API /nodes/{node}/network endpoint wont return bridges

[ubeF]

I'm running Proxmox VE 8.4.0 with two ethernet devices and two linux bridges, but when i hit /nodes/{node}/network the result only contains my ethernet devices. When i filter for bridges /nodes/{node}/network?type=any_bridge the result turns up empty.

 

[Hannes Laimer]

Hey,

what do these

pvesh get /nodes/localhost/network
pvesh get /nodes/localhost/network --type=any_bridge

say?

How does your /etc/network/interfaces look?

 

[ubeF]

config:

> cat /etc/network/interfaces
auto lo
iface lo inet loopback

iface eno1 inet manual

iface eno2 inet manual

auto vmbr0
iface vmbr0 inet static
        address 172.17.41.12/23
        gateway 172.17.40.1
        bridge-ports eno1
        bridge-stp off
        bridge-fd 0

auto MCNPR
iface MCNPR inet manual
        bridge-ports none
        bridge-stp off
        bridge-fd 0

pvesh works as expected:

 > pvesh get /nodes/localhost/network
┌───────┬────────┬────────┬──────────────┬──────────┬───────────┬──────────────┬───────────┬───────────────────────┬───────────────┬────────────────────────
│ iface │ type   │ active │ address      │ address6 │ autostart │ bond-primary │ bond_mode │ bond_xmit_hash_policy │ bridge-access │ bridge-arp-nd-suppress
╞═══════╪════════╪════════╪══════════════╪══════════╪═══════════╪══════════════╪═══════════╪═══════════════════════╪═══════════════╪════════════════════════
│ MCNPR │ bridge │ 1      │              │          │ 1         │              │           │                       │               │
├───────┼────────┼────────┼──────────────┼──────────┼───────────┼──────────────┼───────────┼───────────────────────┼───────────────┼────────────────────────
│ eno1  │ eth    │ 1      │              │          │           │              │           │                       │               │
├───────┼────────┼────────┼──────────────┼──────────┼───────────┼──────────────┼───────────┼───────────────────────┼───────────────┼────────────────────────
│ eno2  │ eth    │        │              │          │           │              │           │                       │               │
├───────┼────────┼────────┼──────────────┼──────────┼───────────┼──────────────┼───────────┼───────────────────────┼───────────────┼────────────────────────
│ vmbr0 │ bridge │ 1      │ 172.17.41.12 │          │ 1         │              │           │                       │               │
└───────┴────────┴────────┴──────────────┴──────────┴───────────┴

 > pvesh get /nodes/localhost/network --type=bridge
┌───────┬────────┬────────┬──────────────┬──────────┬───────────┬──────────────┬───────────┬───────────────────────┬───────────────┬────────────────────────
│ iface │ type   │ active │ address      │ address6 │ autostart │ bond-primary │ bond_mode │ bond_xmit_hash_policy │ bridge-access │ bridge-arp-nd-suppress
╞═══════╪════════╪════════╪══════════════╪══════════╪═══════════╪══════════════╪═══════════╪═══════════════════════╪═══════════════╪════════════════════════
│ MCNPR │ bridge │ 1      │              │          │ 1         │              │           │                       │               │
├───────┼────────┼────────┼──────────────┼──────────┼───────────┼──────────────┼───────────┼───────────────────────┼───────────────┼────────────────────────
│ vmbr0 │ bridge │ 1      │ 172.17.41.12 │          │ 1         │              │           │                       │               │
└───────┴────────┴────────┴──────────────┴──────────┴───────────┴──────────────┴───────────┴───────────────────────┴───────────────┴────────────────────────

the API call made with ansible, targeting the same node:

ok: [127.0.0.1] => {
    "msg": "API returned: {'content': '{\"data\":[{\"method\":\"manual\",\"method6\":\"manual\",\"exists\":1,\"priority\":4,\"families\":[\"inet\"],\"type\":\"eth\",\"iface\":\"eno2\"},{\"exists\":1,\"method6\":\"manual\",\"method\":\"manual\",\"active\":1,\"priority\":3,\"type\":\"eth\",\"iface\":\"eno1\",\"families\":[\"inet\"]}]}', 'redirected': False, 'url': 'https://<host>:8006/api2/json/nodes/c1b1hyper1/network', 'status': 200, 'cache_control': 'max-age=0', 'connection': 'close', 'date': 'Thu, 07 Aug 2025 11:38:08 GMT', 'pragma': 'no-cache', 'server': 'pve-api-daemon/3.0', 'content_length': '243', 'content_type': 'application/json;charset=UTF-8', 'expires': 'Thu, 07 Aug 2025 11:38:08 GMT', 'cookies_string': '', 'cookies': {}, 'msg': 'OK (243 bytes)', 'elapsed': 0, 'changed': False, 'json': {'data': [{'method': 'manual', 'method6': 'manual', 'exists': 1, 'priority': 4, 'families': ['inet'], 'type': 'eth', 'iface': 'eno2'}, {'exists': 1, 'method6': 'manual', 'method': 'manual', 'active': 1, 'priority': 3, 'type': 'eth', 'iface': 'eno1', 'families': ['inet']}]}, 'failed': False}"
}

 

[Hannes Laimer]

pvesh is hitting the API, this is not calling anything directly. Could you try curl with an API token? For an example look at [1].

[1] https://pve.proxmox.com/wiki/Proxmox_VE_API#Example:_Use_API_Token

 

[ubeF]

I turned of privilege separation on the API token i was using. Now i get the expected results. I don't quite get why listing bridges requires higher privileges then listing ethernet ports tho.