Confirm an assistant proposal (create the proposed instance)

Platform region code (a DNS-label-shaped slug, e.g. ist-1). No longer a closed enum: the set of valid region codes is operator-managed in the platform-region registry, so this carries only a shape guard. The authoritative set of activated regions is read from GET /regions; invalid-shape codes are VALIDATION_FAILED and codes absent from the registry are rejected at the resolving endpoint.

Where the resource was made -- portal for a create on the console, api for an object made straight against the OpenStack API (CLI, Terraform, the Kubernetes cloud provider) that discovery adopted. Informational; nothing behaves differently. Absent from a backend that predates it, which means portal.

Lifecycle status of a compute instance (drives polling and available actions in the UI).

Human-readable reason for the current status when it is a failure (e.g. "instance build failed on the provider" on an ERROR instance); null while the instance is healthy or the failure carried no detail. Mirrors Volume.statusReason: an ERROR row explains itself on the read model instead of forcing the console to go read the tracking Operation.

Machine-readable companion to statusReason: a small, OPEN vocabulary of codes the console can branch on without parsing the human text, deliberately a plain string rather than a closed enum so a code the client does not recognize yet degrades to the generic failure message. Today the only value is cancelled: the resource is in its failure state because its create operation was CANCELLED; a provider object the create had already built may be left in place, and the resource's DELETE removes it. Reported only while the resource is in that failure state; null otherwise.

Hypervisor power state of the instance, shown alongside the lifecycle status.

In-flight task indicator (e.g. powering_on, disk_attaching); null when idle.

Compute size (flavor) embedded in the Instance read model and offered by the size picker.

Reference to the machine image an instance was provisioned from.

Names of the SSH key pairs whose PUBLIC keys were injected into this instance at first boot via cloud-init. Empty when the instance was launched with a password only. Platform-owned: the value is recorded by the create route and is NOT re-derived from the provider (Nova's single-valued key_name is no longer used), so the collector never overwrites it.

True when the create provisioned an admin account with a password (adminUsername + adminPassword). The access METHOD only: neither the password nor the account name is stored or returned. Together with keyPairs it tells a client how the instance is reached -- keys only, password only, or both. Platform-owned and set once at create; false for an instance created without a password and for one adopted by discovery.

Whether VM metrics are collected for customer display and billed. While true the instance's Monitoring tab serves metrics and the monitoring.instance.hour SKU is metered per hour (free unless the operator prices it); while false neither happens. Toggled with the metadata PATCH or set at create.

Deletion guard. While true, compute.instance.delete is refused with 409 DELETION_PROTECTED before any work starts AND the Nova server carries a platform ADMIN lock (locked_reason publiccloud:deletion-protection), so the project's own OpenStack API credentials can neither delete the server nor lift the lock; the console's start / stop / restart / resize and NIC / disk actions keep working. Turn it off with the metadata PATCH, then delete. False for every instance unless a caller turned it on; the collector never writes it.

Attached security-group ids (bound at boot and via the attach/detach actions).

Secondary NICs attached post-boot via the interface-attach action (the primary NIC is reported via fixedIp).

Nova availability zone the instance runs in (OS-EXT-AZ:availability_zone, typically "nova"); null when the provider does not report it.

True when the instance boots from a Cinder root volume (block_device_mapping_v2) sized by the create-time osDiskGb rather than the flavor's ephemeral disk. Lets the Disks tab surface the real root volume instead of the flavor's root disk.

Size in GB of the boot-from-volume root volume when bootsFromVolume is true; null for an ephemeral (flavor root disk) boot or a collector-discovered instance whose root volume size is unknown.

Display name of the standalone Cinder root volume the instance boots from (shown as 'Boot from volume ()' on the Disks tab); null for an instance whose root volume has not been adopted (e.g. a collector-discovered instance) or a legacy ephemeral instance.

Storage read-model id of the standalone root volume the instance boots from (for deep-linking to the Volumes page); null when not adopted.