Appearance
runner.execution-launch-ec2 ​
Launch one runner execution on EC2 Auto Scaling
Launch a new ECS task for an EC2 Auto Scaling-backed runner group.
Identical to RunnerExecutionLaunchWorkflow except:
- run_task uses the group ECS capacity provider strategy
- No networkConfiguration block (EC2 bridge mode does not use awsvpc)
- Backend guard uses ensure_ec2_runner_group
Overview ​
| Property | Value |
|---|---|
| Workflow type | Linear |
| Library | App-runners-aws |
| Version | 1.0 |
Input Schema ​
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
runner_group_uuid | uuid | Yes | — | Runner group UUID |
organization_uuid | uuid | Yes | — | Organization UUID |
runner_execution_uuid | uuid | No | — | Existing execution UUID to reuse |
environment | dict | No | — | Environment variables to pass to container. Sensitive (SECRET-HANDLING-001): values are vaulted rather than persisted in workflow state_data, and only the key names are recorded on the execution record |
command | list | No | — | Optional command override for container |
runner_image | string | No | — | Optional custom container image for this execution |
Output Schema ​
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
runner_group_uuid | uuid | No | — | UUID of the RunnerGroup this workflow operates on, picked from the organization's list of runner groups. Optional on this shared passthrough schema because the same field also appears as an output-only echo. |
organization_uuid | uuid | No | — | UUID of the caller's organization, injected server-side from the authenticated request; scopes the operation to the correct tenant. |
registry_account_uuid | uuid | No | — | UUID of the container registry account this runner group resolves images against, picked from the organization's registry accounts. Optional — falls back to default/unauthenticated image resolution when absent. |
actor_uuid | uuid | No | — | UUID of the user or service actor who triggered this action, injected server-side from the authenticated request when available; used for audit/attribution only. |
workflow_run_id | string | No | — | — |
workflow_run_uuid | string | No | — | Legacy alias of workflow_run_id: an internal engine correlation/run identifier for this DAG execution (ADR-015/E1 plumbing), not a foreign key to any business entity. No list/query workflow applies — this is engine-generated, never user-supplied. |
workflow_uuid | string | No | — | Engine workflow-run identifier associated with this record; not a platform entity foreign key despite the name. No list/query workflow applies — this is engine-generated, never user-supplied. |
status | string | No | — | — |
outcome | string | No | — | — |
initiated_at | string | No | — | — |
completed_at | string | No | — | — |
failed_at | string | No | — | — |
failure_reason | string | No | — | — |
error | string | No | — | — |
error_type | string | No | — | — |
reason | string | No | — | — |
failed_step | json | No | — | — |
failed_layer | json | No | — | — |
failed_at_state | json | No | — | — |
compensation_trigger | json | No | — | — |
comp_current_layer | json | No | — | — |
comp_queue | json | No | — | — |
comp_retry_count | json | No | — | — |
primitive_input | json | No | — | — |
primitive_output | json | No | — | — |
environment | json | No | — | Credential-bearing field (SECRET-HANDLING-001): vaulted by SensitiveDataMiddleware instead of being persisted in cleartext state_data / event history. |
command | json | No | — | — |
runner_image | json | No | — | — |
registration_token | json | No | — | Credential-bearing field (SECRET-HANDLING-001): vaulted by SensitiveDataMiddleware instead of being persisted in cleartext state_data / event history. |
task_arn | json | No | — | — |
container_name | json | No | — | — |
step_output | json | No | — | — |
runner_execution_uuid | json | No | — | — |
cluster_arn | json | No | — | — |
log_group_name | json | No | — | — |
needs_custom_image | json | No | — | — |
task_definition_arn | json | No | — | — |
runner_name | json | No | — | — |
runtime_env | json | No | — | Credential-bearing field (SECRET-HANDLING-001): vaulted by SensitiveDataMiddleware instead of being persisted in cleartext state_data / event history. |
start_command | json | No | — | — |
last_status | json | No | — | — |
environment_keys | json | No | — | — |
States ​
| State | Initial | Terminal | Success | Auto-advance | Description |
|---|---|---|---|---|---|
initiated | Yes | No | — | prepare | — |
building_start_command | No | No | — | launch_task | — |
getting_registration_token | No | No | — | build_start_command | — |
launching_task | No | No | — | complete | — |
preparing | No | No | — | get_registration_token | — |
completed | No | Yes | Yes | — | — |
failed | No | Yes | No | — | — |
State Diagram ​
Transitions ​
| From | Action | To | Description |
|---|---|---|---|
initiated | prepare | preparing | — |
preparing | get_registration_token | getting_registration_token | — |
getting_registration_token | build_start_command | building_start_command | — |
building_start_command | launch_task | launching_task | — |
launching_task | complete | completed | — |
* (any state) | fail | failed | — |
API Usage ​
bash
POST /api/workflows/start
Content-Type: application/json
{
"workflow_type": "runner.execution-launch-ec2",
"initial_data": {
"runner_group_uuid": "value",
"organization_uuid": "value"
}
}