API Reference

Mutations

All write operations available in the flex.plane GraphQL API, grouped by domain.

Mutations modify state: they create, update, and delete resources. Each mutation requires a specific role, enforced by the @hasRole directive.

VM Lifecycle

`createVM(zone: ID!, host: ID, name: String!, options: VMOptions!): VM!`

Provisions a new virtual machine. Requires a zone, name, and options specifying the image, compute profile, storage profile, credentials, and network interfaces. If host is omitted, the scheduler selects the best host.

Role: USER

The VMOptions input:

Field	Type	Description
`image`	`ID!`	OS image ID from the catalog
`computeProfile`	`ID!`	Compute profile ID (CPU/memory sizing)
`storageProfile`	`ID!`	Storage profile ID for the boot disk
`interfaces`	`[NetworkInterfaceOption!]!`	At least one network interface
`sshPublicKey`	`String!`	SSH public key for access
`user`	`String!`	Default username
`password`	`String!`	Default password
`backup`	`Boolean!`	Enable automatic backups
`additionalDisks`	`[DiskOption!]`	Extra data disks (optional)
`cloudInit`	`CloudInitOptions`	Custom cloud-init config (optional)

`startVM(vmId: ID!): VM!`

Starts a stopped VM. Role: USER

`stopVM(vmId: ID!): VM!`

Stops a running VM. Role: USER

`rebootVM(vmId: ID!): VM!`

Reboots a running VM. Role: USER

`deleteVM(vmId: ID!): ID!`

Permanently deletes a VM and its associated resources. Returns the deleted VM's ID. Role: USER

`scaleVM(vmId: ID!, computeProfile: ID!): VM!`

Changes the VM's compute profile (CPU and memory allocation). The VM may need to be stopped depending on the scaling direction.

Role: USER

`cloneVM(vmId: ID!, name: String!, full: Boolean!): VM!`

Creates a copy of an existing VM. Set full: true for a full (standalone) clone or full: false for a linked clone.

Role: USER

`remoteMigrateVM(vmId: ID!, destinationHostId: ID!): VM!`

Live-migrates a VM to a different host. The destination host must be in the same zone with compatible storage.

Role: USER

VM Networking

`connectVMNetwork(vmId: ID!, network: NetworkInterfaceOption!): VM!`

Attaches a new network interface to a VM. Each VM supports up to 4 network interfaces. Optionally specify a static IPv4 address; otherwise one is assigned automatically.

Role: USER

`disconnectVMNetwork(vmId: ID!, network: ID!): VM!`

Removes a network interface from a VM by network ID.

Role: USER

VM Storage

`attachVMDisk(vmId: ID!, disk: AttachDiskOption!): VM!`

Attaches a new disk to a VM. Specify the storage profile and size in GB (minimum 1).

Role: USER

`detachVMDisk(vmId: ID!, disk: ID!): VM!`

Detaches a disk from a VM by disk ID.

Role: USER

`resizeVMDisk(vmId: ID!, disk: ID!, size: Int64!): VM!`

Increases the size of an existing disk. Disks can only grow, never shrink.

Role: USER

Resizing the disk at the hypervisor level does not automatically resize the filesystem inside the VM. You may need to run growpart and resize2fs (or equivalent) inside the guest OS.

VM Data Protection

`backupVM(vmId: ID!): String!`

Creates a backup of a VM. Returns a task ID for tracking progress.

Role: USER

`restoreVM(vmId: ID!, backup: ID!): String!`

Restores a VM from a specific backup. Returns a task ID.

Role: USER

`deleteVMBackup(vmId: ID!, backup: ID!): String!`

Deletes a specific VM backup. Returns a task ID.

Role: USER

`snapshotVM(vmId: ID!, description: String!): String!`

Takes a point-in-time snapshot of a VM with a description.

Role: USER

`rollbackVM(vmId: ID!, snapshot: ID!): String!`

Rolls a VM back to a previous snapshot. This discards all changes made after the snapshot was taken.

Role: USER

`deleteVMSnapshot(vmId: ID!, snapshot: ID!): String!`

Deletes a specific snapshot.

Role: USER

VM Security

`createVMFirewallRule(vmId: ID!, rule: CreateFirewallRuleInput!): [FirewallRule!]!`

Adds a firewall rule to a VM. Returns the complete rule set after the addition.

Role: USER

The CreateFirewallRuleInput:

Field	Type	Description
`action`	`FirewallRuleAction!`	`ACCEPT`, `DROP`, or `REJECT`
`direction`	`FirewallRuleDirection`	`IN` or `OUT`
`protocol`	`FirewallRuleProtocol`	`TCP`, `UDP`, or `ICMP`
`dport`	`String`	Destination port or range (e.g., `"443"` or `"8000:9000"`)
`source`	`String`	Source IP or CIDR (e.g., `"10.0.0.0/24"`)
`comment`	`String`	Human-readable description

`deleteVMFirewallRule(vmId: ID!, position: Int!): [FirewallRule!]!`

Removes a firewall rule by its position index.

Role: USER

`setVMFirewallOptions(vmId: ID!, options: FirewallOptionsInput!): FirewallOptions!`

Enables or disables the VM firewall. When enabled: true, traffic is filtered by the configured rules and default policies.

Role: USER

`writeVMFile(vmId: ID!, path: String!, content: String!): Boolean!`

Writes content to a file inside a VM via the QEMU guest agent.

Role: USER

Networking

`createNetwork(id: ID!, name: String!, ipRange: String!): Network!`

Creates a new virtual network with the specified ID, name, and IP range (CIDR notation).

Role: VDC_USER

mutation {
  createNetwork(
    id: "web-tier"
    name: "Web Tier Network"
    ipRange: "10.10.0.0/24"
  ) {
    id
    name
    ipRange
    gateway
  }
}

`deleteNetwork(id: ID!): String!`

Deletes a network. All VMs must be disconnected from the network first.

Role: VDC_USER

`createLoadBalancer(name: String!, options: LoadBalancerOptions!): LoadBalancer!`

Creates a new load balancer with forwarding rules, path-based routing, and optional TLS.

Role: VDC_USER

`deleteLoadBalancer(id: ID!): String!`

Deletes a load balancer.

Role: VDC_USER

Edge Gateway

`setDefaultPolicy(input: DefaultPolicyInput!): GatewayFirewall!`

Sets the default inbound and outbound firewall policies on the VDC's edge gateway. Policies can be ACCEPT, DROP, or REJECT.

Role: VDC_ADMIN

`addFirewallRule(rule: CreateFirewallRuleInput!): [FirewallRule!]!`

Adds a firewall rule to the VDC's edge gateway.

Role: VDC_ADMIN

`deleteFirewallRule(position: Int!): [FirewallRule!]!`

Removes a firewall rule from the edge gateway by position.

Role: VDC_ADMIN

Kubernetes

`createKubernetesCluster(name: String!, version: String!, nodePools: [KubernetesNodePoolOptions!]!): KubernetesCluster!`

Creates a new managed Kubernetes cluster with the specified version and node pools. Each node pool defines a region, zone, size (number of nodes), compute profile, and optional taints.

Role: USER

mutation {
  createKubernetesCluster(
    name: "prod-cluster"
    version: "v1.31.0"
    nodePools: [
      {
        name: "default"
        region: "eu-central"
        zone: "zone-a"
        size: 3
        computeProfile: "medium"
        taints: []
      }
    ]
  ) {
    id
    name
    state { status }
  }
}

`scaleKubernetesCluster(id: ID!, nodePools: [KubernetesNodePoolOptions!]!): KubernetesCluster!`

Scales an existing cluster by updating its node pool configuration. You can change pool sizes, add new pools, or modify taints.

Role: USER

`deleteKubernetesCluster(id: ID!): ID!`

Deletes a Kubernetes cluster and all its associated resources.

Role: USER

VDC Management

`createVirtualDatacenter(id: String!, name: String!, quota: VirtualDatacenterQuotaInput): VirtualDatacenter!`

Creates a new Virtual Datacenter. The id must be a valid hostname with a maximum of 8 characters. Optional quota limits can be set for vCPUs and memory.

Role: ADMIN