instance

Refuse legacy remote apply while preserving authenticated audit evidence.

Changed on

Remote apply is disabled because the legacy updater cannot prove safe rollback after schema writes. No job is submitted or resumed. An authorized request returns 409 with an explicit unsupported reason. The caller must still hold instance-config, have multi-factor assurance, and have authenticated within the last five minutes. This endpoint remains present for older clients; release metadata and manual verified downloads remain available. The 202 shape is retained for wire compatibility with historical helper responses, not current enablement.

post/api/v1/instance/update

Request

  • Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /api/v1/instance/update
  • Auth: HTTP bearer

Request body

versionstring required

Response

Update accepted by the local helper.

idstring required

A prefixed UUIDv7, e.g. org_0198….

backend'flux' | 'compose' | 'systemd' required
versionstring required
state'queued' | 'running' | 'succeeded' | 'failed' | 'rolled-back' | 'rollback-failed' required
phase'queued' | 'plan' | 'backup' | 'verify' | 'apply' | 'health' | 'rollback' | 'complete' | 'admission' required
failure_codestring
requested_atstring date-time required

RFC 3339 UTC, microsecond precision.

started_atstring date-time

RFC 3339 UTC, microsecond precision.

finished_atstring date-time

RFC 3339 UTC, microsecond precision.

Changes

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status