runner.environment-provision-ec2

Provision EC2 Auto Scaling environment for a runner group

Provision EC2 Auto Scaling runner environment for a runner group.

Layers:

1. validate — check required config, set PROVISIONING
2. iam — create/validate ecsInstanceRole instance profile
3. foundation — create ECS cluster + CloudWatch log group (parallel)
4. resolve_ami — resolve ECS-optimized AMI ID from SSM
5. launch_template — create EC2 launch template with UserData
6. asg — create EC2 Auto Scaling Group
7. capacity_provider — create ECS Capacity Provider backed by the ASG
8. associate_cp — associate Capacity Provider with the ECS cluster
9. task_definition — register ECS task definition (bridge / EC2 mode)
10. register_github — register GitHub runner group (no-op for non-GITHUB)
11. finalize — sync cached fields, set ACTIVE

Overview

Property	Value
Workflow type	Dag
Library	App-runners-aws
Version	1.0

Input Schema

Field	Type	Required	Default	Description
runner_group_uuid	uuid	Yes	—	UUID of the RunnerGroup whose EC2 Auto Scaling environment is being provisioned, picked from the organization's list of runner groups.
organization_uuid	uuid	Yes	—	UUID of the caller's organization, injected server-side from the authenticated request; scopes the operation to the correct tenant.
registry_account_uuid	uuid	No	—	UUID of the container registry account this runner group resolves images against, picked from the organization's registry accounts. Optional — falls back to default/unauthenticated image resolution when absent.
workflow_run_id	string	No	—	—
workflow_run_uuid	string	No	—	Internal engine correlation/run identifier stamped onto this DAG execution; not a user-facing entity reference and has no picker.

Output Schema

Field	Type	Required	Default	Description
runner_group_uuid	uuid	No	—	UUID of the RunnerGroup this workflow operates on, picked from the organization's list of runner groups. Optional on this shared passthrough schema because the same field also appears as an output-only echo.
organization_uuid	uuid	No	—	UUID of the caller's organization, injected server-side from the authenticated request; scopes the operation to the correct tenant.
registry_account_uuid	uuid	No	—	UUID of the container registry account this runner group resolves images against, picked from the organization's registry accounts. Optional — falls back to default/unauthenticated image resolution when absent.
actor_uuid	uuid	No	—	UUID of the user or service actor who triggered this action, injected server-side from the authenticated request when available; used for audit/attribution only.
workflow_run_id	string	No	—	—
workflow_run_uuid	string	No	—	Legacy alias of workflow_run_id: an internal engine correlation/run identifier for this DAG execution (ADR-015/E1 plumbing), not a foreign key to any business entity. No list/query workflow applies — this is engine-generated, never user-supplied.
workflow_uuid	string	No	—	Engine workflow-run identifier associated with this record; not a platform entity foreign key despite the name. No list/query workflow applies — this is engine-generated, never user-supplied.
status	string	No	—	—
outcome	string	No	—	—
initiated_at	string	No	—	—
completed_at	string	No	—	—
failed_at	string	No	—	—
failure_reason	string	No	—	—
error	string	No	—	—
error_type	string	No	—	—
reason	string	No	—	—
failed_step	json	No	—	—
failed_layer	json	No	—	—
failed_at_state	json	No	—	—
compensation_trigger	json	No	—	—
comp_current_layer	json	No	—	—
comp_queue	json	No	—	—
comp_retry_count	json	No	—	—
primitive_input	json	No	—	—
primitive_output	json	No	—	—
validate_ec2_environment	json	No	—	—
create_iam_instance_profile	json	No	—	—
create_ec2_ecs_cluster	json	No	—	—
create_ec2_log_group	json	No	—	—
set_log_group_retention	json	No	—	—
resolve_ecs_optimized_ami	json	No	—	—
create_launch_template	json	No	—	—
create_auto_scaling_group	json	No	—	—
create_ec2_capacity_provider	json	No	—	—
associate_capacity_provider	json	No	—	—
register_ec2_task_definition	json	No	—	—
register_github_runner_group	json	No	—	—
finalize_ec2_environment	json	No	—	—

DAG Layers

#	Layer	Steps	Compensation
1	validate	runner.validate_ec2_environment	—
2	iam	runner.create_iam_instance_profile	—
3	foundation	runner.create_ec2_ecs_cluster, runner.create_ec2_log_group	—
4	log_retention	runner.set_log_group_retention	—
5	resolve_ami	runner.resolve_ecs_optimized_ami	—
6	launch_template	runner.create_launch_template	—
7	asg	runner.create_auto_scaling_group	—
8	capacity_provider	runner.create_ec2_capacity_provider	—
9	associate_cp	runner.associate_capacity_provider	—
10	task_definition	runner.register_ec2_task_definition	—
11	register_github	runner.register_github_runner_group	—
12	finalize	runner.finalize_ec2_environment	—

Execution Flow

Sub-workflows

Sub-workflow	Step name
runner.validate_ec2_environment	validate_ec2_environment
runner.create_iam_instance_profile	create_iam_instance_profile
runner.create_ec2_ecs_cluster	create_ec2_ecs_cluster
runner.create_ec2_log_group	create_ec2_log_group
runner.set_log_group_retention	set_log_group_retention
runner.resolve_ecs_optimized_ami	resolve_ecs_optimized_ami
runner.create_launch_template	create_launch_template
runner.create_auto_scaling_group	create_auto_scaling_group
runner.create_ec2_capacity_provider	create_ec2_capacity_provider
runner.associate_capacity_provider	associate_capacity_provider
runner.register_ec2_task_definition	register_ec2_task_definition
runner.register_github_runner_group	register_github_runner_group
runner.finalize_ec2_environment	finalize_ec2_environment

API Usage

POST /api/workflows/start
Content-Type: application/json

{
  "workflow_type": "runner.environment-provision-ec2",
  "initial_data": {
    "runner_group_uuid": "value",
    "organization_uuid": "value"
  }
}