CIDRs a new VPC in this project must avoid (+ optional suggestion).
curl --request GET \ --url https://stratum.example.com/v1/projects/example/network/reserved-cidrs \ --header 'Authorization: Bearer <token>'The project-scoped answer to “what must my new VPC CIDR
avoid?”. Returns the globally reserved ranges (reserved infra,
transit/CGNAT, FIP supernets) plus THIS project’s own VPC/subnet/FIP
CIDRs — never other tenants’ details. With suggestSize it also returns
a free block carved from supernet (default 10.0.0.0/8) that avoids the
set. Unlike the install-scoped address map (network:GetAddressMap),
this is gated on the project-scoped network:ListVPCs a VPC-creator
already holds. Reserves nothing; VPC-create re-validates overlap.
Authorizations
Section titled “Authorizations”Parameters
Section titled “Parameters”Path Parameters
Section titled “Path Parameters”Query Parameters
Section titled “Query Parameters”When set (a prefix length, e.g. 24), also return a free block of that size.
IPv4 supernet to carve the suggestion from (default 10.0.0.0/8).
How many free blocks to suggest (default 1, capped at 256).
Responses
Section titled “Responses”The project-scoped avoid-set (+ optional suggestion).
project-scoped avoid-set: the reserved + own-project CIDRs a new VPC must not overlap, plus an optional carved suggestion.
object
Globally reserved ranges + this project’s own CIDRs to avoid.
One CIDR (or single host address as /32) in the global address map.
object
The CIDR; single host addresses are rendered as /32.
What the entry is.
Human-readable description.
A projectId, or infra for Stratum-owned ranges.
Lifecycle state where applicable.
Cross-references (vpcId, subnetId, poolId, fipId,…).
object
utilization roll-up, present only on entries with a countable address space (subnets + floating-IP pools). Absent on infra ranges and single-IP entries. Feeds the IPAM utilization bars.
object
Addresses in the CIDR / pool size.
Addresses in use.
Addresses still assignable.
True when an underlying list hit the row ceiling (avoid-set may be incomplete).
IPAM planner result — free block(s) inside a supernet.
object
The canonicalized supernet the blocks were carved from.
The requested block prefix length.
Up to count free CIDR blocks, in ascending address order.
True when the supernet’s end (or the internal scan cap) was reached before count free blocks were found — the answer may be incomplete or the supernet may simply be full.
Example
{ "reserved": [ { "kind": "reserved-infra", "scope": "global" } ]}Bad request.
object
The findings of a rejected IAM policy document (custom and resource policies).
One finding of a rejected IAM policy document. A rejection lists every finding, so the author fixes the document in one round trip.
object
The finding, e.g. INVALID_DOCUMENT, UNKNOWN_ACTION, ACTION_NOT_APPLICABLE.
Index of the statement at fault; -1 for the document as a whole.
The offending action, where one is at fault (ACTION_NOT_APPLICABLE).
Field errors, for codes that carry them: each problem at its field
(see FieldError). Documented on the responses that set it, e.g.
approveNodeJoin’s INVALID_INPUT and JOIN_APPROVAL_REFUSED.
Absent otherwise.
One field’s problem, the stage-2 installer API’s shape.
field is the field’s path, message what is wrong with it.
object
The field’s path, e.g. links[0].interface, disks[1].confirm,
mgmt.address or role; empty for the whole request.
Structured facts about the refusal, for codes that carry them. The
shape is fixed per code and documented on the response that answers
it, e.g. IMAGE_POOL_MISMATCH (see ImagePoolMismatchDetails) and
IMAGE_IN_USE. Absent for codes that carry none.
object
Example
{ "issues": [ { "code": "ACTION_NOT_APPLICABLE", "action": "compute:CreateVpc" } ]}Authenticated but not authorized.
object
The findings of a rejected IAM policy document (custom and resource policies).
One finding of a rejected IAM policy document. A rejection lists every finding, so the author fixes the document in one round trip.
object
The finding, e.g. INVALID_DOCUMENT, UNKNOWN_ACTION, ACTION_NOT_APPLICABLE.
Index of the statement at fault; -1 for the document as a whole.
The offending action, where one is at fault (ACTION_NOT_APPLICABLE).
Field errors, for codes that carry them: each problem at its field
(see FieldError). Documented on the responses that set it, e.g.
approveNodeJoin’s INVALID_INPUT and JOIN_APPROVAL_REFUSED.
Absent otherwise.
One field’s problem, the stage-2 installer API’s shape.
field is the field’s path, message what is wrong with it.
object
The field’s path, e.g. links[0].interface, disks[1].confirm,
mgmt.address or role; empty for the whole request.
Structured facts about the refusal, for codes that carry them. The
shape is fixed per code and documented on the response that answers
it, e.g. IMAGE_POOL_MISMATCH (see ImagePoolMismatchDetails) and
IMAGE_IN_USE. Absent for codes that carry none.
object
Example
{ "issues": [ { "code": "ACTION_NOT_APPLICABLE", "action": "compute:CreateVpc" } ]}