You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -9,7 +9,7 @@ Both the System and Project level management interfaces allow users to create, e
9
9
However, there are specific actions that can only take place in the System Level - such as assigning a Runner to multiple projects - or at the Project level - such as defining the Node Filter for dispatching to nodes.
10
10
11
11
## System Level Runner Management
12
-
<br>
12
+
13
13
<details>
14
14
<summary><u>ACL Permissions for Managing Runners at <strong>System</strong> level</u></summary>
15
15
@@ -44,19 +44,19 @@ context:
44
44
application: rundeck
45
45
```
46
46
47
-
* Change **`my-user-group-name`** in the above ACL policy to the name of the user group that needs to have these permissions.
47
+
- Change **`my-user-group-name`** in the above ACL policy to the name of the user group that needs to have these permissions.
48
48
49
-
</details>
49
+
</details>
50
50
51
51
At the System level, in addition to creating, editing, and deleting Runners, users can also assign Runners to Projects.
52
52
53
53
To access the System level Runner management interface, navigate to the **System menu** and select **Runner Management**:
54
54
55
-
<br>
55
+

56
56
57
57
The Runner Management interface will display a list of all Runners in the system:
58
58
59
-
<br>
59
+

60
60
61
61
From this interface, users can:
62
62
@@ -65,23 +65,21 @@ From this interface, users can:
65
65
-[Assigning Runners to Projects](#assign-runners-to-projects).
66
66
-[Manage a Runner's Replicas](managing-replicas.md).
67
67
68
-
[//]: #(- Delete Runners. For detailed steps, see [Deleting a Runner](/administration/runner/runner-installation/delete-a-runner).)
69
-
70
68
### Assigning Runners to Projects
71
69
72
70
To assign a Runner to a project, follow these steps:
73
71
74
72
1. From the System level Runner management interface, click on the name of the Runner.
75
73
2. In the **Project Assignments** section, click on the **Add Projects** button.
-[Creating a new Runner](/administration/runner/runner-installation/creating-runners.md).
132
+
-Create a new Runner. For detailed steps, see [Creating a Runner](/administration/runner/runner-installation/creating-runners.md).
135
133
-[Modify a Runner's Node Dispatch Settings](/administration/runner/runner-management/node-dispatch.md).
136
134
-[Edit a Runner's Tags](#runner-tags).
137
135
-[Remove a Runner from a Project](#removing-a-runner-from-a-project).
138
136
139
-
[//]: #(- Delete Runners. For detailed steps, see [Deleting a Runner](/administration/runner/runner-installation/delete-a-runner).)
140
-
141
137
### Removing a Runner from a Project
142
138
143
139
To remove a Runner from a Project, follow these steps:
@@ -163,11 +159,14 @@ context:
163
159
If using the self-hosted product and upgrading a version earlier than 5.3.0, the AppAdmin ACL policy stored on the local filesystem may need to be updated.
164
160
165
161
The following permissions must be **added** to it in order to manage Runners at the Project level:
162
+
166
163
```
167
164
runner:
168
165
- allow: '*' # allow read/write/delete for all Runners
169
166
```
167
+
170
168
Therefore, the AppAdmin ACL Policy should look like this:
169
+
171
170
```
172
171
description: Admin, all access.
173
172
context:
@@ -177,7 +176,7 @@ for:
177
176
- allow: '*' # allow read/create all kinds
178
177
adhoc:
179
178
- allow: '*' # allow read/running/killing adhoc jobs
180
-
job:
179
+
job:
181
180
- allow: '*' # allow read/write/delete/run/kill of all jobs
182
181
node:
183
182
- allow: '*' # allow read/run for all nodes
@@ -201,11 +200,13 @@ for:
201
200
by:
202
201
group: admin
203
202
```
203
+
204
204
:::
205
205
206
206
## Changing Runners from Single to Multiple Projects
207
207
208
208
When a Runner is assigned to a single Project, then users within a Project and with the appropriate permissions can make any changes to the Runner from the Project level interface. This includes the ability to:
209
+
209
210
- Edit the Runner's Name
210
211
- Edit the Runner's Tags
211
212
- Delete the Runner
@@ -221,14 +222,138 @@ This is because when a Runner spans multiple Projects it is considered a _shared
221
222
222
223
## Runner Tags
223
224
224
-
Runner Tags are used to select on or more Runners for specific operations - such as for Job execution when using [**Manual Runner Dispatch Configuration**](/administration/runner/runner-management/project-dispatch-configuration.md#manual-runner-selection) or when using [Runners for Node Source](/administration/runner/using-runners/runners-for-node-discovery.md) plugins.
225
+
Runner Tags are used to select one or more Runners for specific operations - such as for Job execution when using [**Manual Runner Dispatch Configuration**](/administration/runner/runner-management/project-dispatch-configuration.md#manual-runner-selection) or when using [Runners for Node Source](/administration/runner/using-runners/runners-for-node-discovery.md) plugins.
225
226
226
227
Tag selection within the **Runner Selector** uses _and_ logic to define the inclusive set of Runners. For example, if a Job is configured to run on Runners with the tags `LINUX` and `DEV`, then only Runners that have _both_ tags will be listed as usable for the Job.
Rundeck provides an improved single-screen inline editing experience for managing Runner information. Instead of navigating to a separate edit page, you can now edit Runner details directly on the Runner's detail page within the **Basic Information** tab.
234
+
235
+
### Accessing Edit Mode
236
+
237
+
To edit a Runner:
238
+
239
+
1. Navigate to the Runner Management page (system or project level)
240
+
2. Click the **Actions** dropdown next to the Runner you want to edit
241
+
3. Select **Edit Runner**
242
+
243
+
The Runner's detail page opens with the **Basic Information** tab in edit mode, allowing you to modify Runner properties without leaving the page.
244
+
245
+
### Editable Fields
246
+
247
+
In edit mode, you can modify the following Runner properties:
248
+
249
+
-**Name**: The Runner's display name (required)
250
+
-**Description**: Additional information about the Runner's purpose
251
+
-**Tags**: Labels for organizing Runners and controlling job execution targeting
252
+
253
+
### Validation
254
+
255
+
The edit form includes built-in validation:
256
+
257
+
-**Runner Name is Required**: You cannot save a Runner without a name
258
+
- Empty or whitespace-only names will display a clear error message
259
+
- Invalid inputs are caught before submission to prevent errors
260
+
261
+
### Saving Changes
262
+
263
+
To save your edits:
264
+
265
+
1. Make your desired changes to the Runner details
266
+
2. Click **Save** to commit the changes
267
+
268
+
Upon successful save:
269
+
270
+
- You'll see a success notification: "Runner updated successfully"
271
+
- The detail page returns to view mode with your updated Runner data
272
+
- Changes are immediately reflected across the system
273
+
274
+
### Canceling Edits
275
+
276
+
To discard your changes:
277
+
278
+
1. Click **Cancel** in the edit form
279
+
2. All changes are discarded
280
+
3. The detail page returns to view mode with the original Runner data
281
+
282
+
### Focused Editing Experience
283
+
284
+
When in edit mode:
285
+
286
+
- Non-essential tabs (Node Dispatch, Replicas) are hidden to maintain focus on editing
287
+
- Only the **Basic Information** tab is visible with the edit form
288
+
- The **Regenerate Credentials** button is hidden during editing (only available in view mode)
289
+
- All tabs reappear when you cancel or save
290
+
291
+
**Note**: The **Node Dispatch** tab settings are managed and saved independently from the basic Runner information.
292
+
293
+
To edit these settings:
294
+
295
+
1. View the Runner detail page in **View Mode** (not Edit Mode)
296
+
2. Open the **Node Dispatch** tab
297
+
3. Adjust the settings as needed
298
+
4. Use the **Node Dispatch** tab's save action to persist those changes without affecting the other Runner fields
299
+
300
+
## Regenerating Runner Credentials
301
+
302
+
Credentials may need to be regenerated if they are compromised or lost. The **Regenerate Credentials** functionality is only available when viewing a Runner's detail page in view mode (not during edit mode).
303
+
304
+
### When Regenerate is Available
305
+
306
+
The **Regenerate Credentials** button visibility depends on Runner type and replica configuration:
307
+
308
+
#### View Mode Requirement
309
+
310
+
- The **Regenerate Credentials** button is only visible in view mode (not shown during edit mode to maintain focus on basic information editing)
311
+
312
+
#### When Replicas Feature is Enabled
313
+
314
+
-**Ephemeral Runners**: Can regenerate credentials (designed for dynamic environments)
#### When Replicas Feature is Disabled (Legacy Mode)
318
+
319
+
- All Runner types can regenerate credentials for backward compatibility
320
+
321
+
### Security Note
322
+
323
+
:::warning Important
324
+
Regenerating credentials will immediately invalidate the current credentials. Any active Runner using the old credentials will no longer be able to connect to Rundeck until you update the Runner with the new credentials and restart it.
325
+
:::
326
+
327
+
### How to Regenerate Credentials
328
+
329
+
1. Navigate to the Runner's detail page (click on a Runner name from the table)
330
+
2. Ensure you are in **View Mode** (not Edit Mode) - the **Regenerate Credentials** button is only visible in view mode
331
+
3. Scroll to the **Regenerate Credentials** section
332
+
4. Review the warning message about credential invalidation
333
+
5. Click **Regenerate Credentials**
334
+
6. Installation instructions will appear with:
335
+
- New Runner Token
336
+
- New Download Token
337
+
- Updated installation commands for your platform
338
+
339
+
**Note**: The "Download Runner" option has been removed from the actions dropdown. Installation instructions are now displayed directly after clicking **Regenerate Credentials**.
340
+
341
+
### Installing Regenerated Credentials
342
+
343
+
After regenerating credentials:
344
+
345
+
1. Stop the running Runner service on your Runner machine
346
+
2. Update the Runner configuration file with the new token:
347
+
348
+
```bash
349
+
RUNDECK_RUNNER_TOKEN=your-new-token-value
350
+
```
229
351
230
-
[//]: #(## Listing Runners)
352
+
3. Restart the Runner service
353
+
4. Verify the Runner reconnects and shows "Healthy" status
0 commit comments