Operations API endpoints return 404 for tenant

[cdot65]

Description

All /operations/v1/ endpoints return gateway-level 404s when called with valid credentials. The endpoints match the OpenAPI spec (openapi/operations-march-v1.1.yaml) exactly, but the API gateway does not route them for the test tenant (TSG 1527824794).

Affected Endpoints

Endpoint	Method	Status
/operations/v1/local-config/versions	GET	404
/operations/v1/local-config/download	GET	404
/operations/v1/jobs/route-table	POST	404
/operations/v1/jobs/fib-table	POST	404
/operations/v1/jobs/dns-proxy	POST	404
/operations/v1/jobs/device-interfaces	POST	404
/operations/v1/jobs/device-rules	POST	404
/operations/v1/jobs/bgp-policy-export	POST	404
/operations/v1/jobs/logging-service-forwarding-status	POST	404
/operations/v1/device/jobs/{id}	GET	403 (different — route exists but access denied)

Error Response

All 404s return a gateway-level error (not the standard SCM _errors format):

{
  "statusCode": 404,
  "error": "Not Found",
  "message": "Not Found",
  "errorCode": "Not Found",
  "errorMessage": "Not Found",
  "httpStatusCode": 404,
  "ok": false,
  "trackingId": "c72700fc-d8fe-4696-b19d-a1be476dedd4"
}

Verified

• Endpoints match OpenAPI spec server URL (https://api.strata.paloaltonetworks.com/operations/v1)
• All paths match spec exactly (local-config/versions, local-config/download, jobs/*, device/jobs/{id})
• Authentication succeeds (token is valid — other SCM APIs work)
• Tested with both SDK and raw curl

Likely Cause

The /operations/v1 API is not provisioned/enabled for this tenant. May require:

• Specific NGFW entitlement or license
• Tenant-level API enablement by Palo Alto Networks
• Different service account permissions

Reproduction

TOKEN="<valid_bearer_token>"

curl -s -H "Authorization: Bearer $TOKEN" \
  "https://api.strata.paloaltonetworks.com/operations/v1/local-config/versions?device=007951000123456"

Context

• SDK version: 0.13.0
• Services added in PR feat: add Operations and Incidents API support #350
• Validation script: validate_operations_api.py