| env | No | Add or update GVC environment variables (merged with existing). Submit an empty list to clear every env variable. | |
| org | Yes | Organization slug (lowercase kebab-case). NEVER guess — if the user has not named one, ask. On org-not-found, stop and ask; do not retry variants. | |
| keda | No | Replace the KEDA configuration. | |
| tags | No | Add or update GVC tags (merged with existing tags) without replacing the entire set. Submit an empty list to clear all tags. | |
| gvcName | Yes | GVC slug (lowercase kebab-case). Use the GVC the user named; otherwise discover with list_resources (kind="gvc") and let them choose — never guess (a wrong GVC targets the wrong environment). | |
| tracing | No | Replace the tracing configuration. | |
| removeKeda | No | true deletes spec.keda. | |
| description | No | New description. Treat it like a concise annotation for future operators. | |
| addLocations | No | Placement locations to ADD (merged with existing; duplicates skipped). Accepts location names, friendly names, or links, validated against the org's own location list. | |
| loadBalancer | No | Replace the GVC load balancer configuration. | |
| sidecarEnvoy | No | Replace the Envoy sidecar filters (spec.sidecar.envoy). | |
| locationQuery | No | Replace the dynamic placement query. | |
| removeTagKeys | No | Tag keys to remove from the GVC. | |
| removeTracing | No | true deletes spec.tracing (stops trace export). | |
| removeEnvNames | No | Environment variable names to remove. | |
| locationOptions | No | Replace per-location geo-routing options. Submit an empty list to remove them all. | |
| pullSecretLinks | No | Add pullSecretLinks (merged with existing). Submit an empty list to clear them all. | |
| removeLocations | No | Placement locations to REMOVE. Workloads redeploy out of removed locations and may lose capacity there. | |
| aliasWorkloadLink | No | Link to a workload in this GVC whose canonical endpoint backs the GVC alias DNS record (e.g. //gvc/{gvc}/workload/{name}). NOTE: the alias is INERT while the target workload is suspended (suspend=true or maxScale=0) — it takes effect only while the workload runs. | |
| removeLoadBalancer | No | true deletes spec.loadBalancer (reverts to platform default load balancing). | |
| removeSidecarEnvoy | No | true deletes spec.sidecar (drops the custom Envoy filters). | |
| removeLocationQuery | No | true deletes spec.staticPlacement.locationQuery, so placement follows the plain location list again. | |
| endpointNamingFormat | No | Set the canonical endpoint subdomain format (default/legacy/org). | |
| removePullSecretLinks | No | pullSecretLinks to remove (exact string match). | |
| removeAliasWorkloadLink | No | true deletes spec.aliasWorkloadLink (detaches the GVC alias DNS record). | |