List floating IP pools (bootstrap-admin).
curl --request GET \ --url https://stratum.example.com/v1/network/floating-ip-pools \ --header 'Authorization: Bearer <token>'Surfaces the operator-seeded FIP pools the controlplane allocates
from + the bootstrap network config that pool was seeded against. Bootstrap-admin only — gates on the install-
scope network:ListFloatingIPPools Cedar action; customer
principals + project-scoped admins are denied.
Per pool the response carries cidr, gatewayIp (the first
host IP in the CIDR — the address the operator must reserve on
their upstream router), providerTopology
(bridged / routed-host), providerVlan, upstreamInterface,
providerBridge, and allocation counts
(total / available / allocated / reserved).
Drives the admin Floating IP Pools page so operators can answer “where does this Elastic IP come from?” from the UI.
Authorizations
Section titled “Authorizations”Parameters
Section titled “Parameters”Query Parameters
Section titled “Query Parameters”Responses
Section titled “Responses”Pools.
Complete: returns every floating-IP pool the operator has configured.
This list is bounded by the install’s own configuration rather than by
tenant activity, so it is not paginated and carries no nextPageToken. A client has the whole set in one response.
object
object
Pool identifier.
The CIDR the pool draws from.
origin marker. install pools are seeded by the
bootstrap from STRATUM_NETWORK_FLOATING_IP_POOLS; they
are protected from deletion via the runtime DELETE
endpoint (409 INSTALL_POOL_PROTECTED) because the FIP
allocator depends on at least one install-time pool
being present on a fresh install. runtime pools are
added via POST after install and freely deletable
provided no FIPs are allocated against them. The UI
uses this field to disable the delete button on install
rows.
Region the pool serves.
First host IP of the pool CIDR — the address the operator must reserve on their upstream router under bridged topology. Empty when the CIDR can’t be parsed.
How the host wires br-ex into the upstream network. bridged
means the operator owns the L2 segment + gateway; routed-host
means the host MASQUERADEs out the upstream interface.
VLAN ID carrying the FIP CIDR under bridged topology. 0 = unset.
Host NIC carrying upstream FIP traffic.
Host OVS bridge the provider LS localnet port maps to.
object
Total FIP rows in the pool (every host IP minus skipped).
Free to allocate.
Held by a project (sum of allocated + associated FIP states
both buckets represent “in use” to operators).
Not free, not in use — covers releasing, released, error.
Non-zero usually flags a stuck FIP worth investigating.
Example
{ "items": [ { "cidr": "192.0.2.0/24", "source": "install", "state": "active", "providerTopology": "bridged" } ]}Authenticated but not authorized.
object
The findings of a rejected IAM policy document (custom and resource policies).
One finding of a rejected IAM policy document. A rejection lists every finding, so the author fixes the document in one round trip.
object
The finding, e.g. INVALID_DOCUMENT, UNKNOWN_ACTION, ACTION_NOT_APPLICABLE.
Index of the statement at fault; -1 for the document as a whole.
The offending action, where one is at fault (ACTION_NOT_APPLICABLE).
Field errors, for codes that carry them: each problem at its field
(see FieldError). Documented on the responses that set it, e.g.
approveNodeJoin’s INVALID_INPUT and JOIN_APPROVAL_REFUSED.
Absent otherwise.
One field’s problem, the stage-2 installer API’s shape.
field is the field’s path, message what is wrong with it.
object
The field’s path, e.g. links[0].interface, disks[1].confirm,
mgmt.address or role; empty for the whole request.
Structured facts about the refusal, for codes that carry them. The
shape is fixed per code and documented on the response that answers
it, e.g. IMAGE_POOL_MISMATCH (see ImagePoolMismatchDetails) and
IMAGE_IN_USE. Absent for codes that carry none.
object
Example
{ "issues": [ { "code": "ACTION_NOT_APPLICABLE", "action": "compute:CreateVpc" } ]}