POST /v1/admin/control-upgrade-checks
Check local control-plane upgrade eligibility
说明（契约原文）
Requires control.upgrades.check in a platform scope. The decision re-verifies the locally cached signed entitlement lease, checks its release channel and version range, then evaluates the current locally cached signed platform policy. The license service is not called by this request. Business denials return 200 with eligible=false and a stable reason; authentication, validation, and idempotency failures retain their normal HTTP status. An identical idempotent replay returns the original decision without appending another audit event.
参数
| 名称 | 位置 | 类型 | 必填 | 说明 |
|---|---|---|---|---|
Idempotency-Key | header | string | 是 | — |
请求体
application/json · 必填：是
| 名称 | 类型 | 必填 | 说明 |
|---|---|---|---|
component | string | 是 | — |
current_version | string | 是 | Canonical SemVer without a v prefix or build metadata. |
channel | string | 是 | — |
响应
| 状态码 | 说明 |
|---|---|
200 | Eligible or a stable business denial based only on verified local state. 字段： |
400 | 请求体或参数不合法。 |
401 | 认证失败或会话已失效。 |
403 | 当前身份没有执行该操作的权限。 |
409 | 请求的状态与已有资源或幂等记录冲突。 |
500 | 服务内部故障，请求未完成。 |
失败时怎么办
400按字段说明修正参数或请求体再发；不要原样重试。401检查凭据格式、是否过期或被轮换。403检查 Key 范围与所有者当前权限、当前租户作用域；不要换更高权限账号绕过。409先回读资源当前状态；同一操作重试保持原 Idempotency-Key 和原请求内容。500结果未知：先按资源 ID 或列表回读确认，再决定是否用原 Idempotency-Key 重试。