Preview — pending review
This reference is generated from the platform API contract and is still under review. Operations, fields, and descriptions can change before publication.
Open a new project under the subscription
Creates a project beneath the subscription; each project is its own provisioned
Keystone project in the subscription's defaultRegion. The catalog rows, the caller's owner
grant, a PENDING iam.scope.provision Operation and a durable copy of the provision command
commit together; the worker then provisions the Keystone project. Returns 202 with the
PENDING Operation (its resourceId is the new project's id once allocated).
Authorization: the caller must hold a SUBSCRIPTION-level owner grant on the subscription
OR a project-creator grant on it (-- owning a project beneath it is not enough):
anyone else who reaches it 403, unreached/unknown subscription 404. An API token is refused
403 TOKEN_SCOPE_MISSING (iam:write is never grantable); tenant on non-payment hold 403
TENANT_SUSPENDED.
Validation: name must be ASCII and contain a letter or digit (422 field=name); an
unknown body field is 422. The per-subscription project cap is 409 QUOTA_EXCEEDED.
Async & state: 202; Operation PENDING → RUNNING → SUCCEEDED | FAILED; the project's
provisioningState (whoami) follows.
Errors: 401; 403; 404; 409 QUOTA_EXCEEDED / idempotency body mismatch; 422; 500.
Idempotency/Concurrency: Idempotency-Key (UUID) is required; a replay returns the
original 202 without provisioning a second project.
bearerTokenAuthorizationBearer <token>An API token (pc_live_…) or a service-account key (sak_live_…), created in Identity & Access Management and sent as Authorization: Bearer <token>. Requests are rate limited per credential and per tenant: every response carries X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset, and a refused request gets 429 RATE_LIMITED with Retry-After.
tenantId*stringThe tenant id.
subscriptionId*stringThe subscription id (unique platform-wide, derived from the tenant id + the subscription's name at creation).
Idempotency-Key*stringRequired: this operation creates a new resource asynchronously, so a retry without the key would create a second one. Same key+body within 24h replays the original result; the same key with a different body is 409 CONFLICT. Keys are unique per tenant (the same key in two tenants is two different requests). An API token or service-account (bearer) caller MUST send it -- a request without it is refused with 400 IDEMPOTENCY_KEY_REQUIRED (ErrIdempotencyKeyRequired); reuse the same key on every retry of one logical request. A console session gets one from the edge.
uuidapplication/json- body
Body of POST /tenants/{tenantId}/subscriptions/{subscriptionId}/projects.
name*stringDisplay name; ASCII, at least one letter or digit. Also seeds the (immutable) project id.
Create accepted; the PENDING iam.scope.provision Operation.
application/json- response
A long-running operation record. GET /operations/{operationId} returns its current state.
id*stringOperation identifier, unique platform-wide.
action*stringCanonical action id that started this operation, e.g. compute.instance.create.
state*OperationStateState machine for long-running operations. PENDING and RUNNING are transitional; the rest are terminal.
"PENDING""RUNNING""SUCCEEDED""FAILED""CANCELLED"resourceKind?|Kind of the target resource (matches RealtimeEvent.kind), null for resource-less actions.
resourceId?|Identifier of the target resource; null until the resource is allocated.
resourceName?|Human-readable name of the target resource captured when the operation was opened; null when unknown or the resource has been deleted (clients fall back to resourceId).
principalId?|Subject id (user id/email or service-account id) of the actor that initiated this operation, captured at the create chokepoint; null on internal/worker paths with no request-scoped principal or for historical rows. This is the real actor the Activity feed renders.
sourceIp?|Source IP address of the request that initiated this operation; null when unavailable (internal/worker paths, historical rows).
progressPercent?|Best-effort progress; null when the action does not report progress.
0 <= value <= 100error?|nullPopulated only when state is FAILED (or CANCELLED with partial rollback notes).
warning?|nullNon-fatal degradation recorded on an operation that still SUCCEEDED - the primary action completed but something explicitly requested could not be delivered (e.g. publicIp was requested at instance create but no floating IP could be assigned). On a CANCELLED create it reports that the provider resource had already been created and was kept (live and billed until deleted; details.disposition = left_in_place). Same code+message shape as error so clients render both uniformly; null when the operation ran without degradation.
startedAt?|When the worker began executing; null while PENDING.
finishedAt?|When a terminal state was reached; null while transitional.
createdAt*stringupdatedAt*stringcurl -X POST "https://example.com/tenants/string/subscriptions/string/projects" \ -H "Idempotency-Key: 497f6eca-6276-4993-bfeb-53cbbbba6f08" \ -H "Content-Type: application/json" \ -d '{ "name": "string" }'{ "id": "string", "action": "string", "state": "PENDING", "resourceKind": "string", "resourceId": "string", "resourceName": "string", "principalId": "string", "sourceIp": "string", "progressPercent": 0, "error": { "code": "string", "message": "string", "field": "string", "details": {}, "retryable": false }, "warning": { "code": "string", "message": "string", "field": "string", "details": {}, "retryable": false }, "startedAt": "string", "finishedAt": "string", "createdAt": "string", "updatedAt": "string"}