> ## Documentation Index
> Fetch the complete documentation index at: https://www.qovery.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Edit advanced settings

> Edit advanced settings by returning table of advanced settings.



## OpenAPI

````yaml /api-reference/openapi.yaml put /organization/{organizationId}/cluster/{clusterId}/advancedSettings
openapi: 3.0.0
info:
  version: 1.0.4
  title: Qovery API
  description: >
    - Qovery is the fastest way to deploy your full-stack apps on any Cloud
    provider.

    - ℹ️ The API is stable and still in development.
  contact:
    name: Qovery Product Team
    url: https://www.qovery.com
    email: support+api+documentation@qovery.com
  x-logo:
    url: https://console.qovery.com/assets/logos/logo-white.svg
    altText: Qovery
servers:
  - url: https://api.qovery.com
security:
  - bearerAuth: []
  - ApiKeyAuth: []
tags:
  - name: Account
  - name: Account Info
  - name: Alert Receivers
  - name: Alert Rules
  - name: Admin
  - name: ArgoCD
  - name: Application
  - name: Application Actions
  - name: Application Configuration
  - name: Application Database
  - name: Application Deployment Restriction
  - name: Application Deployment History
  - name: Application Environment Variable
  - name: Application Logs
  - name: Application Main Calls
  - name: Application Secret
  - name: Application Annotations Group
  - name: Applications
  - name: AutoscalingPolicy
  - name: Container
  - name: Container Actions
  - name: Container Configuration
  - name: Container Database
  - name: Container Deployment History
  - name: Container Environment Variable
  - name: Container Logs
  - name: Container Main Calls
  - name: Container Registry
  - name: Container Secret
  - name: Container Annotations Group
  - name: Containers
  - name: Deployment Stage Main Calls
  - name: Job
  - name: Job Actions
  - name: Job Configuration
  - name: Job Database
  - name: Job Deployment Restriction
  - name: Job Deployment History
  - name: Job Environment Variable
  - name: Job Logs
  - name: Job Main Calls
  - name: Job Registry
  - name: Job Secret
  - name: Job Annotations Group
  - name: Jobs
  - name: KedaTriggerAuthentication
  - name: Helm
  - name: Helm Actions
  - name: Helm Configuration
  - name: Helm Database
  - name: Helm Deployment Restriction
  - name: Helm Deployment History
  - name: Helm Logs
  - name: Helm Main Calls
  - name: Helm Repository
  - name: Helms
  - name: Backups
  - name: Billing
  - name: Cloud Provider
  - name: Cloud Provider Credentials
  - name: Clusters
  - name: Custom Domain
  - name: Container Custom Domain
  - name: Database
  - name: Database Actions
  - name: Database Application
  - name: Database Container
  - name: Database Deployment History
  - name: Database Main Calls
  - name: Database Annotations Group
  - name: Databases
  - name: Environment
  - name: Environment Actions
  - name: Environment Deployment History
  - name: Environment Deployment Rule
  - name: Environment Logs
  - name: Environment Main Calls
  - name: Environment Secret
  - name: Environment Variable
  - name: Environments
  - name: Git
  - name: Github App
  - name: Git repositories
  - name: Members
  - name: Organization
  - name: Organization Account Git Repositories
  - name: Organization Cluster Lock
  - name: Organization Main Calls
  - name: Organization Custom Role
  - name: Organization Event
  - name: Organization Api Token
  - name: Organization Webhook
  - name: Organization Annotations Group
  - name: Organization Labels Group
  - name: Organization Enterprise Connection
  - name: Project
  - name: Project Deployment Rule
  - name: Project Environment Variable
  - name: Project Main Calls
  - name: Project Secret
  - name: Projects
  - name: Referral & Rewards
  - name: Secret Manager Access
  - name: Terraforms
  - name: Terraform Main Calls
  - name: Terraform Resources
  - name: Terraform Deployment History
  - name: Terraform Deployment Restriction
  - name: Container Registries
  - name: Helm Repositories
  - name: User Sign Up
  - name: Variable Main Calls
  - name: Helm Custom Domain
  - name: Lifecycle Template Main Calls
paths:
  /organization/{organizationId}/cluster/{clusterId}/advancedSettings:
    put:
      tags:
        - Clusters
      summary: Edit advanced settings
      description: Edit advanced settings by returning table of advanced settings.
      operationId: editClusterAdvancedSettings
      parameters:
        - $ref: '#/components/parameters/organizationId'
        - $ref: '#/components/parameters/clusterId'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ClusterAdvancedSettings'
      responses:
        '201':
          description: Updated advanced settings
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ClusterAdvancedSettings'
        '400':
          $ref: '#/components/responses/400'
        '401':
          $ref: '#/components/responses/401'
        '403':
          $ref: '#/components/responses/403'
        '404':
          $ref: '#/components/responses/404'
components:
  parameters:
    organizationId:
      name: organizationId
      in: path
      description: Organization ID
      required: true
      schema:
        type: string
        format: uuid
    clusterId:
      name: clusterId
      in: path
      description: Cluster ID
      required: true
      schema:
        type: string
        format: uuid
  schemas:
    ClusterAdvancedSettings:
      type: object
      properties:
        aws.cloudwatch.eks_logs_retention_days:
          type: integer
          description: Set the number of retention days for EKS Cloudwatch logs
        aws.vpc.enable_s3_flow_logs:
          type: boolean
          description: Enable flow logs for on the VPC and store them in an S3 bucket
        aws.vpc.flow_logs_retention_days:
          type: integer
          description: >-
            Set the number of retention days for flow logs. Disable with value
            "0"
        aws.vpc.enable_nat_gateway_secondary_eip:
          type: boolean
          description: >-
            Enable a secondary Elastic IP per NAT Gateway, increasing the number
            of outbound public IPs. Useful for services with IP-based rate
            limits.
        loki.log_retention_in_week:
          type: integer
          description: For how long in week loki is going to keep logs of your applications
        loki.deployment_mode:
          type: string
          description: >-
            Loki deployment topology. "single_binary" runs Loki as one pod;
            "simple_scalable" splits it into separate write, read, and backend
            components for larger clusters.
          enum:
            - single_binary
            - simple_scalable
        loki.single_binary.cpu_request_m:
          type: integer
          description: >-
            CPU request (in milli-CPU) for the Loki pod when running in
            single_binary mode.
        loki.single_binary.cpu_limit_m:
          type: integer
          description: >-
            CPU limit (in milli-CPU) for the Loki pod when running in
            single_binary mode.
        loki.single_binary.memory_request_mib:
          type: integer
          description: >-
            Memory request (in MiB) for the Loki pod when running in
            single_binary mode.
        loki.single_binary.memory_limit_mib:
          type: integer
          description: >-
            Memory limit (in MiB) for the Loki pod when running in single_binary
            mode.
        loki.write.cpu_request_m:
          type: integer
          description: >-
            CPU request (in milli-CPU) for the Loki write component when running
            in simple_scalable mode.
        loki.write.cpu_limit_m:
          type: integer
          description: >-
            CPU limit (in milli-CPU) for the Loki write component when running
            in simple_scalable mode.
        loki.write.memory_request_mib:
          type: integer
          description: >-
            Memory request (in MiB) for the Loki write component when running in
            simple_scalable mode.
        loki.write.memory_limit_mib:
          type: integer
          description: >-
            Memory limit (in MiB) for the Loki write component when running in
            simple_scalable mode.
        loki.read.cpu_request_m:
          type: integer
          description: >-
            CPU request (in milli-CPU) for the Loki read component when running
            in simple_scalable mode.
        loki.read.cpu_limit_m:
          type: integer
          description: >-
            CPU limit (in milli-CPU) for the Loki read component when running in
            simple_scalable mode.
        loki.read.memory_request_mib:
          type: integer
          description: >-
            Memory request (in MiB) for the Loki read component when running in
            simple_scalable mode.
        loki.read.memory_limit_mib:
          type: integer
          description: >-
            Memory limit (in MiB) for the Loki read component when running in
            simple_scalable mode.
        loki.backend.cpu_request_m:
          type: integer
          description: >-
            CPU request (in milli-CPU) for the Loki backend component when
            running in simple_scalable mode.
        loki.backend.cpu_limit_m:
          type: integer
          description: >-
            CPU limit (in milli-CPU) for the Loki backend component when running
            in simple_scalable mode.
        loki.backend.memory_request_mib:
          type: integer
          description: >-
            Memory request (in MiB) for the Loki backend component when running
            in simple_scalable mode.
        loki.backend.memory_limit_mib:
          type: integer
          description: >-
            Memory limit (in MiB) for the Loki backend component when running in
            simple_scalable mode.
        registry.image_retention_time:
          type: integer
          description: >-
            Configure the number of seconds before cleaning images in the
            registry
        cloud_provider.container_registry.tags:
          type: object
          description: Add additional tags on the cluster dedicated registry
          additionalProperties:
            type: string
        aws.eks.enable_alb_controller:
          type: boolean
          x-stoplight:
            id: m2nc6klof8mvh
          default: true
          description: >-
            Enable the AWS ALB controller to manage the load balancer for the
            cluster.

            Note: Changing this feature will create a 10 min max downtime on
            your application's public access (time to delete, replace and
            propagate DNS of the new load balancer) and will requiere to update
            all services with TCP/UDP open ports.
        aws.eks.enable_efs_addon:
          type: boolean
          description: >-
            Enable the AWS EFS CSI driver EKS add-on to provision EFS-backed
            persistent volumes on the cluster.
          default: false
        aws.eks.efs.throughput_mode:
          type: string
          description: >-
            EFS throughput mode. "elastic" scales automatically (pay-per-use),
            "bursting" uses burst credits based on file system size,
            "provisioned" requires a fixed throughput value.
          default: elastic
          enum:
            - bursting
            - elastic
            - provisioned
        aws.eks.efs.performance_mode:
          type: string
          description: >-
            EFS performance mode. "generalPurpose" offers lowest latency
            (recommended). "maxIO" provides higher aggregate throughput for
            highly parallelized workloads. Cannot be changed after creation.
          default: generalPurpose
          enum:
            - generalPurpose
            - maxIO
        aws.eks.efs.transition_to_ia:
          type: string
          description: >-
            Lifecycle policy to transition files to Infrequent Access (IA)
            storage after the specified period. IA storage costs less but has a
            per-read charge. Empty string disables the policy.
          default: AFTER_30_DAYS
          enum:
            - AFTER_1_DAY
            - AFTER_7_DAYS
            - AFTER_14_DAYS
            - AFTER_30_DAYS
            - AFTER_60_DAYS
            - AFTER_90_DAYS
            - ''
        load_balancer.size:
          type: string
          description: >-
            Select the size of the main load_balancer (only effective for
            Scaleway)
        database.postgresql.deny_any_access:
          type: boolean
          description: Deny public access to any PostgreSQL database
          x-stoplight:
            id: zltwd7w7mxld8
        database.postgresql.allowed_cidrs:
          type: array
          description: List of CIDRs allowed to access the PostgreSQL database
          items:
            type: string
        database.mysql.deny_any_access:
          type: boolean
          description: Deny public access to any MySql database
          x-stoplight:
            id: kst5exbae6ory
        database.mysql.allowed_cidrs:
          type: array
          description: List of CIDRs allowed to access the MySql database
          items:
            type: string
        database.mongodb.deny_any_access:
          type: boolean
          description: Deny public access to any MongoDB/DocumentDB database
          x-stoplight:
            id: nc66h7gqz809g
        database.mongodb.allowed_cidrs:
          type: array
          description: List of CIDRs allowed to access the MongoDB/DocumentDB database
          items:
            type: string
        database.redis.deny_any_access:
          type: boolean
          description: Deny public access to any Redis database
          x-stoplight:
            id: djo0khm8r7gdy
        database.redis.allowed_cidrs:
          type: array
          description: List of CIDRs allowed to access the Redis database
          items:
            type: string
        aws.iam.admin_group:
          type: string
          description: AWS IAM group name with cluster access
        aws.eks.ec2.metadata_imds:
          type: string
          enum:
            - optional
            - required
          description: >
            Specify the
            [IMDS](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html)
            version you want to use:
              * `required`: IMDS V2 only
              * `optional`: IMDS V1 + V2
        aws.eks.ec2.ami:
          type: string
          default: AmazonLinux2023
          description: |
            Select the AMI to use for EKS worker nodes (Karpenter only):
              * `AmazonLinux2`: Amazon Linux 2
              * `AmazonLinux2023`: Amazon Linux 2023 (default)
              * `Bottlerocket`: Bottlerocket OS
              * `ami-xxx` or `my-custom-ami-*`: A custom AMI ID or name pattern (assumes AL2023-based)
              * `al2:ami-xxx`: A custom AMI based on Amazon Linux 2
              * `al2023:ami-xxx`: A custom AMI based on Amazon Linux 2023
              * `bottlerocket:ami-xxx`: A custom AMI based on Bottlerocket
        pleco.resources_ttl:
          type: integer
          deprecated: true
        registry.mirroring_mode:
          $ref: '#/components/schemas/RegistryMirroringModeEnum'
        nginx.vcpu.request_in_milli_cpu:
          type: integer
          description: vcpu request in millicores
        nginx.vcpu.limit_in_milli_cpu:
          type: integer
          description: vcpu limit in millicores
        nginx.memory.request_in_mib:
          type: integer
          description: memory request in MiB
        nginx.memory.limit_in_mib:
          type: integer
          description: memory limit in MiB
        envoy.gateway_api.http_request_timeout_seconds:
          type: integer
          nullable: true
          minimum: 0
          description: >-
            Sets the default request timeout (in seconds) applied to Gateway API
            routes when the service does not override it.
        envoy.gateway_api.http_connection_idle_timeout_seconds:
          type: integer
          nullable: true
          minimum: 0
          description: >-
            Sets the default idle connection timeout (in seconds) applied to
            Gateway API routes when the service does not override it.
        envoy.gateway_api.retry.num_retries:
          type: integer
          nullable: true
          minimum: 0
          description: >-
            Sets the default number of retry attempts applied to Gateway API
            routes when the service does not override it.
        envoy.gateway_api.retry.retry_on:
          type: string
          nullable: true
          description: >-
            Default comma-separated retry triggers applied to Gateway API routes
            when the service does not override them.
        envoy.gateway_api.retry.http_status_codes:
          type: string
          nullable: true
          description: >-
            Default comma-separated HTTP status codes (100..599) retried when
            retry_on includes retriable-status-codes.
        envoy.gateway_api.retry.per_try_timeout_seconds:
          type: integer
          nullable: true
          minimum: 1
          description: >-
            Sets the default timeout (in seconds) applied to each retry attempt
            when the service does not override it.
        nginx.hpa.cpu_utilization_percentage_threshold:
          type: integer
          description: hpa cpu threshold in percentage
        nginx.hpa.min_number_instances:
          type: integer
          description: hpa minimum number of instances
        nginx.hpa.max_number_instances:
          type: integer
          description: hpa maximum number of instances
        storageclass.fast_ssd:
          type: string
          description: storage class name to use to provision pvc
        qovery.static_ip_mode:
          type: boolean
          x-stoplight:
            id: i7u9vjd0o89g8
          description: >-
            To limit public access from the internet to your Kubernetes cluster
            endpoint.

            You can define whitelisted CIDR in
            k8s.api.allowed_public_access_cidrs.
        k8s.api.allowed_public_access_cidrs:
          type: array
          x-stoplight:
            id: w7d7zyd1de9n6
          description: |-
            Set custom sources to public access endpoint.
            Use CIDR notation to specify an IP address range 
            (for example, ['203.0.113.5/32','203.0.100/32'])
          items:
            x-stoplight:
              id: v8r1f6alk5abp
            type: string
    RegistryMirroringModeEnum:
      type: string
      default: Service
      enum:
        - Cluster
        - Service
      description: >
        Mirroring mode when deploying a service from a container registry

        - Cluster: This is not available on Scaleway. Images within the
        mirroring registry are organized by "Qovery cluster", meaning that the
        application deployed on the same cluster are all mirrored on the same
        repository.

        - Service: Images within the mirroring registry are organized by "Qovery
        service", each service has its own repository
  responses:
    '400':
      description: Bad request
    '401':
      description: Access token is missing or invalid
    '403':
      description: Access forbidden
    '404':
      description: Resource not found
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: >-
        JWT tokens should be used with OIDC account (human to machine). JWT
        tokens used by the Qovery console to communicate with the API have a
        TTL. Curl Example ' curl https://console.qovery.com/organization -H
        "Authorization: Bearer $qovery_token" '
    ApiKeyAuth:
      type: apiKey
      in: header
      name: Authorization
      description: >-
        Token API are generated by Qovery to manage machine to machine
        interaction and do not have a TTL. Curl Example ' curl
        https://console.qovery.com/organization -H "Authorization: Token
        $qovery_token" '

````