
--header 'Authorization: Bearer <token>'

An aggregate objectstorage-health view for operators, beyond the per-bucket status and the generic reconciler surface: live bucket counts by status, the worst “stuck since” age (built on the bucket status_changed_at column), the bucket reconciler’s last tick, and a live RGW reachability probe. Install-scope; gates on s3:GetObjectStorageHealth.

Object-storage health snapshot.

Media typeapplication/json

Aggregate objectstorage-health: bucket fleet counts, the worst stuck age, the bucket reconciler’s last tick, and RGW reachability.

object
buckets
required

Live bucket count by lifecycle status (every status present, 0 if none).

object
key
additional properties
integer
oldestStuckSince

When the oldest not-yet-settled (non-available) bucket entered its current status; omitted when every live bucket is available.

string format: date-time
oldestStuckAgeSeconds
required

Now minus oldestStuckSince in seconds (0 when nothing is stuck).

integer format: int64
reconciler

The bucket reconciler’s last tick; omitted when unavailable.

object
lastTickAt
string format: date-time
lastTickOutcome
string
lastTickDurationMs
integer format: int64
rgwReachable
required

Live radosgw-admin reachability probe result.

boolean

Example generated

{
"buckets": {
"additionalProperty": 1
},
"oldestStuckSince": "2026-04-15T12:00:00Z",
"oldestStuckAgeSeconds": 1,
"reconciler": {
"lastTickAt": "2026-04-15T12:00:00Z",
"lastTickOutcome": "example",
"lastTickDurationMs": 1
},
"rgwReachable": true
}

Authenticated but not authorized.

Media typeapplication/problem+json
object
type
required
string format: uri
title
required
string
status
required
integer
>= 400 <= 599
detail
string
instance
string format: uri-reference
requestId
required
string
code
required
string
issues

The findings of a rejected IAM policy document (custom and resource policies).

Array<object>

One finding of a rejected IAM policy document. A rejection lists every finding, so the author fixes the document in one round trip.

object
code
required

The finding, e.g. INVALID_DOCUMENT, UNKNOWN_ACTION, ACTION_NOT_APPLICABLE.

string
statement
required

Index of the statement at fault; -1 for the document as a whole.

integer
>= -1
detail
required
string
action

The offending action, where one is at fault (ACTION_NOT_APPLICABLE).

string
errors

Field errors, for codes that carry them: each problem at its field (see FieldError). Documented on the responses that set it, e.g. approveNodeJoin’s INVALID_INPUT and JOIN_APPROVAL_REFUSED. Absent otherwise.

Array<object>

One field’s problem, the stage-2 installer API’s shape. field is the field’s path, message what is wrong with it.

object
field
required

The field’s path, e.g. links[0].interface, disks[1].confirm, mgmt.address or role; empty for the whole request.

string
message
required
string
details

Structured facts about the refusal, for codes that carry them. The shape is fixed per code and documented on the response that answers it, e.g. IMAGE_POOL_MISMATCH (see ImagePoolMismatchDetails) and IMAGE_IN_USE. Absent for codes that carry none.

object
key
additional properties
any

Example

{
"issues": [
{
"code": "ACTION_NOT_APPLICABLE",
"action": "compute:CreateVpc"
}
]
}