After Base64 decoding, the contents should be saved as a file (e.g. into ) and passed as an argument to the following command to the corresponding Lightbits cluster, with and substituted as appropriate. lbcli create credential --project-name=system --id= --type=rsa256pubkey

401

Authentication required / Authentication failed

default

An unexpected error response.

Response

Login to the ICM.

Auth

POST /api/v2/icmlogin

Responses application/json

200

A successful response.

Login Response	object	The response to the login to the ICM service.
tokenType	string	The type of token.
expiresIn	string	The time in seconds when the token will expire.
idToken	string	The ID of the token.

401

Authentication required / Authentication failed

500

Internal error in the ICM service.

default

An unexpected error response.

Response

List clusters.

List all Lightbits storage clusters attached to the ICM service.

Auth

GET /api/v2/clusters

Responses application/json

200

A successful response.

List Clusters Response	object	The response to list the Lightbits clusters connected to the ICM service.
clusters8 fields	array[object]
id	string	The UUID of the cluster. Must be a valid UUID.
name	string	The name of the cluster.
version	string	The minimum version of the Lightbits release on the cluster.
subsystemNqn	string	The NQN of the subsystem of the cluster.
apiEndpoints	array[string]	The list of API endpoints of the cluster.
discoveryEndpoints	array[string]	The list of discovery endpoints of the cluster.
clusterConnectionStatus	object	The connection status of the cluster.
accessConnectionStatus	string	The connection status of the cluster. Enum: `Connected`,`Disconnected`,`Unauthorized` Default: Connected
provisionedToEffectiveStorageRatio	string

401

Authentication required / Authentication failed

default

An unexpected error response.

Response

Attach a new cluster.

Attaches a new Lightbits storage cluster to the ICM system.

Auth

Request Body application/json

Attach Cluster Request	object	Request to attach a cluster to the ICM service.
apiEndpoint	string	Management API endpoint of the cluster to connect to. Any one of the API endpoints can be used must be of the form `<host>:<port>`, e.g.: `10.0.0.1:443`, `foo.bar.com:443`.

POST /api/v2/clusters

Responses application/json

200

A successful response.

Attach Cluster Response	object	Response to attach a Lightbits cluster to the ICM service. ListWorkflows API and the returned workflow ID can be used to track the status of this operation.
workflowId	string

400

Invalid argument.

401

Authentication required / Authentication failed

500

Internal error in the ICM service.

default

An unexpected error response.

Response

Detach an existing cluster.

Detaches an existing Lightbits storage cluster from the ICM system.

Auth

Path Params

cid

string

UUID of the cluster to detach from the ICM service (must be a valid UUID).

DELETE /api/v2/clusters/{cid}

Responses application/json

200

A successful response.

object

Response to detach a Lightbits cluster from the ICM service.

400

Invalid argument.

401

Authentication required / Authentication failed

500

Internal error in the ICM service.

default

An unexpected error response.

Response

List workflows

List the running and completed workflows.

Auth

Query String

pageSize	integer
nextPageToken	string

GET /api/v2/workflows

Responses application/json

200

A successful response.

List Workflows Response	object	The response to list the workflows. Note that the initial ICM service will only return the last 100 workflows.
workflows9 fields	array[object]
id	string	The UUID of the workflow.
createdAt	date-time	The time the workflow was created.
startedAt	date-time	The time the workflow started.
endedAt	date-time	The time the workflow completed.
type	string	The type of workflow (e.g. attach cluster).
state	string	The state of the workflow.
msg	string	A detailed message providing additional information on the workflow state. This is mainly used in case of failure.
progress	object	Progress information of the workflow.
percent	int32	The percentage of the workflow that has been completed.
stage	string	The current stage of the workflow.
attachClusterRequest	object	Request to attach a cluster to the ICM service.
apiEndpoint	string	Management API endpoint of the cluster to connect to. Any one of the API endpoints can be used must be of the form `<host>:<port>`, e.g.: `10.0.0.1:443`, `foo.bar.com:443`.
nextPageToken	string

400

Invalid argument.

401

Authentication required / Authentication failed

500

Internal error in the ICM service.

default

An unexpected error response.

Response

Get a specific workflow

Gets a specific workflow by its ID.

Auth

Path Params

workflowId

string

Workflow ID to get

GET /api/v2/workflows/{workflowId}

Responses application/json

200

A successful response.

Get Workflow Response	object	The response to get a workflow by its ID.
workflow9 fields	object	The workflow information.
id	string	The UUID of the workflow.
createdAt	date-time	The time the workflow was created.
startedAt	date-time	The time the workflow started.
endedAt	date-time	The time the workflow completed.
type	string	The type of workflow (e.g. attach cluster).
state	string	The state of the workflow.
msg	string	A detailed message providing additional information on the workflow state. This is mainly used in case of failure.
progress	object	Progress information of the workflow.
percent	int32	The percentage of the workflow that has been completed.
stage	string	The current stage of the workflow.
attachClusterRequest	object	Request to attach a cluster to the ICM service.
apiEndpoint	string	Management API endpoint of the cluster to connect to. Any one of the API endpoints can be used must be of the form `<host>:<port>`, e.g.: `10.0.0.1:443`, `foo.bar.com:443`.

400

Invalid argument.

401

Authentication required / Authentication failed

500

Internal error in the ICM service.

default

An unexpected error response.

Response

Cluster Operations

GET

/api/v2/cluster

Retrieve cluster information.

Cluster information - e.g., cluster UUID and SubsystemNQN - is exposed via this API.

Auth

GET /api/v2/cluster

Responses application/json

200

A successful response.

object	object
UUID	string	UUID of cluster
subsystemNQN	string	Subsystem NQN that should be used by the hosts to connect to volumes on this cluster.
currentMaxReplicas	int64	A maximal number of replicas that a new volume can have, given the current state of the nodes. This value depends on the healthiness of the nodes.
supportedMaxReplicas	int64	Maximum number of replicas per volume supported by cluster. A maximal number of replicas that a volume can have, given cluster installation parameters (Number of Servers, Failure Domains...).
statistics11 fields	object	Cluster statistics (storage capacity, used storage, compression ration...)
installedPhysicalStorage	string	All installed SSDs capacities over all servers in a cluster, given in bytes.
managedPhysicalStorage	string	Sum of all managed and healthy SSDs capacities, given in bytes.
effectivePhysicalStorage	string	Effective Physical storage excluding overhead of OVP and Parity, given in bytes.
logicalStorage	string	Sum of capacities of all allocated volumes, given in bytes.
logicalUsedStorage	string	Logical storage space used by all volumes (n of LBAs x 4096), given in bytes.
physicalUsedStorage	string	Physical storage space occupied by all volumes (data only), given in bytes.
physicalUsedStorageIncludingParity	string	Physical storage space occupied by all data including Parity overhead when EC enabled (physical ndisks/(ndisks -1)), given in bytes.
freePhysicalStorage	string	Free storage before entering to read-only mode , given in bytes.
estimatedFreeLogicalStorage	string	Estimated free storage before entering to read-only mode assuming current compression ratio, given in bytes.
estimatedLogicalStorage	string	Estimate of total available logical storage based on current compression ratio (effective * compression)
compressionRatio	number	compression ratio logicalUsedStorage/physicalUsedStorage
ETag	string	Identifier for a specific version of a resource.
health6 fields	object	Cluster health: OK- cluster healthy, Warning - Inactive node(s) and/or degraded volumes in cluster, Error - ReadOnly/Unavailable volumes in cluster.
state	string	Enum: `None`,`OK`,`Warning`,`Error` Default: None
numDegradedVolumes	int64
numReadOnlyVolumes	int64
numNotAvailableVolumes	int64
numInactiveNodes	int64
numHealthyVolumes	int64
MinVersionInCluster	string	Lowest version of Lightbits running on one of the servers in the cluster.
MinAllowedVersion	string	For Lightbits internal use.
MaxAllowedVersion	string	Lightbits version this cluster can be upgraded to.
apiEndpoints	array[string]	A list of REST/gRPC endpoints - : pairs that the API listen on. Example entries: 192.168.16.16:443 192.168.16.17:443
discoveryEndpoints	array[string]	A list of TCP endpoints - : pairs that the Discovery Service listen on. Example entries: 192.168.16.16:8009 192.168.16.17:8009
clusterName	string	Cluster name.
lastUpgrade7 fields	object	Parameters of the last (or active) cluster upgrade process.
Status	string	The status of the upgrade operation Enum: `Unknown`,`None`,`UpgradeFailed`,`Upgrading` Default: Unknown
StartTime	date-time	The time of the upgrade task start
EndTime	date-time	The time of closing the upgrade task (completed or failed). Reset when the next upgrade starts.
TargetVersion	string	The version that should be installed by the end of the process.
ErrorMessage	string	Free formatted text, describes the error if such an error occurred.
ProgressStep	int64	Current upgrade step. You can use ProgressTotal to calculate percentage as ProgressStep/ProgressTotal.
ProgressTotal	int64	Total possible upgrade progress steps.
inBandAuthMode	string	Defines whether In-Band Authentication is enabled for the cluster(Enabled/Disabled). When enabled, authentication is required for hosts to connect to the Lightbits cluster. Enum: `UnKnown`,`Enabled`,`Disabled` Default: UnKnown
encryptionStatus5 fields	object	Information about the state of Cluster Level Encryption.
encryptionState	string	Indicates the encryption state of the cluster encryption status Enum: `Disabled`,`Enabling`,`Enabled`,`Unknown` Default: Disabled
kekGeneration	string	The current generation of the KEK
kekUpdateDate	date-time	The date of the last KEK update
previousKekGenerations	array[string]	The previous generations of the KEK
rotationState	string	Indicates the rotation state of the cluster encryption encryption status Enum: `NoRotation`,`DistributingKEK`,`EncryptingDEKs`,`EncryptyingDEKs` Default: NoRotation
federatedAuthenticationStatus2 fields	object	Information about the state of Federated Authentication
federatedAuthenticationEnabled	boolean
idpHealthInfos4 fields	array[object]
serverName	string
idpHealthStatus	string	Enum: `IdpHealthStatus_Healthy`,`IdpHealthStatus_UnHealthy`,`IdpHealthStatus_Unknown` Default: IdpHealthStatus_Healthy
timestamp	date-time
healthErrorMessage	string

401

Unauthorized: authentication failed.

403

Permission denied.

500

Internal Lightbits error.

default

An unexpected error response.

Response

Snapshot Operations

GET

/api/v2/projects/{projectName}/snapshots

POST

/api/v2/projects/{projectName}/snapshots

GET

/api/v2/projects/{projectName}/snapshots/{UUID}

DELETE

/api/v2/projects/{projectName}/snapshots/{UUID}

List snapshots.

List can be filtered by UUID/Name.

Auth

Path Params

projectName

string

projectName

The name of the project this snapshot belongs to.

Query String

UUID	string	UUID. Optionally filter a specific snapshot by UUID.
Name	string	Name. Optionally filter a specific snapshot by name.
offsetUUID	string	offsetUUID. Optional. When provided, returned list starts with next to offsetUUID snapshot.
limit	string	limit. Optional. Limits the number of snapshots in the response (default/max is 1000 snapshots in a response).
showAll	boolean	showAll. Optional. Show also snapshots in Deleting state (the default is false).

GET /api/v2/projects/{projectName}/snapshots

Responses application/json

200

A successful response.

object	object
snapshots23 fields	array[object]
state	string	Enum: `Unknown`,`Creating`,`Available`,`Deleting`,`Deleted`,`Failed` Default: Unknown
UUID	string
name	string
description	string
creationTime	date-time
retentionTime	string
sourceVolumeUUID	string
sourceVolumeName	string
replicaCount	int64
nodeList	array[string]
nsid	int64
acl	object
values	array[string]
compression	boolean
size	string
IPAcl	object
values	array[string]
sectorSize	int64
statistics5 fields	object
physicalCapacity	string	The physical capacity that exists in this volume layer.
physicalOwnedCapacity	string	The capacity that would be freed when the snapshot would be deleted.
physicalOwnedMemory	string	The number, in bytes, of md ranges multiplied by the size of md range.
physicalMemory	string	Memory used by this MSVV (how many chunks).
userWritten	string	Amount, in bytes of data, requested to be written by the user.
ETag	string
projectName	string
primaryNodeUUID	string
labels	array[object]	Once a snapshot is taken, the volume's labels are copied to the snapshot. Once a clone is created, if the user does not pass new labels on clone creation, the cloned volume labels are copied from the source snapshot labels.
key	string
value	string
clusterId	string	The ID of the cluster where the snapshot resides.
pgUUID	string	The Protection Group this snapshot is placed in.

400

Invalid argument.

401

Unauthorized: authentication failed.

403

Permission denied.

500

Internal Lightbits error.

default

An unexpected error response.

Response

Create snapshot.

Create a snapshot from a volume.

Auth

Path Params

projectName

string

projectName

The name of the project this snapshot belongs to

Request Body application/json

object	object
name	string	The name of the snapshot
sourceVolumeUUID	string	The UUID of the volume to create the snapshot from. You should specify either the UUID or the name. If both UUID and name are specified, the UUID takes precedence.
sourceVolumeName	string	The name of the volume to create the snapshot from. You should specify either the UUID or the name. If both UUID and name are specified, the UUID takes precedence.
retentionTime	string	The length of time in seconds to retain this snapshot for. Duration range: from 60s to 3153600000s (100 years). Example: "3600s".
description	string	A short description (up to 256B) of the snapshot.
projectName	string	The name of the project this snapshot belongs to

POST /api/v2/projects/{projectName}/snapshots

Responses application/json

200

A successful response.

object	object
state	string	Enum: `Unknown`,`Creating`,`Available`,`Deleting`,`Deleted`,`Failed` Default: Unknown
UUID	string
name	string
description	string
creationTime	date-time
retentionTime	string
sourceVolumeUUID	string
sourceVolumeName	string
replicaCount	int64
nodeList	array[string]
nsid	int64
acl	object
values	array[string]
compression	boolean
size	string
IPAcl	object
values	array[string]
sectorSize	int64
statistics5 fields	object
physicalCapacity	string	The physical capacity that exists in this volume layer.
physicalOwnedCapacity	string	The capacity that would be freed when the snapshot would be deleted.
physicalOwnedMemory	string	The number, in bytes, of md ranges multiplied by the size of md range.
physicalMemory	string	Memory used by this MSVV (how many chunks).
userWritten	string	Amount, in bytes of data, requested to be written by the user.
ETag	string
projectName	string
primaryNodeUUID	string
labels	array[object]	Once a snapshot is taken, the volume's labels are copied to the snapshot. Once a clone is created, if the user does not pass new labels on clone creation, the cloned volume labels are copied from the source snapshot labels.
key	string
value	string
clusterId	string	The ID of the cluster where the snapshot resides.
pgUUID	string	The Protection Group this snapshot is placed in.

400

Provided invalid argument with one of the following reasons: mandatory argument is missing, name contains illegal characters.

401

Unauthorized: authentication failed.

403

Permission denied.

404

Returned when the snapshot with the given source-volume UUID is not found.

409

Resource with the provided name already exists.

500

Internal Lightbits error.

501

Unimplemented capability (updating capacity).

default

An unexpected error response.

Response

Get snapshot.

Get snapshot by UUID/Name.

Auth

Path Params

projectName

string

projectName

The name of the project this snapshot belongs to.

UUID

string

UUID

The UUID of the snapshot to get (either UUID or Name must be specified).

Query String

Name

string

Name. The name of the snapshot to get (either UUID or Name must be specified).

GET /api/v2/projects/{projectName}/snapshots/{UUID}

Responses application/json

200

A successful response.

object	object
state	string	Enum: `Unknown`,`Creating`,`Available`,`Deleting`,`Deleted`,`Failed` Default: Unknown
UUID	string
name	string
description	string
creationTime	date-time
retentionTime	string
sourceVolumeUUID	string
sourceVolumeName	string
replicaCount	int64
nodeList	array[string]
nsid	int64
acl	object
values	array[string]
compression	boolean
size	string
IPAcl	object
values	array[string]
sectorSize	int64
statistics5 fields	object
physicalCapacity	string	The physical capacity that exists in this volume layer.
physicalOwnedCapacity	string	The capacity that would be freed when the snapshot would be deleted.
physicalOwnedMemory	string	The number, in bytes, of md ranges multiplied by the size of md range.
physicalMemory	string	Memory used by this MSVV (how many chunks).
userWritten	string	Amount, in bytes of data, requested to be written by the user.
ETag	string
projectName	string
primaryNodeUUID	string
labels	array[object]	Once a snapshot is taken, the volume's labels are copied to the snapshot. Once a clone is created, if the user does not pass new labels on clone creation, the cloned volume labels are copied from the source snapshot labels.
key	string
value	string
clusterId	string	The ID of the cluster where the snapshot resides.
pgUUID	string	The Protection Group this snapshot is placed in.

400

Invalid argument.

401

Unauthorized: authentication failed.

403

Permission denied.

404

Snapshot with UUID/Name not found.

500

Internal Lightbits error.

default

An unexpected error response.

Response

Delete snapshot.

Deletes snapshot with provided UUID. Deletion of a snapshot is a long operation. The status of deletion can be queried with a GET operation on the snapshot. As long as the operation runs, the snapshot state is Deleting. When the operation has completed, GET snapshot will return a NotFound error response.

Auth

Path Params

projectName

string

projectName

The name of the project this snapshot belongs to.

UUID

string

UUID

The UUID of the snapshot to delete (specify either UUID or Name).

Query String

name

string

name. The name of the snapshot to delete (specify either UUID or Name).

DELETE /api/v2/projects/{projectName}/snapshots/{UUID}

Responses application/json

200

A successful response.

object object

400

Provided invalid UUID or a snapshot state does not allow deletion (Deleting/Failed).

404

Snapshot with provided UUID is not found.

409

There is a user operation in progress on the snapshot

412

Etag mismatch.

500

Internal Lightbits error.

503

Snapshot is in a temporary state that does not currently allow deletion (Creating/Updating and volume Updating).

default

An unexpected error response.

Response

Volume Operations

/api/v2/volumes/{UUID}

DELETE

/api/v2/volumes/{UUID}

PUT

/api/v2/volumes/{UUID}

List volumes.

List can be filtered by failure domain. List can be partially returned by given offset UUID and size of the list. If offset is not provided, list is returned from the start. If offset UUID is provided, list starts from the next volume after the provided offset UUID. If limit is provided, length of the returned list is bounded by the limit. If limit is not provided, list is returned until the end. projectName is mandatory unless you are the admin. List can also be filtered by a specific source snapshot.

Auth

Query String

UUID	string	UUID. List only volume with matching UUID.
name	string	Name. List only volumes with specified name.
failureDomain	string	failureDomain. List volumes according to failureDomains volumes replicas are placed on.
offsetUUID	string	offsetUUID. When provided, returned list starts with next to offsetUUID volume.
limit	string	limit. Limits the number of volumes in the response (default/maximum value is 1000 volumes).
projectName	string	projectName. Optional. Return only volumes of the given project.
snapshotUUID	string	source snapshot UUID. Return only volumes created from this source snapshot.
showAll	boolean	showAll. Optional. Show also volumes in Deleting state (the default is false).

GET /api/v2/volumes

Responses application/json

200

A successful response.

object	object
volumes27 fields	array[object]
state	string	Indicates the current state of the volume in its creation/update/delete lifetime. It will reflect the state of execution of a user invoked API (CreateVolume, UpdateVolume..) or an internal operation (Volume migration). Enum: `Unknown`,`Creating`,`Available`,`Deleting`,`Deleted`,`Failed`,`Updating`,`Rollback`,`Migrating` Default: Unknown
protectionState	string	Indicates volume's data availability derived from the health of each of the replica's it resides on. Enum: `Unknown`,`FullyProtected`,`Degraded`,`ReadOnly`,`NotAvailable` Default: Unknown
replicaCount	int64	The number of replicas a volume can have. Valid values are 1, 2, and 3.
nodeList	array[string]	List of node UUIDs this volume is placed over.
UUID	string
nsid	int64	Volume's Namespace ID
acl	object	Access control list of strings (host NQN). Valid values: list of strings/ALLOW_ANY/ALLOW_NONE
values	array[string]
compression	string	valid values: true/enable/enabled or false/disable/disabled
size	string
name	string	A volume's name is unique at the project level. Name length must be between 1 and 253 characters and can contain any of: alphanumeric characters (a-z, A-Z, 0-9) ,hyphen (-), underscore (_) and period (.).
rebuildProgress	string	Progress of the volume's replica rebuild operation in percent.
statistics11 fields	object	Volume statistics. Contains information about the physical used capacity, used memory, compression ratio, and more.
logicalUsedStorage	string	Logical storage space used by volume, given in bytes.
physicalUsedStorage	string	Physical storage space used by volume excluding parity, given in bytes.
compressionRatio	number	compression ratio userWritten/physicalCapacity.
totalCompressionRatio	number	compression ratio sum(userWritten) / sum(physical capacity).
physicalCapacity	string	The physical capacity that exists in this volume layer.
physicalOwnedCapacity	string	The capacity that would be freed when the volume is deleted.
physicalOwnedMemory	string
physicalMemory	string
userWritten	string
unrecoverableDataIntegrityErrors	int64	Number of data integrity errors that could not be recovered by the system.
recoverableDataIntegrityErrors	int64	Number of data integrity errors that were recovered by the system.
IPAcl	object	Access control list of IP addresses. Valid values: list of valid IP addresses/ALLOW_ANY/ALLOW_NONE (optional, default: ALLOW_ANY).
values	array[string]
ETag	string	Identifier for a specific version of a resource.
connectedHosts	array[string]
sectorSize	int64	Volume sector size. Valid values: 4K (default), 512B.
projectName	string	Project name.
sourceSnapshotUUID	string	For a cloned volume, specify the source snapshot of this clone.
sourceSnapshotName	string	For a cloned volume, specify the source snapshot of this clone.
placementRestrictions2 fields	array[object]
operator	string	Volume affinity operator. Specifies that placement logic will match nodes that have labels in labelValueKeyPairs list. Enum: `Unknown`,`In` Default: Unknown
labelValueKeyPairs	array[object]	Volume affinity KeyPairs. Key currently must be one of: fd (failure domain). Value should specify the failure domains we want to match. PrimaryFd (primary failure domain). Value should specify the primary failure domain we want to match. ClusterId (cluster ID - ICM only). Value should specify the cluster ID we want to match.
key	string	Enum: `Unknown`,`FD`,`PrimaryFD`,`ClusterID` Default: Unknown
value	string
qosPolicyUUID	string	Optional volume's QoS policy UUID (if not specified the QoS policy defined in volume's project is used).
qosPolicyName	string	Optional volume's QoS policy name (if not specified the QoS policy defined in volume's project is used)
primaryNodeUUID	string	UUID of the primary node data is Read/Written for this volume.
creationTime	date-time	Time of volume creation (UTC).
labels	array[object]	Optionally add labels to a volume.
key	string
value	string
clusterId	string	The ID of the cluster where the volume resides.
pgUUID	string	The Protection Group this volume is placed in.

400

Invalid argument.

401

Unauthorized: authentication failed.

403

Permission denied.

500

Internal Lightbits error.

default

An unexpected error response.

Response

Create volume.

A volume has a user-defined name, capacity, and a string-based Access Control List (ACL). User can also select to enable compression and define IP-ACL (IP address-based control list).

Auth

Request Body application/json

object	object
name	string	A volume's name is unique at the project level. Name length must be between 1 and 253 characters and can contain any of: alphanumeric characters (a-z, A-Z, 0-9) ,hyphen (-), underscore (_) and period (.). pattern: `^[a-zA-Z0-9-_\.]{1,253}$`
size	string	Volume size.
acl	object	Access control list of strings (host NQN). Valid values: list of strings/ALLOW_ANY/ALLOW_NONE.
values	array[string]
compression	string	Volume compression. Valid values: true/enable/enabled/false/disable/disabled (default value is disable compression).
replicaCount	int64	The number of replicas a volume can have. Valid values are 1, 2, and 3.
IPAcl	object	Access control list of IP addresses. Valid values: list of valid IP addresses/ALLOW_ANY/ALLOW_NONE (optional, default: ALLOW_ANY).
values	array[string]
minReplicas	int64	not used.
sectorSize	string	Volume sector size. Valid values: 4K (default), 512B. Enum: `sectorSize_Default`,`sectorSize_512B`,`sectorSize_4K` Default: sectorSize_Default
projectName	string	Name of the project the volume belongs to.
sourceSnapshotUUID	string	Optionally specify a source snapshot to create a clone from (specify either sourceSnapshotUUID or sourceSnapshotName).
sourceSnapshotName	string	Optionally specify a source snapshot to create a clone from (specify either sourceSnapshotUUID or sourceSnapshotName).
placementRestrictions2 fields	array[object]	Specify volume affinity labels for placement restrictions This may only be specified for volumes of single replication (replicaCount=1), and where Dynamic Rebalance is disabled (feature flags FailInPlace and ProactiveRebalance, lbcli get feature-flag are false).
operator	string	Volume affinity operator. Specifies that placement logic will match nodes that have labels in labelValueKeyPairs list. Enum: `Unknown`,`In` Default: Unknown
labelValueKeyPairs	array[object]	Volume affinity KeyPairs. Key currently must be one of: fd (failure domain). Value should specify the failure domains we want to match. PrimaryFd (primary failure domain). Value should specify the primary failure domain we want to match. ClusterId (cluster ID - ICM only). Value should specify the cluster ID we want to match.
key	string	Enum: `Unknown`,`FD`,`PrimaryFD`,`ClusterID` Default: Unknown
value	string
qosPolicyUUID	string
qosPolicyName	string
labels	array[object]	User-defined labels are optional for a volume. Labels are key-value pairs. A volume can have up to 16 labels. label-key and label-value length must be between 1 and 253 characters and can contain any of: alphanumeric characters (a-z, A-Z, 0-9), hyphen (-), underscore (_), and period (.). When creating a clone, if labels are passed, the clone will be created with them. Otherwise, the labels are copied from the snapshot used for the clone.
key	string
value	string

POST /api/v2/volumes

Responses application/json

200

A successful response.

object	object
state	string	Indicates the current state of the volume in its creation/update/delete lifetime. It will reflect the state of execution of a user invoked API (CreateVolume, UpdateVolume..) or an internal operation (Volume migration). Enum: `Unknown`,`Creating`,`Available`,`Deleting`,`Deleted`,`Failed`,`Updating`,`Rollback`,`Migrating` Default: Unknown
protectionState	string	Indicates volume's data availability derived from the health of each of the replica's it resides on. Enum: `Unknown`,`FullyProtected`,`Degraded`,`ReadOnly`,`NotAvailable` Default: Unknown
replicaCount	int64	The number of replicas a volume can have. Valid values are 1, 2, and 3.
nodeList	array[string]	List of node UUIDs this volume is placed over.
UUID	string
nsid	int64	Volume's Namespace ID
acl	object	Access control list of strings (host NQN). Valid values: list of strings/ALLOW_ANY/ALLOW_NONE
values	array[string]
compression	string	valid values: true/enable/enabled or false/disable/disabled
size	string
name	string	A volume's name is unique at the project level. Name length must be between 1 and 253 characters and can contain any of: alphanumeric characters (a-z, A-Z, 0-9) ,hyphen (-), underscore (_) and period (.).
rebuildProgress	string	Progress of the volume's replica rebuild operation in percent.
statistics11 fields	object	Volume statistics. Contains information about the physical used capacity, used memory, compression ratio, and more.
logicalUsedStorage	string	Logical storage space used by volume, given in bytes.
physicalUsedStorage	string	Physical storage space used by volume excluding parity, given in bytes.
compressionRatio	number	compression ratio userWritten/physicalCapacity.
totalCompressionRatio	number	compression ratio sum(userWritten) / sum(physical capacity).
physicalCapacity	string	The physical capacity that exists in this volume layer.
physicalOwnedCapacity	string	The capacity that would be freed when the volume is deleted.
physicalOwnedMemory	string
physicalMemory	string
userWritten	string
unrecoverableDataIntegrityErrors	int64	Number of data integrity errors that could not be recovered by the system.
recoverableDataIntegrityErrors	int64	Number of data integrity errors that were recovered by the system.
IPAcl	object	Access control list of IP addresses. Valid values: list of valid IP addresses/ALLOW_ANY/ALLOW_NONE (optional, default: ALLOW_ANY).
values	array[string]
ETag	string	Identifier for a specific version of a resource.
connectedHosts	array[string]
sectorSize	int64	Volume sector size. Valid values: 4K (default), 512B.
projectName	string	Project name.
sourceSnapshotUUID	string	For a cloned volume, specify the source snapshot of this clone.
sourceSnapshotName	string	For a cloned volume, specify the source snapshot of this clone.
placementRestrictions2 fields	array[object]
operator	string	Volume affinity operator. Specifies that placement logic will match nodes that have labels in labelValueKeyPairs list. Enum: `Unknown`,`In` Default: Unknown
labelValueKeyPairs	array[object]	Volume affinity KeyPairs. Key currently must be one of: fd (failure domain). Value should specify the failure domains we want to match. PrimaryFd (primary failure domain). Value should specify the primary failure domain we want to match. ClusterId (cluster ID - ICM only). Value should specify the cluster ID we want to match.
key	string	Enum: `Unknown`,`FD`,`PrimaryFD`,`ClusterID` Default: Unknown
value	string
qosPolicyUUID	string	Optional volume's QoS policy UUID (if not specified the QoS policy defined in volume's project is used).
qosPolicyName	string	Optional volume's QoS policy name (if not specified the QoS policy defined in volume's project is used)
primaryNodeUUID	string	UUID of the primary node data is Read/Written for this volume.
creationTime	date-time	Time of volume creation (UTC).
labels	array[object]	Optionally add labels to a volume.
key	string
value	string
clusterId	string	The ID of the cluster where the volume resides.
pgUUID	string	The Protection Group this volume is placed in.

400

An invalid argument was provided, due to one of the following reasons: a mandatory argument is missing, name contains illegal characters, size is not a positive integer, replica count is outside of a valid range, ACL or IP-ACL are invalid.

401

Unauthorized: authentication failed.

403

Permission denied.

409

A volume with the provided name already exists.

500

Internal Lightbits error.

default

An unexpected error response.

Response

Get volume information.

Get volume information by provided UUID

Auth

Path Params

UUID

string

UUID

Optional. The volume's UUID. Either UUID or Name must be provided to identify the volume to get.

Query String

name	string	Name. Optional. The volume's name. Either UUID or Name must be provided to identify the volume to get.
projectName	string	projectName. Name of project volume belongs to.

GET /api/v2/volumes/{UUID}

Responses application/json

200

A successful response.

object	object
state	string	Indicates the current state of the volume in its creation/update/delete lifetime. It will reflect the state of execution of a user invoked API (CreateVolume, UpdateVolume..) or an internal operation (Volume migration). Enum: `Unknown`,`Creating`,`Available`,`Deleting`,`Deleted`,`Failed`,`Updating`,`Rollback`,`Migrating` Default: Unknown
protectionState	string	Indicates volume's data availability derived from the health of each of the replica's it resides on. Enum: `Unknown`,`FullyProtected`,`Degraded`,`ReadOnly`,`NotAvailable` Default: Unknown
replicaCount	int64	The number of replicas a volume can have. Valid values are 1, 2, and 3.
nodeList	array[string]	List of node UUIDs this volume is placed over.
UUID	string
nsid	int64	Volume's Namespace ID
acl	object	Access control list of strings (host NQN). Valid values: list of strings/ALLOW_ANY/ALLOW_NONE
values	array[string]
compression	string	valid values: true/enable/enabled or false/disable/disabled
size	string
name	string	A volume's name is unique at the project level. Name length must be between 1 and 253 characters and can contain any of: alphanumeric characters (a-z, A-Z, 0-9) ,hyphen (-), underscore (_) and period (.).
rebuildProgress	string	Progress of the volume's replica rebuild operation in percent.
statistics11 fields	object	Volume statistics. Contains information about the physical used capacity, used memory, compression ratio, and more.
logicalUsedStorage	string	Logical storage space used by volume, given in bytes.
physicalUsedStorage	string	Physical storage space used by volume excluding parity, given in bytes.
compressionRatio	number	compression ratio userWritten/physicalCapacity.
totalCompressionRatio	number	compression ratio sum(userWritten) / sum(physical capacity).
physicalCapacity	string	The physical capacity that exists in this volume layer.
physicalOwnedCapacity	string	The capacity that would be freed when the volume is deleted.
physicalOwnedMemory	string
physicalMemory	string
userWritten	string
unrecoverableDataIntegrityErrors	int64	Number of data integrity errors that could not be recovered by the system.
recoverableDataIntegrityErrors	int64	Number of data integrity errors that were recovered by the system.
IPAcl	object	Access control list of IP addresses. Valid values: list of valid IP addresses/ALLOW_ANY/ALLOW_NONE (optional, default: ALLOW_ANY).
values	array[string]
ETag	string	Identifier for a specific version of a resource.
connectedHosts	array[string]
sectorSize	int64	Volume sector size. Valid values: 4K (default), 512B.
projectName	string	Project name.
sourceSnapshotUUID	string	For a cloned volume, specify the source snapshot of this clone.
sourceSnapshotName	string	For a cloned volume, specify the source snapshot of this clone.
placementRestrictions2 fields	array[object]
operator	string	Volume affinity operator. Specifies that placement logic will match nodes that have labels in labelValueKeyPairs list. Enum: `Unknown`,`In` Default: Unknown
labelValueKeyPairs	array[object]	Volume affinity KeyPairs. Key currently must be one of: fd (failure domain). Value should specify the failure domains we want to match. PrimaryFd (primary failure domain). Value should specify the primary failure domain we want to match. ClusterId (cluster ID - ICM only). Value should specify the cluster ID we want to match.
key	string	Enum: `Unknown`,`FD`,`PrimaryFD`,`ClusterID` Default: Unknown
value	string
qosPolicyUUID	string	Optional volume's QoS policy UUID (if not specified the QoS policy defined in volume's project is used).
qosPolicyName	string	Optional volume's QoS policy name (if not specified the QoS policy defined in volume's project is used)
primaryNodeUUID	string	UUID of the primary node data is Read/Written for this volume.
creationTime	date-time	Time of volume creation (UTC).
labels	array[object]	Optionally add labels to a volume.
key	string
value	string
clusterId	string	The ID of the cluster where the volume resides.
pgUUID	string	The Protection Group this volume is placed in.

400

Invalid argument.

401

Unauthorized: authentication failed.

403

Permission denied.

404

Provided volume UUID is not found.

500

Internal Lightbits error.

default

An unexpected error response.

Response

Delete volume.

Deletes a volume according to the provided UUID or Name. Deletion of a volume is a long operation. The status of deletion can be queried by a GET operation on the volume. As long as the operation runs, the volume state is Deleting. Once the operation has completed, GET volume returns a NotFound error response.

Auth

Path Params

UUID

string

UUID

The volume's UUID for the delete volume request (optional; either UUID or Name must be provided to identify the volume to delete).

Query String

name	string	name. The volume's name for the delete volume request (optional; either UUID or Name must be provided to identify the volume to delete).
projectName	string	projectName. The project name of the volume to delete.

DELETE /api/v2/volumes/{UUID}

Responses application/json

200

A successful response.

object object

400

Provided invalid UUID, Name, or volume state does not allow deletion (Deleting/Failed).

401

Unauthorized: authentication failed.

403

Permission denied.

404

Volume with provided UUID or Name is not found.

409

There is a user operation in progress on the volume

412

Etag mismatch.

500

Internal Lightbits error.

503

Volume is in a temporary state that does not currently allow deletion (Creating/Updating).

default

An unexpected error response.

Response

Update volume.

Update volume enables the change of the following attributes: size compression ACL list IP-ACL list QoS labels.

Auth

Path Params

UUID

string

UUID

Optional identifier of the volume to update (command must use either name or UUID fields to identify volume).

Request Body application/json

object	object
UUID	string	Optional identifier of the volume to update (command must use either name or UUID fields to identify volume).
acl	object	Access control list of strings (host NQN). Valid values: list of strings/ALLOW_ANY/ALLOW_NONE
values	array[string]
IPAcl	object	Access control list of IP addresses. Valid values: list of valid IP addresses/ALLOW_ANY/ALLOW_NONE
values	array[string]
size	string
compression	string	valid values: true/enable/enabled or false/disable/disabled
projectName	string	Name of the project the volume belongs to.
qosPolicyUUID	string
qosPolicyName	string
Force	boolean	To intentionally shrink volume size, provide updated volume size and set force to true.
name	string	Optional identifier of the volume to update (command must use either name or UUID fields to identify volume).
labels	array[object]	User-defined labels are optional for a volume. Labels are key-value pairs. A volume can have up to 16 labels. label-key and label-value length must be between 1 and 253 characters and can contain any of: alphanumeric characters (a-z, A-Z, 0-9) ,hyphen (-), underscore (_) and period (.). If labels are passed during volume update, the existing volume's labels are replaced with the new ones. Otherwise, the labels are untouched.
key	string
value	string
newName	string	Volume new name. A volume's name is unique on the project level. Name length must be between 1 and 253 characters and can contain any of: alphanumeric characters (a-z, A-Z, 0-9) ,hyphen (-), underscore (_) and period (.).

PUT /api/v2/volumes/{UUID}

Responses application/json

200

A successful response.

object object

400

Invalid argument or a volume is in a state that cannot be updated (Deleting/Failed).

401

Unauthorized: authentication failed.

403

Permission denied.

404

Returned when the volume with given UUID is not found.

409

There is a user operation in progress on the volume.

412

Etag mismatch.

500

Internal Lightbits error.

501

Unimplemented capability (updating capacity).

503

Volume is in temporary state and cannot be updated now (Creating/Updating).

default

An unexpected error response.

Response

Thick Clone Service

POST

/api/v2/thick-clones/volumes

POST

/api/v2/thick-clones/snapshots

POST

/api/v2/thick-clones/operations/{workflow_id}/cancel

POST

/api/v2/thick-clones/refresh-clusters

volumes

Block-copies a source snapshot into a new, independent volume on any attached cluster. Returns the ID of the thick-clone workflow immediately; track progress with the Get/List Workflows API. Flags mirror lbcli create volume.

Auth

Request Body application/json

Thick Clone Snapshot To Volume Request	object	Copies all data of the source snapshot into a new, independent volume. Subject to rate limiting: when the running-workflow ceiling is reached the request is rejected with HTTP 429.
src3 fields	object	The source snapshot to clone from.
srcClusterId	string	The UUID of the cluster where the source snapshot is located.
srcProjectName	string	The project the source snapshot belongs to.
srcSnapshotId	string	The UUID of the snapshot to clone from.
dstClusterId	string	The UUID of the destination cluster.
dstProjectName	string	Optional. Destination project; unset inherits the source project.
dstName	string	Name of the new destination resource.
size	string	Optional. Size in bytes (string form, e.g. "10gib"); unset inherits the source snapshot's volume size. If set, must be >= the source size.
replicaCount	int32	Optional. Replica count (1-3); unset inherits from the source.
sectorSize	int64	Optional. Sector size (512 or 4096); unset inherits from the source.
compression	boolean	Optional. Compression for the destination; unset inherits from the source.
unencrypted	boolean	Optional. Create the destination unencrypted (hybrid-mode clusters only; the destination cluster may reject it). Default false.
qosPolicyName	string	Optional. QoS policy to assign to the destination volume.
placementAffinity	string	Optional. Placement affinity for the destination, mirroring `lbcli create volume --placement-affinity` (e.g. "primaryfd:server0").
verifyClone	boolean	Optional. Verify the clone by reading back the destination volume.

POST /api/v2/thick-clones/volumes

Responses application/json

200

A successful response.

Thick Clone Snapshot To Volume Response	object
workflowId	string	ID of the started workflow. Track it with the Get/List Workflows API.

429

Rate limited: the maximum number of concurrent workflows is in flight. Retry later.

Response

snapshots

Block-copies a source snapshot into a new, independent snapshot on any attached cluster. Returns the ID of the thick-clone workflow immediately.

Auth

Request Body application/json

Thick Clone Snapshot To Snapshot Request	object	Copies all data of the source snapshot into a new, independent snapshot. Same rate-limiting behavior as the volume clone.
src3 fields	object	The source snapshot to clone from.
srcClusterId	string	The UUID of the cluster where the source snapshot is located.
srcProjectName	string	The project the source snapshot belongs to.
srcSnapshotId	string	The UUID of the snapshot to clone from.
dstClusterId	string	The UUID of the destination cluster.
dstProjectName	string	Optional. Destination project; unset inherits the source project.
dstName	string	Name of the new destination resource.
size	string	Optional. Size in bytes (string form, e.g. "10gib"); unset inherits the source snapshot's volume size. If set, must be >= the source size.
replicaCount	int32	Optional. Replica count (1-3); unset inherits from the source.
sectorSize	int64	Optional. Sector size (512 or 4096); unset inherits from the source.
compression	boolean	Optional. Compression for the destination; unset inherits from the source.
unencrypted	boolean	Optional. Create the destination unencrypted (hybrid-mode clusters only; the destination cluster may reject it). Default false.
qosPolicyName	string	Optional. QoS policy to assign to the destination volume.
placementAffinity	string	Optional. Placement affinity for the destination, mirroring `lbcli create volume --placement-affinity` (e.g. "primaryfd:server0").
verifyClone	boolean	Optional. Verify the clone by reading back the destination volume.
description	string	Optional. Free-text description of the destination snapshot.

POST /api/v2/thick-clones/snapshots

Responses application/json

200

A successful response.

Thick Clone Snapshot To Snapshot Response	object
workflowId	string	ID of the started workflow. Track it with the Get/List Workflows API.

429

Rate limited: the maximum number of concurrent workflows is in flight. Retry later.

Response

cancel

Cancels a running thick-clone workflow and runs its compensation (cleanup of intermediate resources). The workflow_id path parameter identifies the workflow; the optional runId body field selects a specific run.

Auth

Path Params

workflow_id

string

The ID of the thick-clone workflow to cancel.

Request Body application/json

Cancel Thick Clone Operation Body	object
runId	string	Optional. The run ID (specify either the workflow_id path parameter or run_id).

POST /api/v2/thick-clones/operations/{workflow_id}/cancel

Responses application/json

200

A successful response.

Cancel Thick Clone Operation Response object

Response

refresh-clusters

Refresh attached clusters' cached information. Not yet served: currently returns Unimplemented (HTTP 501). Attached clusters refresh on their own schedule in the meantime.

Auth

Request Body application/json

Refresh Clusters Request

object

Trigger a refresh of the attached clusters' cached information.

POST /api/v2/thick-clones/refresh-clusters

Responses application/json

200

A successful response.

RefreshClusters Response	object
workflowId	string	ID of the started workflow. Track it with the Get/List Workflows API.

501

Not yet served: this endpoint currently returns Unimplemented (HTTP 501).

Response

ICM API v2Proprietary

Authentication

Icm

Get ICM service credentials

Login to the ICM.

List clusters.

Attach a new cluster.

Detach an existing cluster.

List workflows

Get a specific workflow

Cluster Operations

Retrieve cluster information.

Snapshot Operations

List snapshots.

Create snapshot.

Get snapshot.

Delete snapshot.

Volume Operations

List volumes.

Create volume.

Get volume information.

Delete volume.

Update volume.

Thick Clone Service

volumes

snapshots

cancel

refresh-clusters

ICM API v2 Proprietary