Show whether quotas are enforced.
curl --request GET \ --url https://stratum.example.com/v1/admin/quotas/enforcement \ --header 'Authorization: Bearer <token>'. The install-wide switch and each service’s
effective state. A fresh single-node install starts off, a cluster on;
an upgraded install keeps enforcing. Install-scope
(quotas:GetQuotaEnforcement).
Authorizations
Section titled “Authorizations”Responses
Section titled “Responses”The enforcement state.
Whether quotas are enforced: install-wide, and per service. While a service is not enforced its limits resolve to -1 and no create is refused; usage is still counted. Rate limits are not affected.
object
The install-wide switch. A service without its own setting follows it.
setting: recorded, by the install (off on a single node, on for a cluster) or by an operator. default: nothing recorded, so enforced.
Every service with enforceable quota dimensions.
One service’s enforcement.
object
The quota dimensions’ service, e.g. compute, network, dns.
What applies to the service’s quotas.
The service’s own setting; absent = follows the install-wide switch.
The service is switched off.
Example
{ "source": "setting"}Authenticated but not authorized.
object
The findings of a rejected IAM policy document (custom and resource policies).
One finding of a rejected IAM policy document. A rejection lists every finding, so the author fixes the document in one round trip.
object
The finding, e.g. INVALID_DOCUMENT, UNKNOWN_ACTION, ACTION_NOT_APPLICABLE.
Index of the statement at fault; -1 for the document as a whole.
The offending action, where one is at fault (ACTION_NOT_APPLICABLE).
Field errors, for codes that carry them: each problem at its field
(see FieldError). Documented on the responses that set it, e.g.
approveNodeJoin’s INVALID_INPUT and JOIN_APPROVAL_REFUSED.
Absent otherwise.
One field’s problem, the stage-2 installer API’s shape.
field is the field’s path, message what is wrong with it.
object
The field’s path, e.g. links[0].interface, disks[1].confirm,
mgmt.address or role; empty for the whole request.
Structured facts about the refusal, for codes that carry them. The
shape is fixed per code and documented on the response that answers
it, e.g. IMAGE_POOL_MISMATCH (see ImagePoolMismatchDetails) and
IMAGE_IN_USE. Absent for codes that carry none.
object
Example
{ "issues": [ { "code": "ACTION_NOT_APPLICABLE", "action": "compute:CreateVpc" } ]}