Skip to content

List the platform service endpoints reachable from inside the VPC.

GET
/v1/projects/{projectId}/network/vpcs/{vpcId}/service-endpoints
Code sample: Shell / cURL
curl --request GET \
--url https://stratum.example.com/v1/projects/example/network/vpcs/example/service-endpoints \
--header 'Authorization: Bearer <token>'

. The per-VPC service endpoints the platform materializes for every VPC, s3 and api among them, with their state. impaired means the endpoint still resolves and routes but its backend is down on at least one node; statusReason says which. Authorized as network:DescribeVPC on the VPC.

projectId
required
string
/^p-[a-z0-9-]+$/
vpcId
required
string
/^vpc-[a-z0-9-]+$/

The VPC’s service endpoints.

Media typeapplication/json
object
items
required
Array<object>

A platform service reachable from inside the VPC with no egress: a per-VPC address under 100.69.0.0/24 and a name that resolves to it only inside this VPC. Materialized by the platform for every VPC; read-only.

object
id
required
string
/^vpce-[a-z0-9-]+$/
service
required

The catalog key, e.g. s3 or api.

string
dnsName

The name that resolves to address inside this VPC. Empty when the install has no parent domain.

string
address
required

The endpoint’s address inside the VPC.

string
state
required

available: the name, route and address are in place and the backend is healthy on every node reporting it. impaired: the endpoint is still advertised and routed, but its backend has been unhealthy for at least 90 seconds on one or more nodes, so requests from instances on those nodes fail; statusReason names the node(s). It returns to available on the first check that finds every reporting node healthy. Nothing is withdrawn while impaired. error: the platform could not converge the route or the name.

string
Allowed values: creating available impaired deleting error
statusReason
string
updatedAt

When the state last changed.

string format: date-time

Example

{
"items": [
{
"state": "creating"
}
]
}

Authenticated but not authorized.

Media typeapplication/problem+json
object
type
required
string format: uri
title
required
string
status
required
integer
>= 400 <= 599
detail
string
instance
string format: uri-reference
requestId
required
string
code
required
string
issues

The findings of a rejected IAM policy document (custom and resource policies).

Array<object>

One finding of a rejected IAM policy document. A rejection lists every finding, so the author fixes the document in one round trip.

object
code
required

The finding, e.g. INVALID_DOCUMENT, UNKNOWN_ACTION, ACTION_NOT_APPLICABLE.

string
statement
required

Index of the statement at fault; -1 for the document as a whole.

integer
>= -1
detail
required
string
action

The offending action, where one is at fault (ACTION_NOT_APPLICABLE).

string
errors

Field errors, for codes that carry them: each problem at its field (see FieldError). Documented on the responses that set it, e.g. approveNodeJoin’s INVALID_INPUT and JOIN_APPROVAL_REFUSED. Absent otherwise.

Array<object>

One field’s problem, the stage-2 installer API’s shape. field is the field’s path, message what is wrong with it.

object
field
required

The field’s path, e.g. links[0].interface, disks[1].confirm, mgmt.address or role; empty for the whole request.

string
message
required
string
details

Structured facts about the refusal, for codes that carry them. The shape is fixed per code and documented on the response that answers it, e.g. IMAGE_POOL_MISMATCH (see ImagePoolMismatchDetails) and IMAGE_IN_USE. Absent for codes that carry none.

object
key
additional properties
any

Example

{
"issues": [
{
"code": "ACTION_NOT_APPLICABLE",
"action": "compute:CreateVpc"
}
]
}

Resource not found.

Media typeapplication/problem+json
object
type
required
string format: uri
title
required
string
status
required
integer
>= 400 <= 599
detail
string
instance
string format: uri-reference
requestId
required
string
code
required
string
issues

The findings of a rejected IAM policy document (custom and resource policies).

Array<object>

One finding of a rejected IAM policy document. A rejection lists every finding, so the author fixes the document in one round trip.

object
code
required

The finding, e.g. INVALID_DOCUMENT, UNKNOWN_ACTION, ACTION_NOT_APPLICABLE.

string
statement
required

Index of the statement at fault; -1 for the document as a whole.

integer
>= -1
detail
required
string
action

The offending action, where one is at fault (ACTION_NOT_APPLICABLE).

string
errors

Field errors, for codes that carry them: each problem at its field (see FieldError). Documented on the responses that set it, e.g. approveNodeJoin’s INVALID_INPUT and JOIN_APPROVAL_REFUSED. Absent otherwise.

Array<object>

One field’s problem, the stage-2 installer API’s shape. field is the field’s path, message what is wrong with it.

object
field
required

The field’s path, e.g. links[0].interface, disks[1].confirm, mgmt.address or role; empty for the whole request.

string
message
required
string
details

Structured facts about the refusal, for codes that carry them. The shape is fixed per code and documented on the response that answers it, e.g. IMAGE_POOL_MISMATCH (see ImagePoolMismatchDetails) and IMAGE_IN_USE. Absent for codes that carry none.

object
key
additional properties
any

Example

{
"issues": [
{
"code": "ACTION_NOT_APPLICABLE",
"action": "compute:CreateVpc"
}
]
}