Run a PromQL instant query (project-scoped).
curl --request POST \ --url https://stratum.example.com/v1/projects/example/observability/metrics/actions/query-instant \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data '{ "query": "example", "time": "2026-04-15T12:00:00Z", "category": "platform" }'Cedar action observability:GetMetricStatistics. The Stratum
API prefix-injects project_id="<pid>" into the PromQL
selector before forwarding to VictoriaMetrics; the customer
query MUST NOT reference project_id (rejected with 400
INVALID_INPUT). Complex aggregations are supported as long as
the selector carries the injected label.
Authorizations
Section titled “Authorizations”Parameters
Section titled “Parameters”Path Parameters
Section titled “Path Parameters”Request Bodyrequired
Section titled “Request Bodyrequired”object
PromQL expression.
Evaluation timestamp (defaults to now).
. Optional narrowing label. Forwarded to VictoriaMetrics as an extra_filters[] entry so it composes AST-correctly with the customer’s PromQL (same mechanism that injects project_id). The operator surface defaults to platform; the tenant surface defaults to workload — the UI sets this per route.
Responses
Section titled “Responses”Vector samples.
The complete result of the submitted instant query.
Not a paginated collection, and not a bounded catalog either: its size is
set by the query — one sample per series the selector matches — rather than
by how many rows exist. There is no nextPageToken, because the way to get
a smaller result is to ask a narrower question.
object
object
object
Example generated
{ "items": [ { "metric": { "additionalProperty": "example" }, "timestamp": "2026-04-15T12:00:00Z", "value": 1 } ]}Bad request.
object
The findings of a rejected IAM policy document (custom and resource policies).
One finding of a rejected IAM policy document. A rejection lists every finding, so the author fixes the document in one round trip.
object
The finding, e.g. INVALID_DOCUMENT, UNKNOWN_ACTION, ACTION_NOT_APPLICABLE.
Index of the statement at fault; -1 for the document as a whole.
The offending action, where one is at fault (ACTION_NOT_APPLICABLE).
Field errors, for codes that carry them: each problem at its field
(see FieldError). Documented on the responses that set it, e.g.
approveNodeJoin’s INVALID_INPUT and JOIN_APPROVAL_REFUSED.
Absent otherwise.
One field’s problem, the stage-2 installer API’s shape.
field is the field’s path, message what is wrong with it.
object
The field’s path, e.g. links[0].interface, disks[1].confirm,
mgmt.address or role; empty for the whole request.
Structured facts about the refusal, for codes that carry them. The
shape is fixed per code and documented on the response that answers
it, e.g. IMAGE_POOL_MISMATCH (see ImagePoolMismatchDetails) and
IMAGE_IN_USE. Absent for codes that carry none.
object
Example
{ "issues": [ { "code": "ACTION_NOT_APPLICABLE", "action": "compute:CreateVpc" } ]}Upstream temporarily unavailable (driver / scheduler / dependency).
object
The findings of a rejected IAM policy document (custom and resource policies).
One finding of a rejected IAM policy document. A rejection lists every finding, so the author fixes the document in one round trip.
object
The finding, e.g. INVALID_DOCUMENT, UNKNOWN_ACTION, ACTION_NOT_APPLICABLE.
Index of the statement at fault; -1 for the document as a whole.
The offending action, where one is at fault (ACTION_NOT_APPLICABLE).
Field errors, for codes that carry them: each problem at its field
(see FieldError). Documented on the responses that set it, e.g.
approveNodeJoin’s INVALID_INPUT and JOIN_APPROVAL_REFUSED.
Absent otherwise.
One field’s problem, the stage-2 installer API’s shape.
field is the field’s path, message what is wrong with it.
object
The field’s path, e.g. links[0].interface, disks[1].confirm,
mgmt.address or role; empty for the whole request.
Structured facts about the refusal, for codes that carry them. The
shape is fixed per code and documented on the response that answers
it, e.g. IMAGE_POOL_MISMATCH (see ImagePoolMismatchDetails) and
IMAGE_IN_USE. Absent for codes that carry none.
object
Example
{ "issues": [ { "code": "ACTION_NOT_APPLICABLE", "action": "compute:CreateVpc" } ]}