RunPod•2w ago

Requests using RUNPOD_API_KEY fail with 403 unauthorized.

Hello, I'm experimenting with using runpod for running a bunch of one-off jobs. According to the [pods environment variables] page, the RUNPOD_API_KEY is an api key for making api calls scoped to the specific job. Basically, I want to terminate (or at least shut down) the pod once it is done with its task. However when I make a call to the rest api, I get 403 Forbidden and an empty response body. Here is how I am calling the api (nodejs from within the container):

fetch('https://rest.runpod.io/v1/pods/' + process.env.RUNPOD_POD_ID + "/stop", {
  method: 'POST',
  headers: {
    Authorization: 'Bearer ' + process.env.RUNPOD_API_KEY,
    "user-agent": "RE-TEST/1.0.0"
  }
})

fetch('https://rest.runpod.io/v1/pods/' + process.env.RUNPOD_POD_ID + "/stop", {
  method: 'POST',
  headers: {
    Authorization: 'Bearer ' + process.env.RUNPOD_API_KEY,
    "user-agent": "RE-TEST/1.0.0"
  }
})

Any help with this would be highly appreciated

13 Replies

Dj•2w ago

Hey, the RUNPOD_API_KEY is scoped to the current Pod. I believe something similiar to this is on our roadmap, I can look into it for you in the morning when the rest of the team is available. I guess as a quick workaround you can make the pods with a superuser key in the env with another name? 😅

ajgeiss0702OP•2w ago

I'm not sure i'm understanding this correctly. If the api key is scoped to the current pod, then why is it failing? Since I am trying to stop the current pod

ajgeiss0702OP•2w ago

I guess i forgot to mention this, but I also logged the two mentioned variables to be sure they were set, and they were

Jason•2w ago

maybe, its scoped for only graphql just guessing..

Dj•2w ago

They're the same auth mechanism, I'm reading the code to make sure I understood this right

ajgeiss0702OP•2w ago

I set this thread to send me notifications, but its not for some reason. So if you do find an answer, please ping me

Dj•2w ago

Okay, I don't actually work on our tools so this took me some time to read through and figure out. DeletePod requires ReadWrite permissions, and I'm going to guess (because I can't tell entirely) the API_KEY loaded into the pod only has Read. In the morning, I'll have the engineer who maintains the REST API follow up with you here - so I won't mention you just yet. I'll also look into getting the docs clarified about the permissions the key actually has.

ajgeiss0702OP•2w ago

ok, thank you!

Dj•2w ago

@nathaniel Can you help here?

nathaniel•2w ago

yes, I believe this is a scope issue with the api key that gets generated for the pod. let me check how it’s supposed to work in code if it usually works with things like runpodctl stop which I think I’ve seen people do, then it’s an issue with how rest api parses the scopes

ajgeiss0702OP•2w ago

i'm using this for now, but in the future i would like to be able to use the pod-scoped key to terminate the pod

nathaniel•2w ago

that makes sense. will get back to you on this in next few days

ajgeiss0702OP•5d ago

has there been any updates to this?

Gaming

Programming

Requests using RUNPOD_API_KEY fail with 403 unauthorized.

Did you find this page helpful?