> ## Documentation Index > Fetch the complete documentation index at: https://docs.ankra.ai/llms.txt > Use this file to discover all available pages before exploring further. # Ensure the cluster repository webhook > Browser session authentication; ensures the cluster's connected GitOps repository carries the platform webhook, creating or repairing it (the repository-settings 'ensure webhook' action). Rate limited per cluster: a burst answers 429 with Retry-After. A cluster with no connected repository answers 404 with the reason in detail. Browser route only; there is no bearer-PAT twin yet (the route census's twin-gap ratchet lists it). ## OpenAPI ````yaml https://platform.ankra.app/openapi.json post /org/clusters/{cluster_id}/webhook/ensure openapi: 3.1.0 info: title: FastAPI version: 0.1.0 servers: - url: https://platform.ankra.app security: [] tags: - name: Clusters description: Create, inspect and manage clusters, and the stacks deployed on them. - name: Managed Clusters description: Provider-managed control planes, driven through one common surface. - name: Imported Clusters description: Clusters that already existed and were connected to Ankra. - name: Cluster Access description: Kubeconfigs, service-account tokens and per-cluster access grants. - name: Kubernetes description: Read and act on the Kubernetes objects inside a cluster. - name: DigitalOcean Clusters description: Provision and manage DigitalOcean Kubernetes clusters. - name: Hetzner Clusters description: Provision and manage Hetzner Kubernetes clusters. - name: OVH Clusters description: Provision and manage OVH Kubernetes clusters. - name: Scaleway Clusters description: Provision and manage Scaleway Kapsule clusters. - name: UpCloud Clusters description: Provision and manage UpCloud Kubernetes clusters. - name: Applications description: Deploy, configure and observe applications across the fleet. - name: Stack Profiles description: Reusable stack definitions, their versions and sharing. - name: Charts description: Browse the chart catalogue behind stacks and addons. - name: Helm description: Helm registries, credentials and the charts they expose. - name: Executions description: Long-running platform executions and their jobs. - name: Operations description: Cancel in-flight cluster operations and their jobs. - name: Chat description: Conversational sessions, plans and confirmable actions. - name: AI Agent Runs description: Autonomous agent runs and their outcomes. - name: AI Tickets description: The AI ticket board, its sync connections and settings. - name: AI Playbooks description: Reusable playbooks the AI lanes execute. - name: AI Conditions description: Conditions that gate AI autonomy. - name: AI Engineering Handoffs description: Work the AI lanes escalate to a human engineer. - name: AI Environment description: The environment and base stacks AI demos deploy into. - name: Security description: Findings, advisories, SBOMs, compliance and posture. - name: Cost description: Cluster and fleet cost, rate cards and cost settings. - name: Billing description: Subscription and spend caps. - name: Organisation description: Members, invitations, audit logs and organisation settings. - name: Account Tokens description: Personal access tokens for the API and CLI. - name: Credentials description: The shared credential store. - name: Azure Credentials description: Azure credentials and SSH keys. - name: DigitalOcean Credentials description: DigitalOcean credentials and SSH keys. - name: Hetzner Credentials description: Hetzner credentials and SSH keys. - name: OVH Credentials description: OVH credentials and SSH keys. - name: Scaleway Credentials description: Scaleway credentials. - name: UpCloud Credentials description: UpCloud credentials and SSH keys. - name: Data Source Credentials description: Credentials for metrics and log sources. - name: DNS Credentials description: Credentials for DNS providers. - name: DNS description: DNS zones and records, including custom organisation zones. - name: Cloudflare description: Cloudflare domains and the credentials behind them. - name: Variables description: Organisation- and cluster-scoped variables. - name: SOPS description: Encrypt and decrypt values with the organisation SOPS config. - name: Alerts description: Alert integrations and ingest credentials. - name: Notifications description: Notification routes and their delivery targets. - name: Support description: Support tickets. paths: /org/clusters/{cluster_id}/webhook/ensure: post: tags: - Organisation summary: Ensure the cluster repository webhook description: >- Browser session authentication; ensures the cluster's connected GitOps repository carries the platform webhook, creating or repairing it (the repository-settings 'ensure webhook' action). Rate limited per cluster: a burst answers 429 with Retry-After. A cluster with no connected repository answers 404 with the reason in detail. Browser route only; there is no bearer-PAT twin yet (the route census's twin-gap ratchet lists it). operationId: cluster_webhook_ensure_browser parameters: - in: path name: cluster_id required: true schema: format: uuid type: string - description: Must match the ankra_csrf browser cookie. in: header name: X-Ankra-CSRF required: true schema: type: string responses: '200': content: application/json: schema: $ref: '#/components/schemas/EnsureWebhookResponse' description: >- Webhook ensured (success) or the reason it could not be (success=false with message). '401': content: application/json: schema: $ref: '#/components/schemas/ContractDetailError' description: Unauthenticated '403': content: application/json: schema: $ref: '#/components/schemas/ContractDetailError' description: Permission or CSRF check failed '404': content: application/json: schema: $ref: '#/components/schemas/ContractDetailError' description: >- Cluster not found, or no GitOps repository is connected; the detail field carries the reason '429': content: application/json: schema: $ref: '#/components/schemas/ContractDetailError' description: >- Too many webhook ensure requests for this cluster; Retry-After names the wait in seconds. '500': content: application/json: schema: $ref: '#/components/schemas/ContractDetailError' description: Provider or internal failure security: - SessionCookie: [] components: schemas: EnsureWebhookResponse: properties: message: title: Message type: string success: title: Success type: boolean required: - success - message title: EnsureWebhookResponse type: object ContractDetailError: example: detail: Cluster not found properties: detail: oneOf: - type: string - additionalProperties: true properties: {} type: object required: - detail type: object securitySchemes: SessionCookie: description: Browser session. Mutations also require X-Ankra-CSRF. in: cookie name: ankra_session type: apiKey ````