Get Credential Rotation Status

View as Markdown

Report convergence of an in-flight or completed site-wide credential rotation. When deviceMac is set, the counts describe just that device and a per-device detail block is returned. Equivalent to nico-admin-cli credential rotation-status.

User must have authorization role with PROVIDER_ADMIN suffix.

Authentication

AuthorizationBearer
``` export JWT_BEARER_TOKEN="<jwt-bearer-token>" # Example org name: "acme-inc export ORG_NAME=<org-name> # Use the JWT bearer token in your API request auth header: curl -v -X GET -H "Content-Type: application/json" -H "Authorization: Bearer $JWT_BEARER_TOKEN" https://nico-rest-api.nico.svc.cluster.local/v2/org/$ORG_NAME/nico/user/current ```

Path parameters

orgstringRequired
Name of the Org

Query parameters

siteIdstringRequiredformat: "uuid"
ID of the Site to query.
credentialTypeenumRequired
Credential family to report.
Allowed values:
deviceMacstringOptional
Report only this device's convergence, matched by MAC.

Response

Credential rotation status
targetVersionuint>=0

Current site-wide target version for this family.

convergeduint64>=0
Number of devices at or beyond the target version.
pendinguint64>=0
Number of devices not yet converged and eligible to rotate.
quarantineduint64>=0
Number of devices currently in a rotation backoff window.
completeboolean
True only when every device in the queried set has reached the target with none pending and none quarantined.
quarantinedDeviceMacslist of strings or nullOptional
MAC addresses of the quarantined devices.
starteddatetime or nullOptional
When the current target version was staged.
deviceobjectOptional

Per-device convergence detail, returned only for a MAC-targeted status query.

Errors

400
Bad Request Error
403
Forbidden Error
404
Not Found Error