List the base-image catalog (admin).
curl --request GET \ --url https://stratum.example.com/v1/images/base-images \ --header 'Authorization: Bearer <token>'The base images the installer offers (AlmaLinux, Ubuntu,
Debian, CentOS Stream), each pinned to a dated upstream build, with
where each stands on this install: available, importing,
registered, failed or nameTaken. An image of the pinned build is
matched by sha256, so an image the installer registered counts.
Gated by the same permission as an import (compute:ImportImage).
Authorizations
Section titled “Authorizations”Responses
Section titled “Responses”The catalog.
object
One entry of the base-image catalog: a cloud image pinned to a dated upstream build by URL, size and sha256, and where it stands on this install.
object
The image name an added entry is registered under.
The pinned upstream build.
Size of the download, checked before the import.
SHA-256 of the download, checked before the import.
Where the control plane downloads the image from.
Where the entry stands on this install:
available: nothing is registered for it; it can be added.importing: its image is being downloaded or imported.registered: an image of the pinned build is registered (matched by sha256, whatever its name or source).failed: its import failed (stateReasonsays why). Adding it again replaces the failed image.nameTaken: another image holds the name. Delete or rename it to add the entry.
The image the status is about. Absent when available.
That image’s state.
Why that image failed, for example Not downloaded: no internet access. when the control plane cannot reach the upstream server.
Example
{ "items": [ { "name": "ubuntu-26-04-cloud", "displayName": "Ubuntu 26.04 LTS", "osDistribution": "ubuntu", "osVersion": "26.04", "version": "20260927", "format": "qcow2", "architecture": "amd64", "status": "available", "imageState": "pending" } ]}Authenticated but not authorized.
object
The findings of a rejected IAM policy document (custom and resource policies).
One finding of a rejected IAM policy document. A rejection lists every finding, so the author fixes the document in one round trip.
object
The finding, e.g. INVALID_DOCUMENT, UNKNOWN_ACTION, ACTION_NOT_APPLICABLE.
Index of the statement at fault; -1 for the document as a whole.
The offending action, where one is at fault (ACTION_NOT_APPLICABLE).
Field errors, for codes that carry them: each problem at its field
(see FieldError). Documented on the responses that set it, e.g.
approveNodeJoin’s INVALID_INPUT and JOIN_APPROVAL_REFUSED.
Absent otherwise.
One field’s problem, the stage-2 installer API’s shape.
field is the field’s path, message what is wrong with it.
object
The field’s path, e.g. links[0].interface, disks[1].confirm,
mgmt.address or role; empty for the whole request.
Structured facts about the refusal, for codes that carry them. The
shape is fixed per code and documented on the response that answers
it, e.g. IMAGE_POOL_MISMATCH (see ImagePoolMismatchDetails) and
IMAGE_IN_USE. Absent for codes that carry none.
object
Example
{ "issues": [ { "code": "ACTION_NOT_APPLICABLE", "action": "compute:CreateVpc" } ]}