OpenAPI Specification
swagger: '2.0'
info:
contact:
email: info@portainer.io
description: 'Portainer API is an HTTP API served by Portainer. It is used by the Portainer UI and everything you can do with the UI can be done using the HTTP API.
Examples are available at https://documentation.portainer.io/api/api-examples/
You can find out more about Portainer at [http://portainer.io](http://portainer.io) and get some support on [Slack](http://portainer.io/slack/).
# Authentication
Most of the API environments(endpoints) require to be authenticated as well as some level of authorization to be used.
Portainer API uses JSON Web Token to manage authentication and thus requires you to provide a token in the **Authorization** header of each request
with the **Bearer** authentication mechanism.
Example:
```
Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6MSwidXNlcm5hbWUiOiJhZG1pbiIsInJvbGUiOjEsImV4cCI6MTQ5OTM3NjE1NH0.NJ6vE8FY1WG6jsRQzfMqeatJ4vh2TWAeeYfDhP71YEE
```
# Security
Each API environment(endpoint) has an associated access policy, it is documented in the description of each environment(endpoint).
Different access policies are available:
- Public access
- Authenticated access
- Restricted access
- Administrator access
### Public access
No authentication is required to access the environments(endpoints) with this access policy.
### Authenticated access
Authentication is required to access the environments(endpoints) with this access policy.
### Restricted access
Authentication is required to access the environments(endpoints) with this access policy.
Extra-checks might be added to ensure access to the resource is granted. Returned data might also be filtered.
### Administrator access
Authentication as well as an administrator role are required to access the environments(endpoints) with this access policy.
# Execute Docker requests
Portainer **DO NOT** expose specific environments(endpoints) to manage your Docker resources (create a container, remove a volume, etc...).
Instead, it acts as a reverse-proxy to the Docker HTTP API. This means that you can execute Docker requests **via** the Portainer HTTP API.
To do so, you can use the `/endpoints/{id}/docker` Portainer API environment(endpoint) (which is not documented below due to Swagger limitations). This environment(endpoint) has a restricted access policy so you still need to be authenticated to be able to query this environment(endpoint). Any query on this environment(endpoint) will be proxied to the Docker API of the associated environment(endpoint) (requests and responses objects are the same as documented in the Docker API).
# Private Registry
Using private registry, you will need to pass a based64 encoded JSON string ‘{"registryId":\<registryID value\>}’ inside the Request Header. The parameter name is "X-Registry-Auth".
\<registryID value\> - The registry ID where the repository was created.
Example:
```
eyJyZWdpc3RyeUlkIjoxfQ==
```
**NOTE**: You can find more information on how to query the Docker API in the [Docker official documentation](https://docs.docker.com/engine/api/v1.30/) as well as in [this Portainer example](https://documentation.portainer.io/api/api-examples/).
'
license:
name: zlib
url: https://github.com/portainer/portainer/blob/develop/LICENSE
title: PortainerCE auth edge_groups API
version: 2.39.1
basePath: /api
schemes:
- http
- https
tags:
- description: Manage Edge Groups
name: edge_groups
paths:
/edge_groups:
get:
description: '**Access policy**: administrator'
operationId: EdgeGroupList
produces:
- application/json
responses:
'200':
description: EdgeGroups
schema:
items:
$ref: '#/definitions/edgegroups.decoratedEdgeGroup'
type: array
'500':
description: Internal Server Error
'503':
description: Edge compute features are disabled
security:
- ApiKeyAuth: []
- jwt: []
summary: list EdgeGroups
tags:
- edge_groups
post:
consumes:
- application/json
description: '**Access policy**: administrator'
operationId: EdgeGroupCreate
parameters:
- description: EdgeGroup data
in: body
name: body
required: true
schema:
$ref: '#/definitions/edgegroups.edgeGroupCreatePayload'
produces:
- application/json
responses:
'200':
description: OK
schema:
$ref: '#/definitions/portainer.EdgeGroup'
'500':
description: Internal Server Error
'503':
description: Edge compute features are disabled
security:
- ApiKeyAuth: []
- jwt: []
summary: Create an EdgeGroup
tags:
- edge_groups
/edge_groups/{id}:
delete:
description: '**Access policy**: administrator'
operationId: EdgeGroupDelete
parameters:
- description: EdgeGroup Id
in: path
name: id
required: true
type: integer
responses:
'204':
description: No Content
'409':
description: Edge group is in use by an Edge stack or Edge job
'500':
description: Server error
'503':
description: Edge compute features are disabled
security:
- ApiKeyAuth: []
- jwt: []
summary: Deletes an EdgeGroup
tags:
- edge_groups
get:
description: '**Access policy**: administrator'
operationId: EdgeGroupInspect
parameters:
- description: EdgeGroup Id
in: path
name: id
required: true
type: integer
produces:
- application/json
responses:
'200':
description: OK
schema:
$ref: '#/definitions/portainer.EdgeGroup'
'500':
description: Internal Server Error
'503':
description: Edge compute features are disabled
security:
- ApiKeyAuth: []
- jwt: []
summary: Inspects an EdgeGroup
tags:
- edge_groups
put:
consumes:
- application/json
description: '**Access policy**: administrator'
operationId: EdgeGroupUpdate
parameters:
- description: EdgeGroup Id
in: path
name: id
required: true
type: integer
- description: EdgeGroup data
in: body
name: body
required: true
schema:
$ref: '#/definitions/edgegroups.edgeGroupUpdatePayload'
produces:
- application/json
responses:
'200':
description: OK
schema:
$ref: '#/definitions/portainer.EdgeGroup'
'500':
description: Internal Server Error
'503':
description: Edge compute features are disabled
security:
- ApiKeyAuth: []
- jwt: []
summary: Updates an EdgeGroup
tags:
- edge_groups
definitions:
edgegroups.edgeGroupUpdatePayload:
properties:
Dynamic:
type: boolean
Endpoints:
items:
type: integer
type: array
Name:
type: string
PartialMatch:
type: boolean
TagIDs:
items:
type: integer
type: array
type: object
edgegroups.edgeGroupCreatePayload:
properties:
Dynamic:
type: boolean
Endpoints:
items:
type: integer
type: array
Name:
type: string
PartialMatch:
type: boolean
TagIDs:
items:
type: integer
type: array
type: object
portainer.EndpointType:
enum:
- 0
- 1
- 2
- 3
- 4
- 5
- 6
- 7
type: integer
x-enum-varnames:
- _
- DockerEnvironment
- AgentOnDockerEnvironment
- AzureEnvironment
- EdgeAgentOnDockerEnvironment
- KubernetesLocalEnvironment
- AgentOnKubernetesEnvironment
- EdgeAgentOnKubernetesEnvironment
roar.Roar-portainer_EndpointID:
type: object
portainer.EdgeGroup:
properties:
Dynamic:
type: boolean
EndpointIds:
$ref: '#/definitions/roar.Roar-portainer_EndpointID'
Endpoints:
description: 'Deprecated: only used for API responses'
items:
type: integer
type: array
Id:
description: EdgeGroup Identifier
example: 1
type: integer
Name:
type: string
PartialMatch:
type: boolean
TagIds:
items:
type: integer
type: array
type: object
edgegroups.decoratedEdgeGroup:
properties:
Dynamic:
type: boolean
EndpointIds:
description: Shadow to avoid exposing in the API
type: integer
EndpointTypes:
items:
$ref: '#/definitions/portainer.EndpointType'
type: array
Endpoints:
description: 'Deprecated: only used for API responses'
items:
type: integer
type: array
HasEdgeJob:
type: boolean
HasEdgeStack:
type: boolean
Id:
description: EdgeGroup Identifier
example: 1
type: integer
Name:
type: string
PartialMatch:
type: boolean
TagIds:
items:
type: integer
type: array
TrustedEndpoints:
items:
type: integer
type: array
type: object
securityDefinitions:
ApiKeyAuth:
in: header
name: X-API-KEY
type: apiKey
jwt:
in: header
name: Authorization
type: apiKey