update_ai_environment
Update the organisation's AI environment settings. Organisation admins only. Only the fields present in the call change; pass an empty string to clear staging_cluster_id or any demo domain field. Setting staging_cluster_id is the switch that turns on PR preview environments and AI workspaces: the cluster must belong to the organisation and not be a sandbox, and once set the platform provisions the cluster's preview DNS zone and installs external-dns on it automatically so demo preview hostnames resolve. demo_base_domain (with the optional demo_ingress_class_name and demo_tls_secret_name) overrides the platform zone with an organisation-owned wildcard domain the admin points at the staging cluster themselves. Returns the saved settings.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| demo_ttl_hours | No | Default hours a PR demo lives before the reaper deletes it (1-720). | |
| dns_root_domain | No | The organisation's own custom root domain its delegated DNS zones (and so its platform-zone preview URLs) hang off - a bare domain dedicated to this organisation, unique across organisations, whose NS records must already point at the Ankra nameservers (the ones serving the platform default). Empty string returns to the platform default (dns_root_domain_default). Zones already provisioned keep their root; a change is refused while cluster DNS zones or manual DNS records still live under the old root, and otherwise the organisation zone is torn down and re-created under the new domain automatically. | |
| demo_base_domain | No | Organisation-owned bare DNS zone (like previews.example.com) public demo URLs hang off; the admin points its wildcard DNS at the staging cluster. Empty string clears it, falling back to the staging cluster's platform-provisioned zone. | |
| demo_ttl_role_caps | No | Per-role demo TTL caps in hours, keyed by 'admin', 'operator', or 'member' (values 1-720). Only the provided roles change. | |
| staging_cluster_id | No | UUID of the cluster to stage AI workspaces and PR demos on. Empty string clears the staging cluster (which disables PR demos and workspaces). Discover ids with list_clusters. | |
| workspace_ttl_hours | No | Hours an ephemeral AI workspace pod lives before the reaper deletes it (1-168). | |
| demo_tls_secret_name | No | Kubernetes TLS secret name backing https on demo_base_domain hosts; the secret must exist in each demo namespace (for example via a secret replicator). Empty string clears it, serving previews over http. | |
| demo_ingress_class_name | No | IngressClass demo Ingresses use when demo_base_domain is set (for example traefik or nginx). Empty string clears it. |