This page shows recently merged pull requests from both the Runbook Automation product repository and the open source Rundeck repository merged since the last self-hosted release of 5.20.0 on April 1, 2026.

Recent Changes

No new updates to report since the last release.

Subscribe to Updates

Stay informed about Rundeck development by subscribing to a feed:

• RSS Feed
• Atom Feed

These feeds are updated regularly to highlight changes that are available in Runbook Automation SaaS and will be included in upcoming Self Hosted releases.

About These Updates

The development updates are automatically generated from both our private repository for the commercial product and the public open source repository. These changes have been merged since the last GA release and provide insight into what's coming in the next Self Hosted release.

Note: These updates reflect changes merged since the last GA release. Self-hosted customers should refer to the Release Notes section for version-specific updates applicable to their installation.

Rundeck 5.20.0 introduces Conditional Logic Steps, an Early Access feature that brings intelligent decision-making directly into your workflows. Build dynamic automation that branches based on job options, node attributes, and runtime data without requiring external scripts or complex workarounds. Configure conditions using a visual editor with AND/OR logic, multiple operators, and support for both node-level and workflow-level execution.

This release also enhances the user experience with a redesigned Next UI settings modal that makes it easier to discover and enable the modern interface, plus adds Dutch language support contributed by the community, expanding Rundeck's accessibility to Dutch-speaking teams worldwide.

Runbook Automation Updates

Add Filename to Runner API output

Include the filename in the API output for Runner creation.

Implement conditional workflow logic

Introduces backend support for Conditional Logic workflow steps, enabling dynamic workflow execution based on runtime conditions such as job options, node attributes, and prior step outputs.

Rundeck Open Source Product Updates

Improve Next Ui management

A new settings modal replaces the previous theme dropdown, providing a unified interface for switching themes and toggling Next UI mode, with visual indicators and notifications to help users understand when Next UI is available and active. Administrators can optionally enable Next UI by default for all users via system configuration.

Update to commons-lang3 for CVE-2025-48924

Updated Apache Commons Lang library to the latest version (commons-lang3) to address CVE-2025-48924, ensuring continued security and compatibility with modern Java standards.

Upgrade Jackson to 2.18.6 to mitigate CWE-770

Updated Jackson library to version 2.18.6 to address a security vulnerability (CWE-770) that could allow resource exhaustion, improving the overall security and stability of Rundeck.

Fix command injection vulnerability in exec commands with ${option.name}

Fixed a critical command injection vulnerability in exec commands where shell control characters in job option values were not properly escaped, now protecting against malicious input by applying shell escaping to all ${option.name} values by default while providing a compatibility flag for edge cases.

Add Dutch (nl_NL) UI translations and locale wiring

Rundeck now supports Dutch (nl_NL) as a user interface language. Users can select Dutch from their profile settings to view Jobs, Activity, Notifications, Nodes, Storage, Webhooks, and Project Configuration screens in Dutch, making Rundeck more accessible to Dutch-speaking teams.

Fix bug where editing a step deletes log filters previously added

• Fixed a bug in nextUi mode, where editing steps could remove existing log filters.

Add metaExclude for the endpoint browse/job meta API and skip retrieval of execution stats in job list page when NextUi=true

• API v58: Optional metaExclude query parameter for jobs browse and job meta endpoints: comma-separated metadata names to omit after resolving meta (when meta includes *, names are taken from all registered job metadata components, then exclusions are applied).
• Next UI / job browse: Browse and lazy job meta requests now omit stats by default via metaExclude=stats, improving job list load time on instances with very large execution history.

Here is a link to the full list of public PRs

Links

• Download the Releases: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions
• Catch us on LinkedIn for the Live Stream Release Videos

Version Info

Name: "Parinacota rebeccapurple pushpin"

Release Date: April 2nd, 2026

Community Contributors

Submit your own Pull Requests to get recognition here!

Staff Contributors

• Greg Schueler (gschueler)
• Carlos Eduardo (carlosrfranco)
• Forrest Evans (fdevans)
• Jaime Tobar (jtobard)
• Jake Cohen (jsboak)
• Jaya Singh (jayas006)
• Jesus Osuna (Jesus-Osuna-M)
• José Vásquez (hiawvp)
• Luis Toledo (ltamaster)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)

Overview

Conditional Logic steps enable workflows to make decisions during execution based on runtime conditions. Instead of creating multiple jobs for different scenarios or writing complex scripts with if/then logic, you can use Conditional Logic steps to branch your workflow based on:

• Job options (environment, configuration values)
• Node attributes (OS family, hostname, tags)
• Job context (project name, job name, execution user)
• Data captured from previous steps

This guide provides hands-on examples to help you understand how to use conditional logic effectively.

Prerequisites

1. Runbook Automation 5.20.0+ with the conditional logic feature enabled
2. Feature flag enabled in rundeck-config.properties:

   rundeck.feature.earlyAccessJobConditional.enabled=true
   
3. Basic understanding of job workflows and job options
4. Workflow strategy set to Sequential or Parallel (not Node First or Ruleset)

Understanding Conditional Logic

Conditional Logic steps come in two types:

• Node Conditional Logic: Evaluates conditions independently on each node based on node attributes
• Workflow Conditional Logic: Evaluates conditions once per job execution in a global context

Both types support:

• Multiple conditions with AND logic (all must be true)
• Multiple condition sets with OR logic (any set can be true)
• Various operators: equals, not equals, contains, matches (regex), greater than, less than

Hands-On Examples

The following examples demonstrate conditional logic in action. Import these jobs to see how conditions work, then run them with different option values to observe the behavior.

This release focuses on stability, performance, and security improvements across the platform. Key updates include enhanced AWS SSM execution timeouts (up to 12 hours), significant Job UI Metrics performance optimizations (these require enabling configuration flags; see the note under Runbook Automation Updates and Execution daily metrics), and fixes for Ansible workflow output handling and Vault timestamp issues. Security updates address multiple CVEs in the Azure Storage plugin and Docker image dependencies.

Runbook Automation Updates

Hashicorp Vault integration modification time issue

Fixed an issue where Vault keys displayed incorrect modification and creation timestamps in Rundeck due to missing metadata.

Allow executions up to 12 hours for AWS SSM using AssumeRole

Enhanced AWS SSM node executor to support execution durations up to 12 hours when using AssumeRole authentication, enabling longer-running operations for cross-account AWS deployments. The system now automatically validates and adjusts timeout values to ensure compliance with AWS service limits, preventing execution failures due to timeout configuration errors.

Bump Azure Storage Plugin version to 1.0.4

Bump aiohttp to 3.13.3 minimum for CVE-2025-69223, CVE-2025-69227, and CVE-2025-69228

Implement performance optimization for the Job UI Metrics

Significantly improved the performance of Job UI Metrics by introducing batch processing that fetches metrics for all jobs in a single API call instead of making individual requests for each job, reducing page load times from minutes to seconds in projects with many jobs and eliminating timeout issues caused by excessive database queries.

Rundeck Open Source Product Updates

Update Remco to newer commit that remediates some CVEs

Enhanced Docker image security by updating Remco (the configuration management tool) to a newer version that remediates three security vulnerabilities (CVE-2025-4673, CVE-2025-22872, and CVE-2025-47906), strengthening the security posture of Rundeck container deployments.

Promote workflow tab out of alphaUi

Promote workflow tab out from alpha state. The updated ui will be accessible for all users with the nextUi flag enabled.

Issues with Ansible inline workflow executions where it shows an unwanted output

Resolved an issue where Ansible inline workflow executions displayed unwanted output by properly sanitizing group names to comply with Ansible requirements, filtering out reserved host attributes that could conflict with Ansible's internal variables, and ensuring only valid host entries are processed during execution.

Here is a link to the full list of public PRs

Links

• Download the Releases: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions
• Catch us on LinkedIn for the Live Stream Release Videos

Version Info

Name: "Olympus olivedrab music"

Release Date: February 2nd, 2026

Community Contributors

Submit your own Pull Requests to get recognition here!

Staff Contributors

• Greg Schueler (gschueler)
• Carlos Eduardo (carlosrfranco)
• Eduardo Baltra (edbaltra)
• Forrest Evans (fdevans)
• Jaime Tobar (jtobard)
• Jake Cohen (jsboak)
• Jaya Singh (jayas006)
• Jesus Osuna (Jesus-Osuna-M)
• José Vásquez (hiawvp)
• Luis Toledo (ltamaster)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)

Release 5.18.0 focuses on strengthening security and improving operational flexibility. This update addresses eight security vulnerabilities across multiple components, including critical fixes for BouncyCastle, MSSQL JDBC, and various cloud integration dependencies. Enterprise users will benefit from configurable AWS SSM execution timeouts for long-running jobs, enhanced Slack notifications with FreeMarker template support, and a fix for VMware datacenter attribute handling. Open source users gain a new beta feature for multiline job options, improved log filter capabilities for capturing multiple key-value pairs, and comprehensive API error handling. The release also includes extensive OpenAPI documentation enhancements across 15 endpoints, making it easier to integrate with Rundeck programmatically.

Terraform Provider Milestone: Alongside this release, we're excited to announce version 1.0.0 of the Rundeck Terraform Provider—a complete modernization that eliminates all known plan drift issues and establishes a stable foundation for infrastructure-as-code workflows.

Terraform Provider 1.0.0 Release

We're thrilled to announce the 1.0.0 release of the Rundeck Terraform Provider—a major modernization that represents years of community feedback and engineering effort. This release eliminates all known plan drift issues and provides a rock-solid foundation for managing Rundeck infrastructure as code.

What's New

No More Plan Drift: The provider has been completely rebuilt using the Terraform Plugin Framework with JSON-only API interactions, eliminating the schema inconsistencies and drift issues that plagued earlier versions. Your terraform plan will finally show "No changes" when nothing has actually changed.

Modern Architecture:

• Single provider implementation (removed SDK v2 and plugin multiplexer)
• Native HCL nested blocks for cleaner, more intuitive configurations
• Comprehensive test coverage with 38 passing acceptance tests (100% pass rate)

Enhanced Job Management:

• UUID support for job references (use immutable UUIDs instead of names)
• Complete notification support with proper webhook, email, and plugin configurations
• Fixed execution lifecycle plugins (critical fix—previous versions silently ignored these)
• Automatic schedule normalization and option enforcement inference
• Full support for orchestrators, log limits, and global log filters

Runner Management Improvements:

• Semantic equality for tags (no more drift from Rundeck's tag normalization)
• Enhanced error messages with API response details

Better Developer Experience:

• Username/password authentication support
• Improved error messages for troubleshooting
• Comprehensive documentation with troubleshooting guides

Breaking Changes

This is a major release with important compatibility requirements:

• Minimum Rundeck version: 5.0.0 (API v46+)
• Minimum Go version: 1.24+
• All XML API interactions have been removed (JSON only)

Getting Started

The 1.0.0 release will be available in the Terraform Registry today. Existing Terraform configurations should work without modification, though you may need to reorder notification blocks alphabetically and explicitly set require_predefined_choice = true for options with value choices.

Resources:

• Full Changelog
• GitHub Repository
• Provider Documentation

Special thanks to the community members who reported issues, tested pre-release versions, and contributed to making this release possible!

Runbook Automation Updates

Bouncy Castle 1.79 for CVE-2025-8916

SSM cannot run job for more than 1 hour

Adds configurable SSM execution timeout functionality to allow AWS SSM jobs to run beyond the default 1-hour limit. The changes introduce a new ssm-execution-timeout configuration property that defaults to 3600 seconds (1 hour) but can be adjusted as needed.

Update nimbusJose for CVE-2025-53864

Set sleep time on sftp plugin

Adds a configurable sleep timeout property to the File Transfer plugin, allowing users to customize the wait time after file transfer completion instead of using the hardcoded 2000ms value. There is a new sleepTimeout integer property with a default value of 2000ms.

Fixes datacenter value in Vmware resource model

This PR fixes the datacenter value retrieval in the VMware resource model by replacing hardcoded parent chain navigation (parent?.getParent()?.getName()) with a dynamic traversal approach that handles VMs at any folder depth.

Before this fix, any nodes nested more than 2 folders would exhibit the wrong value for the attribute datacenter.

Ansible Plugin Improvements

Update to the way the Ansible plugin handles ad-hoc command execution, specifically replacing the deprecated -t argument with environment variables for callback configuration, and modernizing inventory argument handling. It also adds and improves tests to ensure these changes work as intended and that user-provided environment variables are respected.

Slack Notification Plugin now supports Templates

Refactoring and enhancement of the SlackNotificationPlugin to improve template handling, logging, and code robustness. The main changes include support for external FreeMarker templates, safer and more informative logging, and improved per-notification context management.

Fix CVE-2025-55163: Upgrade google-cloud-container to 2.82.0

This mitigates CVE-2025-55163 (CVSS 8.7, CWE-770) by upgrading the google-cloud-container dependency from 2.54.0 to 2.82.0 in both the kubernetes-clusters and gcp-plugins modules.

Fix 500 error on duplicate user creation - return 409 Conflict with proper error message

Fixed API error handling for duplicate user creation and added complete OpenAPI documentation. The user creation API endpoint (PUT /api/44/secure/users/create) now properly handles duplicate username errors. Previously, attempting to create a user with an existing username returned an HTTP 500 Internal Server Error with an HTML error page. Now it correctly returns HTTP 409 Conflict with a clean JSON error message: {"err": "User with username 'xyz' already exists"}. Additionally, the endpoint now includes comprehensive OpenAPI documentation with detailed request body schemas (including the username, pwd, and roles fields), multiple JSON examples for basic and complete user creation, and documentation for all response codes (201, 400, 403, 409). This fix improves API reliability and makes it easier for API consumers to handle duplicate user scenarios programmatically.

Fix CVE-2025-64756 in glob package

Fixed security vulnerability CVE-2025-64756 in the glob package by upgrading to version 10.5.0, which patches a command injection vulnerability in the glob CLI.

Mitigate CVE-2025-12383 in jersey-client dependency

This PR mitigates CVE-2025-12383 (CVSS 9.4 Critical) in the jersey-client dependency used by the jira-plugins module.

Fix CVE-2025-8916 by updating dependencies and forcing BouncyCastle 1.79

Security Enhancement: Fixed CVE-2025-8916 (BouncyCastle vulnerability, CVSS 6.3) by updating OCI SDK to 3.21.0, Kubernetes client to 22.0.0, Spring Security RSA to 1.0.13, and globally forcing BouncyCastle to the patched version 1.79 across all affected components. This addresses "Allocation of Resources Without Limits or Throttling" vulnerabilities in 6 plugins: cloud-oraclecloud-healthcheck-plugin, kubernetes-clusters, rundeckpro-config, rundeckpro-security, runbook-automation-data-spi, and runbook-automation-utils.

Enhance OpenAPI documentation for Runner Management configuration endpoint

Improved OpenAPI specification documentation for the Runner Management configuration endpoint, providing clearer guidance for API consumers on how to configure automatic vs manual runner assignment for projects.

Update OCI SDK to 3.43.2 to address CVE-2024-30172

Updated Oracle Cloud Infrastructure (OCI) Java SDK to version 3.43.2 to address security vulnerability CVE-2024-30172. This update affects the Oracle Cloud plugins and Oracle Cloud Health Check plugin, improving the security posture of Oracle Cloud integrations.

Regenerate Credentials button is hidden for Ephemeral Runners

Fixed an issue where the Regenerate Credentials button was incorrectly hidden for Ephemeral Runners in the Runner Management interface, ensuring users can now properly regenerate credentials for ephemeral runner types.

Rundeck Open Source Product Updates

Fix CVE-2025-8916

Fix project export using CLI

This PR fixes an error in the project export functionality when using the Rundeck CLI by ensuring proper cleanup of resources even when file streaming fails.

Update Key Value Data with new Match Substrings checkbox

This fix addresses an issue where the Key Value Data log filter required regex patterns to match the entire log line due to its use of Matcher.matches(). Users found that patterns working in external tools failed in Rundeck because they didn't consume the full line. To resolve this, we've added a new matchSubstrings configuration property that allows users to toggle between full-line matching (using matches()) and substring matching (using find()). This provides the flexibility to use partial patterns like ^.*\.[A-Z]([0-9]+)\. without requiring them to match the entire line, while maintaining backward compatibility by defaulting to the original full-line matching behavior.

Update nimbusJose for CVE-2025-53864

Multiline Job Options (Beta)

Adds support for Multiline Job Options as a new choice in the "Option Type" dropdown. This allows users to create job options that can accept multi-line text input instead of being limited to single-line text fields.

Fix: Nodes page support for url param for filter input

Fixed an issue where the ?filter= URL parameter was not properly setting the node filter on the Nodes page, ensuring deep links with node filters now work as expected.

Fix the loading icon showing when a step already succeeded

Small bug fix: When a job is running, a step that doesn't have an output shows a loading icon no matter if the step has finished running.

Fixes missing no output message when looking at a step in the execution page

Added new ansible-plugin release version

• Update to the way the Ansible plugin handles ad-hoc command execution, specifically replacing the deprecated -t argument with environment variables for callback configuration, and modernizing inventory argument handling. It also adds and improves tests to ensure these changes work as intended and that user-provided environment variables are respected.

Upgrade MSSQL JDBC to fix CVE-2025-59250

Upgraded the Microsoft SQL Server JDBC driver from version 9.4.0.jre8 to 13.2.1.jre8 in the runner-agent module to address security vulnerability CVE-2025-59250.

Fix OpenAPI spec for metrics endpoints

Fixed OpenAPI documentation for metrics endpoints to properly represent them as five separate endpoints (/metrics, /metrics/metrics, /metrics/ping, /metrics/threads, /metrics/healthcheck) instead of a single endpoint with an optional parameter. This ensures the OpenAPI Explorer generates correct curl commands and includes example responses for each endpoint, improving API discoverability and developer experience.

Allow KeyValueDataLogFilterPlugin to capture multiple values

Enhanced the Key Value Data Log Filter Plugin to support capturing multiple key-value pairs from a single log line through a new optional allowMultipleMatches property. This enables parsing of complex log formats containing multiple matches (e.g., "user=john role=admin session=abc123") while maintaining full backward compatibility with the default single-match behavior.

Fix CVE-2025-64756 in glob package

Fixed security vulnerability CVE-2025-64756 in the glob package by upgrading to version 10.5.0, which patches a command injection vulnerability in the glob CLI.

Update sshj to 0.40.0 for CVE-2025-8916

Updated sshj dependency in the git-plugin from 0.33.0 to 0.40.0 to address CVE-2025-8916, a security vulnerability in the SSH library.

Fix Firefox scroll behavior on execution output tab

Enhance OpenAPI documentation for 15 API endpoints

Enhanced OpenAPI specification documentation for 15 API endpoints across multiple controllers, improving clarity for API consumers and generated SDK quality. All changes are documentation-only and fully backward compatible with no breaking changes to existing API behavior.

Key improvements include clarification of query parameter usage for Ad Hoc endpoints, addition of previously undocumented POST method support for project export endpoints, and comprehensive documentation of 404 response scenarios for execution state, SCM status, and project file endpoints.

This release introduces several key enhancements to Rundeck’s automation and runner management capabilities. The create runner endpoint now validates the assignedProjects property format, ensuring more reliable runner assignments. Default runner replica types are set to manual when not specified, simplifying API requests. Node health check cache refreshes have been improved for better system monitoring, and errors related to runner creation in the wizard (especially for Linux ephemeral runners) have been addressed. Additionally, the GitHub Run Script plugin now supports script arguments, expanding its flexibility for automation workflows and the Hashicorp Vault plugin supports certificate authentication.

We have recently introduced a new, beta method for viewing our API: the OpenAPI specification file is now automatically generated from our code base, helping ensure documentation remains current. As this feature is still in beta, we are continuing to refine the official spec file over the next few releases. We welcome your feedback and encourage you to report any issues you encounter.

Runbook Automation Updates

Hashicorp Vault Plugin Certificate Authentication

We've significantly improved our Rundeck Vault plugin by implementing full certificate authentication support. The update adds critical missing code for CERT authentication, introduces new configuration options for truststore passwords and custom cert authentication mounts. Users can now successfully authenticate with HashiCorp Vault using client certificates, securely configure password-protected JKS truststores, and benefit from enhanced logging and error handling that makes troubleshooting configuration issues much easier.

Improvement in the create runner endpoint to validate assignedProjects prop format

Fixed an issue to avoid creating a runner via API with a wrong format to the assignedProject property. Currently, the runner is being created even if this property is not correct and it causes an error when listing runner from the GUI or via API

Set default runner replica type to manual if not provided in API request

Improve the nodehealth check cache refresh

Removes the automatic 30-second cache refresh mechanism for node health checks and replaces it with a GUI-based refresh approach. The change eliminates forced periodic cache reloads that occurred every 30 seconds, improving performance by relying on user-initiated refreshes instead.

Runner Wizard error creating runner linux+ephemeral

Fixes a Runner Wizard error when creating a Linux ephemeral runner by ensuring proper state management and artifact naming.

Allow Script Arguments on GitHub Run Script plugin

Adds support for passing custom arguments to scripts executed by the GitHubScriptPlugin, allowing users to specify script arguments with shell-like quoting and escaping functionality.

Fix RSS Feeds plugin not recognizing Dates on Microsoft RSS Feeds

Error that occurs when processing RSS feeds that use Z as the timezone indicator instead of standard abbreviations like GMT or UTC.

CVE-2025-58754 Axios Update

Rundeck Open Source Product Updates

OpenAPI doc improvements

We are working on a dynamically generated OpenAPI spec file that is hosted on our documentation site at https://docs.rundeck.com/docs/api/. Currently this functionality is Beta, but the output can be viewed there in two different viewers. Going forward there will continue to be improvements to these specs. For more information check out our release notes stream on the release notes page for 5.17.0.

Execution view shows local timezone

Improves time display formatting across the UI with consistent timezone-aware time formatting for execution start/end dates and log entries.

Job Audit Tracking: Track Job Creator and Modification History

Rundeck now automatically tracks comprehensive audit information for every job, making it easier to manage job ownership and understand change history. Each job now records:

• Job Creator (createdBy): The username of who originally created the job
• Last Modifier (lastModifiedBy): The username of who last changed the job
• Creation Date (created): When the job was first created
• Last Modified Date (lastModified): When the job was last changed

This audit information is visible through the API (v56+) and appears in exported job definitions (YAML/JSON/XML). The tracking fields are system-managed and protected during job import operations to maintain accurate audit history - when you import or promote jobs between environments, the audit trail is preserved rather than being overwritten. This helps teams answer questions like "Who created this job?", "When was it last modified?", and "Who made the most recent changes?" - essential for compliance, troubleshooting, and job lifecycle management.

Remediate CVE-2025-59952

Remediate CVE-2020-25638

Update log4j2.properties.template to add Pre authentication logs

Fix button to select/deselect all on project export

Add index for retry_execution_id in the execution table

Adds a database index on the retry_execution_id column in the execution table to improve performance during execution cleanup operations and reduce Oracle database deadlock issues.

Enh/Add logger.cleanup on Remco log4j template

Adds logger configuration for the ExecutionsCleanUp job in the Remco log4j2 template for Docker images. The change enables proper logging visibility for cleanup execution history operations without requiring global log level modifications.

Remote URL Job Option is not going through a configured proxy

Fix CVE-2025-58754 Axios in ui-trellis

Here is a link to the full list of public PRs

Links

• Download the Releases: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions
• Catch us on LinkedIn for the Live Stream Release Videos

Version Info

Name: "Mont Blanc sandybrown flag"

Release Date: November 3rd, 2025

Community Contributors

Submit your own Pull Requests to get recognition here!

• Lucas Migliorini (luqpy)

Staff Contributors

• Greg Schueler (gschueler)
• Carlos Eduardo (carlosrfranco)
• Eduardo Baltra (edbaltra)
• Forrest Evans (fdevans)
• Jaime Tobar (jtobard)
• Jake Cohen (jsboak)
• Jaya Singh (jayas006)
• Jesus Osuna (Jesus-Osuna-M)
• José Vásquez (hiawvp)
• Luis Toledo (ltamaster)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)

Runner Replicas

Runner Replicas transforms Enterprise Runners from single points of execution into distributed, fault-tolerant services by enabling multiple Runner instances - referred to as Replicas - to operate as a unified logical unit. Administrators can now deploy multiple Replicas of the same Runner across different hosts - either virtual machines or containers. Intelligent load balancing distributes job executions across healthy replicas while maintaining execution affinity for jobs that require filesystem consistency.
This enhancement eliminates single points of failure in the automation infrastructure, provides horizontal scalability for high-demand scenarios, and enables zero-downtime maintenance for patching, upgrading, or restarting individual Replica hosts while other Replicas seamlessly handle the workload, ultimately delivering the reliability and scale that mission-critical automation workflows demand.

Runbook Automation Updates

Database Connection Pool Configuration

Rundeck v5.16.0 adds support for configuring additional datasource properties via dataSource.properties.* in configuration files. This enhancement allows administrators to tune Tomcat JDBC connection pool settings for optimal performance in high-concurrency environments.

Additional Updates

• Fixes for CVE-2020-26939
• Bundle the new S3 plugins into rundeckpro

Rundeck Open Source Product Updates

• Add support for configuring datasource properties - Enables dataSource.properties.* configuration for Tomcat JDBC connection pool tuning
• Add job creation time to API v55+ responses
• separated query from the Run Later Job for the Job Takeover process
• Update selenium driver
• Update NPM packages for renovate
• Exclude CVE-2025-41242
• Bump kotlin in testRuntime for CVE-2020-29582

Here is a link to the full list of public PRs

Ansible Plugin Updates

Links

• Download the Releases: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions
• Catch us on LinkedIn for the Live Stream Release Videos

Version Info

Name: "Mauna Kea palevioletred book"

Release Date: October 6th, 2025

Community Contributors

Submit your own Pull Requests to get recognition here!

• Takafumi Noguchi (tknog-pd)
• JP Lassnibatt (jplassnibatt)

Staff Contributors

• Greg Schueler (gschueler)
• Carlos Eduardo (carlosrfranco)
• Eduardo Baltra (edbaltra)
• Forrest Evans (fdevans)
• Jake Cohen (jsboak)
• Jaya Singh (jayas006)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• José Vásquez (hiawvp)
• Luis Toledo (ltamaster)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)

We always appreciate Community submissions. As part of this release we have 6 contributors that provided enhancements alongside our dedicated staff team.

This release focuses heavily on security improvements and product modernization, addressing multiple CVE findings including CVE-2025-55163, CVE-2024-21538, CVE-2022-38749, and several others. Key security enhancements include forced re-authentication capabilities and comprehensive dependency updates.

Beyond security, this release includes important user experience improvements such as fixes for job loading in the Next UI, enhanced node filtering behavior, and finalized French translations. We've also made significant infrastructure improvements by removing legacy GSP pages that have been converted to Vue components and updating various plugins and dependencies.

Runbook Automation Updates

Also includes all Open Source updates from below

Additional Updates

• Additional fixes to address CVE-2025-55163 findings
• Fix: Force cross-spawn patched versions to fix CVE-2024-21538
• Force Re-authentication regardless of activity status
• Fixes for CVE-2025-55163
• Finish CVE-2024-57699 mitigation
• Fix CVE-2022-38749 - Groovy 3.0.25
• Update snakeyaml to fix CVE-2022-38749
• CVE-2025-48734 Mitigation - Common Beans 1.11.0
• CVE-2024-25710 - High - Review/Resolve
• Update Quartz for CVE-2019-5427
• Upgrade WireMock to fix CVE-2024-8184
• CVE-2020-26939
• CVE-2024-47554

Rundeck Open Source Product Updates

• Fix jobs not loading in nextUI
• Back previous behavior for node filtering combining two filters by clicking on it
• Finalize French translations
• Fix for CVE-2025-4949 - jgit
• Fix: Force cross-spawn patched versions to fix CVE-2024-21538
• Fix CVE-2022-38749
• Fix: repeated exceptions after SCM is disabled
• Child processes not being killed on Windows OS nodes
• Update Quartz for CVE-2019-5427
• Update openssh-node-execution plugin version
• update commons-compress version
• Additional Fixes for CVE-2025-48976
• Update execution metrics
• Cleanup: Remove old gsp pages that were converted to Vue
• cleanup: remove 'filterPref' logic
• CVE-2024-47554
• Enh/Add logger.cleanup on Remco log4j template
• Job editor card header section in vue
• chore(deps): Bump jgit to 6.10.1.202505221210-r
• Update dependency org.seleniumhq.selenium:selenium-java to v4.34.0
• Update French Translations - From community

Here is a link to the full list of public PRs

Links

• Download the Releases: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions
• Catch us on LinkedIn for the Live Stream Release Videos

Version Info

Name: "Matterhorn fuchsia sunglasses"

Release Date: September 2nd, 2025

Community Contributors

Submit your own Pull Requests to get recognition here!

• Lucas Migliorini (luqpy)
• Christian Schulze-Wiehenbrauk (Ntr0)
• Clément Mazzella (mazzella-c)
• JP Lassnibatt (jplassnibatt)
• Bruno Dias (brmdias)
• Rui Melo Amaro (rmeloamaro)

Staff Contributors

• Greg Schueler (gschueler)
• Carlos Eduardo (carlosrfranco)
• Eduardo Baltra (edbaltra)
• Forrest Evans (fdevans)
• Jake Cohen (jsboak)
• Jaya Singh (jayas006)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• José Vásquez (hiawvp)
• Luis Toledo (ltamaster)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)

This is a critical bug fix release that addresses the following issue:

Node filter overrides in job reference steps would disappear from the GUI when editing parent jobs, with the filter field appearing empty even though filters were previously saved. Simply opening and saving a parent job (without any modifications) would clear all node filter overrides, causing child jobs to execute on all nodes instead of the intended filtered subset. This issue could lead to unintended job execution on incorrect nodes, potentially affecting production environments and job orchestration workflows.

In this version node filter overrides are properly preserved and displayed when editing parent jobs, eliminating the need for manual re-entry and preventing unintended execution scope changes.

Rundeck Product Updates

• Fix node filter input not updating value correctly on reference jobs

Here is a link to the full list of public PRs

Links

• Download the Releases: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions

Version Info

Name: "Logan yellowgreen phone"

Release Date: August 18th, 2025

Staff Contributors

• Greg Schueler (gschueler)
• Carlos Eduardo (carlosrfranco)
• Eduardo Baltra (edbaltra)
• Forrest Evans (fdevans)
• Jake Cohen (jsboak)
• Jaya Singh (jayas006)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• José Vásquez (hiawvp)
• Luis Toledo (ltamaster)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)

Rundeck 5.14.0 is a maintenance release focused on security enhancements and bug fixes. This release addresses multiple CVEs including CVE-2023-3635, CVE-2025-48734, CVE-2025-48976, CVE-2025-52493, and CVE-2025-7783 through dependency updates and security fixes across the platform.

Key improvements include enhanced character escaping for Unix, PowerShell, and CMD commands, fixes for execution reporting issues, and updates to the Ansible plugin. The release also includes authorization improvements and various plugin enhancements for Jira integration and ROI/Job Metrics functionality.

While this release doesn't introduce major new features, it significantly strengthens the security posture and stability of your Rundeck environment. We recommend upgrading to ensure your installation benefits from these important security fixes.

Runbook Automation Updates

Also includes all Open Source updates from below

Additional Updates

• Addresses CVE-2025-52493 by preventing stored secrets from being exposed in webpage DOM
• Addresses CVE-2025-48734 by updating beanutils to version 1.11.0
• Jira assignee field issue
• Jira plugins - Error with Numeric Custom Field
• Minor Improvements/fixes for ROI/Job Metrics plugins
• Update MongoDB Field Descriptions

Rundeck Open Source Product Updates

• Address CVE-2023-3635 and CVE-2025-48734
• Update File Commons Version for CVE-2025-48976
• Address CVE-2023-3635 and CVE-2025-48734
• Address CVE-2025-7783 by updating axios
• Add feature flag to allow hiding ROI setup instructions
• Improve Escaping chars for unix, ps and cmd
• Avoid creating multiple execution reports if notification fails
• Addresses CVE-2025-48734 by updating beanutils to version 1.11.0
• Add missing authorization check for plugin details
• Address CVE-2023-3635 by updating retrofit to version 3.0.0
• Updated Ansible plugin release to 4.0.9
• Include Last Login on API Responses
• Fix a bug: using ?max=100 URL params on the activity page causes a 500 error

Here is a link to the full list of public PRs

Ansible Plugin Updates

• Bump rundeck-core dependency to 5.14 to address CVEs
• Error when running ansible plugin with encrypt extra vars

Links

• Download the Releases: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions
• Catch us on LinkedIn for the Live Stream Release Videos

Version Info

Name: "Logan violet paperclip"

Release Date: August 4th, 2025

Community Contributors

Submit your own Pull Requests to get recognition here!

• (cwaltherpd)
• Rui Melo Amaro (rmeloamaro)

Staff Contributors

• Greg Schueler (gschueler)
• Carlos Eduardo (carlosrfranco)
• Eduardo Baltra (edbaltra)
• Forrest Evans (fdevans)
• Jake Cohen (jsboak)
• Jaya Singh (jayas006)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• José Vásquez (hiawvp)
• Luis Toledo (ltamaster)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)

A security vulnerability was identified and patched in the Enterprise Runner component where certain password patterns containing regex special characters (particularly multiple '+' characters) could bypass the password masking mechanism, potentially exposing sensitive information in error logs. This issue affected Enterprise Runner versions used with Process Automation 4.14.0 through 5.12.0, but did not impact Open Source Rundeck or the Process Automation server itself. The vulnerability has been remediated in version 5.13.0, which includes fixes in both the server and runner components to prevent exposure of secrets containing regex special characters. Process Automation Self Hosted customers should upgrade both their server and all Enterprise Runners to version 5.13.0 or later for complete remediation. Process Automation SaaS servers are already updated, customers should proceed directly to upgrading all their Enterprise Runners.

Full details on this page

Job Metrics

The Job Metrics plugin provides comprehensive visualization and analysis of your Rundeck job execution patterns, success rates, and timing trends through an intuitive dashboard interface.

ROI Metrics

The ROI Summary plugin brings your automation's financial impact to life through intuitive visualizations and real-time calculations, helping teams quantify and demonstrate the value of their automation initiatives.

Webhook Audit Listener

The Webhook Audit Listener plugin enables real-time streaming of Rundeck audit events to external systems through configurable webhook endpoints. This allows teams to integrate Rundeck’s audit trail with external monitoring, logging, or security platforms.

Runbook Automation Updates

Also includes all Open Source updates from below

Additional Updates

• Add new UI for Job Metrics and ROI Metrics graphs
• Fix: Ansible Model Sources return host vars data in key=value format when "Gather Facts" is set to "no"
• Fix: Webhook events don't get deleted properly from DB
• Update vault-storage plugin version to 1.3.14 for CVE-2019-17571
• Add MongoDB Node Step to allow Runner functionality

Rundeck Open Source Product Updates

• Added new ansible-plugin release
• Fix: DELETE query type for stored events is ignored
• Update multiline-regex-datacapture-filter plugin to 1.1.2 for CVE-2019-17571
• Allow Audit Events Plugins to refresh config
• Upgrade Gradle to 7.6.2
• Upgrade asset-pipeline-grails lib version to 3.4.7
• upgrade go
• Fix/Add 72-char limit for BCRYPT passwords to address CVE-2025-22228
• Upgrade sshj plugin version for Security Fixes
• Update attribute match plugin to 0.2.1
• fix: blank string value for "Options" property type causes Exception
• Add project name to params to get plugin details
• Add autocomplete behavior to inputs and scripts
• NextUI: Add job activity list menu action
• Upgrade selenium version to 4.31.0

Here is a link to the full list of public PRs

Ansible Plugin Updates

• Fix: Ansible Model Sources return host vars data in key=value format when "Gather Facts" is set to "no"

Links

• Download the Releases: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions
• Catch us on LinkedIn for the Live Stream Release Videos

Version Info

Name: "Kirkjufell red headphones"

Release Date: June 25th, 2025

Community Contributors

Submit your own Pull Requests to get recognition here!

• Rui Melo Amaro (rmeloamaro)

Staff Contributors

• Greg Schueler (gschueler)
• Alexander Abarca (alexander-variacode)
• Alexander Grachtchouk (mrdubr)
• Carlos Eduardo (carlosrfranco)
• Eduardo Baltra (edbaltra)
• Forrest Evans (fdevans)
• Jake Cohen (jsboak)
• Jaya Singh (jayas006)
• Julianna Green (juliannagreen1)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• José Vásquez (hiawvp)
• Luis Toledo (ltamaster)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)

Improved HTTP Response Validation in the HTTP Request Plugin

The HTTP Request step plugin just got smarter! We've streamlined the configuration by removing the "Check Response?" checkbox and introduced powerful new logic for validating HTTP response codes. You can now define exact codes (e.g. 200), ranges (e.g. 200–206), wildcard groups (e.g. 2xx), or even combinations like 200,2xx,404-406. This gives you greater flexibility to define what a successful response looks like in your automation workflows. If no response codes are specified, the default behavior remains to fail on any response >= 400. This enhancement makes it easier than ever to create resilient, production-grade Jobs.

Runbook Automation Updates

Also includes all Open Source updates from below

Additional Updates

• Add jira issue key to data context in Jira Create Issue plugin, fix logging typo

Rundeck Open Source Product Updates

• Update Jackson to v2.17.3
• Upgrade json-smart version to fix CVE-2024-57699
• Rundeck RPM package still requiring Java 11 even if Java 17 is installed
• Fix: option remote json using jsonpath should allow array result
• Convert error handlers logic to Vue
• Add method to delete api tokens by user

Here is a link to the full list of public PRs

Links

• Download the Releases: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions
• Catch us on LinkedIn for the Live Stream Release Videos

Version Info

Name: "Kinabalu orange flash"

Release Date: May 12th, 2025

Community Contributors

Submit your own Pull Requests to get recognition here!

Staff Contributors

• Greg Schueler (gschueler)
• Alexander Abarca (alexander-variacode)
• Alexander Grachtchouk (mrdubr)
• Carlos Eduardo (carlosrfranco)
• Forrest Evans (fdevans)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• José Vásquez (hiawvp)
• Luis Toledo (ltamaster)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)

This point release addresses three critical issues that were identified in versions 5.11.0. The fixes focus on improving runner functionality and key storage UI bugs.

• Resolved an issue where changes made to runner node-filters were not being saved properly.
• Fixed the non-functioning key storage selector when using runner.
• Addressed a bug where persistent error messages in runner logs stating "Runner did not deliver reports in the configured timeout period" and resulted in jobs not continuing to run.

Links

• Download the Releases: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions
• Catch us on LinkedIn for the Live Stream Release Videos

Version Info

Name: "Kilimanjaro deeppink bullhorn"

Release Date: April 16, 2025

Community Contributors

Submit your own Pull Requests to get recognition here!

Staff Contributors

• Greg Schueler (gschueler)
• Alexander Abarca (alexander-variacode)
• Alexander Grachtchouk (mrdubr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Charlie Crawford (ChuckCrawford)
• Forrest Evans (fdevans)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• José Vásquez (hiawvp)
• Luis Toledo (ltamaster)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)

This point release addresses three critical issues that were identified in versions 5.10.0. The fixes focus on improving runner functionality and key storage UI bugs.

• Resolved an issue where changes made to runner node-filters were not being saved properly.
• Fixed the non-functioning key storage selector when using runner.
• Addressed a bug where persistent error messages in runner logs stating "Runner did not deliver reports in the configured timeout period" and resulted in jobs not continuing to run.

Links

• Download the Releases: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions

Version Info

Name: "K2 turquoise tower"

Release Date: April 15, 2025

Staff Contributors

• Greg Schueler (gschueler)
• Alexander Abarca (alexander-variacode)
• Alexander Grachtchouk (mrdubr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Charlie Crawford (ChuckCrawford)
• Forrest Evans (fdevans)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• José Vásquez (hiawvp)
• Luis Toledo (ltamaster)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)

MongoDB Job Step Plugin

MongoDB is a widely adopted NoSQL database known for its flexibility and ease of use, making it a popular choice for modern application development. With our new MongoDB job step plugin, you can now run arbitrary queries against your MongoDB databases as part of your Runbook Automation workflows. This enables teams to perform tasks–such as automating diagnostics, data validation, and operational checks—while exposing those tasks through safe, self-service interfaces. It’s a powerful way to reduce manual effort, eliminate DB access bottlenecks, and bring MongoDB operations into your existing automation ecosystem. Our MongoDB How-To article has a full walk through how to setup and test the plugin.

JSON and Table for SQL Query Plugin

The SQL Runner Node Step plugin is commonly used to automate tasks or provide a self-service mechanism for interfacing with SQL databases–such as MySQL, MSSQL, Oracle and so on. Previously, the step would always return the output of the query as plain-text log-lines. Now, with this latest enhancement, users can select a format from a list of options, including JSON and CSV. These output options allow for the SQL output to be viewable as a HTML table in the GUI, and provides an easier method to capture specific data elements using log filters–for example, using the JQ log filter with the JSON output format. This enhancement both provides an improved visual experience of retrieving database data but also reduces the steps to use that data in subsequent workflow steps.

Runbook Automation Updates

Also includes all Open Source updates from below

Additional Updates

• Add MongoDB command runner to enterprise plugins
• Add JSON,Table output format to SQL Runner Step
• Fix: User Class Management issues when license assignment is exceeded

Rundeck Open Source Product Updates

• Fix Remco CVEs - See pull request for list
• Make public key download from GUI disabled as default

Here is a link to the full list of public PRs

Links

• Download the Releases: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions
• Catch us on LinkedIn for the Live Stream Release Videos

Version Info

Name: "Kilimanjaro coral briefcase"

Release Date: April 9th, 2025

Community Contributors

Submit your own Pull Requests to get recognition here!

Staff Contributors

• Greg Schueler (gschueler)
• Alexander Abarca (alexander-variacode)
• Alexander Grachtchouk (mrdubr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Charlie Crawford (ChuckCrawford)
• Forrest Evans (fdevans)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• José Vásquez (hiawvp)
• Luis Toledo (ltamaster)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)

Official Support for Java 17

Rundeck and Enterprise Runners on version 5.10.0 now support Java 17 runtime (JRE), bringing significant advantages to enterprise customers through its Long Term Support (LTS) status and enhanced performance capabilities. With Java 17 LTS support extending until September 2029, organizations can confidently deploy Rundeck knowing they have a stable, supported foundation for years to come. The upgrade delivers notable performance improvements through enhanced G1 Garbage Collection, resulting in more predictable pause times and better memory management. Users will experience faster startup times and reduced memory footprint, particularly beneficial for containerized deployments and cloud environments. Existing Rundeck deployments running on Java 11 can be upgraded seamlessly to Java 17, maintaining backward compatibility with existing automation workflows and custom plugins.

Note: Building from source still requires Java 11 JDK

Enhanced Runner Install Experience

Enterprise Runners provide the crucial mechanism for securely dispatching automation to infrastructure within your environments. As Runners are regularly created by both new and existing users, the installation experience is critical for reducing the time to get up and running with Runbook Automation. With this latest release, we have significantly improved the process to create and install new Runners. Users now select the platform type for their Runners – such as Linux, Windows, Docker or Kubernetes – and then they are presented with the necessary commands to immediately install the Runner of the chosen type. This significantly reduces the steps required to stand up new Runners and enables new teams to get started within their Runbook Automation Projects with greater ease.
For full details on the enhanced Runner install experience, please refer to the Creating Runners documentation.

Runbook Automation Updates

Also includes all Open Source updates from below

Additional Updates

• Update netty-handler for CVE-2025-24970
• Fix: ServiceNow Assignment Group is not working in job step plugins
• Fix: SSH-J Node Executor CopyFileFailed for recursive copies
• New method of polling for runner reports to cleanup records
• Upgrade okio version to address CVE-2023-3635
• Upgraded google cloud container version to address CVE-2024-7254
• Azure Vault Key Storage Plugin

Rundeck Open Source Product Updates

• Fix: Activity filter has an extra > character
• Fix: SSH-J Plugin CopyFileFailed for recursive copy
• Group properties in Node Source configuration
• Cache some API responses in GUI
• Fix: Result data set not included in error handler context
• Deprecate azure-object-store-plugin
• Code Injection Vulnerability via Project Name Label
• Update jsch library

Here is a link to the full list of public PRs

Links

• Download the Releases: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions
• Catch us on LinkedIn for the Live Stream Release Videos

Version Info

Name: "K2 slategray tent"

Release Date: March 14th, 2025

Community Contributors

Submit your own Pull Requests to get recognition here!

• (trodriguezpd)
• Nicholas Worthington (ngwmddgh)
• Bruno Dias (brmdias)
• Rui Melo Amaro (rmeloamaro)

Staff Contributors

• Greg Schueler (gschueler)
• Alexander Abarca (alexander-variacode)
• Alexander Grachtchouk (mrdubr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Charlie Crawford (ChuckCrawford)
• Forrest Evans (fdevans)
• Jake Cohen (jsboak)
• Jaya Singh (jayas006)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• José Vásquez (hiawvp)
• Luis Toledo (ltamaster)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)

Azure Key Storage

Azure Key Storage is released for Runbook Automation SAAS customers. Azure Key Vault is a cloud-based service for secure storage and management of sensitive data. It allows controlled access to confidential information such as API keys, passwords, certificates, and cryptographic keys. This integration enables users to retrieve secrets from Azure Key Vault and utilize them for secure connections to various resources including virtual machines, databases, other tools, and more.

Azure Key Storage will be available for Runbook Automation Self Hosted with the version 5.10.0 release.

Dynamic Node-Runner Association

Automatic Runner Selection for node-dispatch allows users to assign a Runner to a set of nodes using a Node Filter such that any tasks dispatched to those nodes will automatically use the assigned Runner. This dynamic association of Runners to nodes simplifies the authoring of Jobs, since users no longer need to define Runner selection as part of their Job definitions. The association between Runners and nodes also allows for a single Job execution to use multiple Runners based on the nodes being targeted.

Runner Hosts as Nodes

Runners can now natively be added as nodes to the node inventory, providing a simpler method for executing steps on the Runner while also executing against other nodes. This also provides for an easier setup experience for teams that are new to using Runbook Automation. More details about the Runner as a Node can be found here.

This release includes numerous security updates to address identified CVE vulnerabilities, along with various improvements to enhance product functionality.

Runbook Automation Updates

Also includes all Open Source updates from below

Additional Updates

• Resolve CVE-2024-52046 - Critical
• Performance issues using ServiceNow plugin
• Update Spring to 5.3.39
• Update Ansible plugin to 4.0.7
• Jira Create Issue - Failure with required custom field that is not a string value
• Secrets cache configurable on AWS Secret Manager Plugin

Rundeck Open Source Product Updates

• Remove params from resource-level runner acl at system level
• Resolve CVE-2024-52046 - Critical
• Fix SCM import when file name has quotes
• Performance issues using ServiceNow plugins
• Update JAAS/jetty combined login module to allow ignoreRoles in binding context
• Create a new endpoint to expose user/token authorizations
• Added modification to ExpandedJobGroupsSpec
• Update Spring to 5.3.39
• Fix import action of scm import plugin when importing right after enabling the plugin
• Update Ansible plugin to 4.0.7
• Use golang 1.22.2 to address CVE-2023-45288
• Update vue-i18n to version 10 and webpack 5 to latest
• Fix: JettyRolePropertyFileLoginModule supported in docker
• Add GET project/{project}/nodes/tags
• Add promoted/highlighted steps in the vue converted pieces for workflow
• Upgraded commons-io version to address cve-2024-47554
• Expose additional plugin properties in */plugin/list API responses
• Remove JUnit from build distribution
• Fix execution modal when nextUi mode is enabled
• Convert workflow steps into vue
• Multi-select with all values selected should use values if job referenced or via api
• Fix: Invalid workflow step causes uncaught exception

Here is a link to the full list of public PRs

Ansible Plugin Updates

• Enable custom tmp on ansible
• Fix - Added max aliases field to set a valid value

Links

• Download the Releases: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions
• Catch us on LinkedIn for the Live Stream Release Videos

Version Info

Name: "Hood peru phone"

Release Date: February 5th, 2025

Community Contributors

Submit your own Pull Requests to get recognition here!

• Rui Melo Amaro (rmeloamaro)
• Bruno Dias (brmdias)
• (trodriguezpd)

Staff Contributors

• Greg Schueler (gschueler)
• Alexander Abarca (alexander-variacode)
• Alexander Grachtchouk (mrdubr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Charlie Crawford (ChuckCrawford)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• José Vásquez (hiawvp)
• Luis Toledo (ltamaster)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)
• Stephen Joyner (sjrd218)

The updated Kubernetes Plugin Suite for Rundeck introduces powerful features including dynamic cluster discovery for EKS/AKS/GKE, cloud provider authentication, and native in-cluster support from Runner, all without Python dependencies. These enhancements enable automated cluster management, simplified authentication, and efficient bulk operations across multiple clusters, making it easier for teams to manage Kubernetes infrastructure at scale while reducing manual effort and improving security.

Updated Kubernetes Plugin Suite

• Dynamic Cluster Discovery: New EKS, AKS and GKE resource-model plugins automatically discover new clusters and add the clusters as nodes to the inventory. This reduces manual effort, minimizes errors, and accelerates the deployment of infrastructure changes, enabling teams to scale efficiently.
• Cloud Provider Authentication: AWS, Azure and GCP provide a mechanism to retrieve the kubernetes auth through their API’s. New Job step plugins can use the AWS/Azure/GCP credentials to retrieve the necessary Kubernetes authentication to communicate with the clusters. Teams save time by avoiding manual credential management, improving productivity and compliance.
• Optimized for Numerous Clusters: Clusters are added as nodes to the inventory, customers can easily target any number of clusters with a given operation. Now, users can execute bulk operations reliably and consistently, leading to improved operational efficiency and reduced downtime.
• Native in-cluster Support from Runner: Customers can now easily place a Runner in their clusters and Runbook Automation can use the Service Account of the pod that the Runner is hosted in as a means for authenticating with the cluster that the pod is in. This native integration reduces complexity, ensures secure access, and enhances the portability of automation workflows across environments.
• No Python Dependency: Eliminates the need for Python, reducing dependency risks and setup complexity. This results in faster deployments, fewer compatibility issues, and lower maintenance costs, especially in environments with strict language or package requirements.

In addition to the new resource-model plugins, this release includes the following new Job step plugins:

• Kubernetes Clusters - Create Object
• Kubernetes Clusters - Delete Object
• Kubernetes Clusters - Describe Object
• Kubernetes Clusters - Update Object
• Kubernetes Clusters - List Objects
• Kubernetes Clusters - Object Logs
• Kubernetes Clusters - Run Command
• Kubernetes Clusters - Run Script

Runbook Automation Updates

Also includes all Open Source updates from below

Additional Updates

• Update ansible-plugin to 4.0.6 (See update list below)
• Secrets cache configurable on AWS Secret Manager Plugin
• Update spring security for CVE-2024-38821
• Update S3 log plugin for CVE-2024-21634
• Add Kubernetes job step plugins to server and to runner

Rundeck Open Source Product Updates

• Alternate Plugin Blocklist Enhancement
• UI: Project Dashboard: Fix: activity summary should not be shown for 0 counts
• Update spring security for CVE-2024-38821
• Fix the project export right managing both export and delete action
• Fix: invalid job components are not reported
• Remove build dependency on local Groovy SDK
• Add missing security headers

Here is a link to the full list of public PRs

Ansible Plugin Updates

• Update ansible version
• Fix - Ansible process sub children
• Fix - Ansible YAML parsing error
• Allow custom bin path on gather facts false
• Fix - Ansible plugin - Resource Model Source throws NullPointerException

Links

• Download the Releases: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions
• Watch the Live Stream Release Recap

Version Info

Name: "Fuji green knight"

Release Date: December 5th, 2024

Community Contributors

Submit your own Pull Requests to get recognition here!

• Stéphane Rondinaud (clueware)
• Bruno Dias (brmdias)
• Dan Austin-Merrill (djaustin)
• Rui Melo Amaro (rmeloamaro)
• Naveed Anjum (nvd01)

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Alexander Grachtchouk (mrdubr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Charlie Crawford (ChuckCrawford)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Luis Toledo (ltamaster)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)
• Stephen Joyner (sjrd218)

Project Runner Management, announced in version 5.3.0 is now Generally Available. We appreciate all the feedback during the Early Access program. Check out the docs on this feature here and watch a demo on the 5.3.0 release notes page.

There are also quite a few package updates across the platform to address security findings submitted by the community.

Runbook Automation Updates

Also includes all Open Source updates from below

Additional Updates

• Updates EC2 plugin for CVE-2020-13956
• Promote Project Runner Management to Generally Available
• Upgrade http-notification version to 1.0.9
• bouncycastle update, address CVE-2020-15522
• Resolve CVE-2022-24329
• Resolve CVE-2021-28168
• Include more details in PD GetIncident plugin output

Rundeck Open Source Product Updates

• Fix: Scheduled jobs stop running on schedule after edits.
• Add fallback behaviour for localization, so that missing translations fallback to English
• Fix: Excessive logs when Rundeck loses connection to Database
• Update to bouncycastle 1.78.1, address CVE-2020-15522
• Update object-store-plugin dependencies to resolve CVE-2021-0341
• Provider to add cache control headers to http responses
• Adjust navbar logic, addressing the missing submenu items in the tab "more items"
• Fix: exitCode from script steps is not correct in context variable data

Here is a link to the full list of public PRs

Ansible Plugin Updates

• Support windows authentication

Links

• Download the Releases: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions
• Watch the Live Stream Release Recap

Version Info

Name: "Foraker yellowgreen gift"

Release Date: October 21, 2024

Community Contributors

Submit your own Pull Requests to get recognition here!

• Bruno Dias (brmdias)
• (pdt-taz)
• Aisling Kells (Sway23)

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Alexander Grachtchouk (mrdubr)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Charlie Crawford (ChuckCrawford)
• Darwis Narvaez (DarwisNarvaezDev)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Oscar Cerda (ocerda)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)
• Stephen Joyner (sjrd218)

This release fixes a critical issue where scheduled jobs are no longer executed after making unrelated edits to the job. This can happen in version 5.6.0 when the jobs is edited via API, job/project imports, SCM, or direct job editing.

Links

• Download the Releases: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions

Version Info

Name: "Fansiban sandybrown camera"

Release Date: October 14th, 2024

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Alexander Grachtchouk (mrdubr)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Charlie Crawford (ChuckCrawford)
• Darwis Narvaez (DarwisNarvaezDev)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Oscar Cerda (ocerda)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)
• Stephen Joyner (sjrd218)

Our 5.6.0 release is focused on bug fixes, CVE remediation and testing. We have also continued our efforts into the UI code to modernize, and standardize it to Vue. This will bring performance improvements and simplify building future enhancements.

Additional Updates

• Update aws-java-sdk to address CVE-2024-21634
• Fix CVE-2023-5072
• Fix CVE-2023-51074
• Fix: It is now possible to change TMP dir in Runners
• HTTP request step not working in framework and project configuration level

Rundeck Open Source Product Updates

• Plugins control security issue
• Executions API will return referenced executions
• Update jackson databind and cbor libraries
• Add LDAP rolePagination config option for Docker
• Fix CVE-2023-51074
• Notification timeouts enabled by default.
• Fix edge case in pluginPropEdit update
• Fix: Imported command/script steps should be plugin steps
• Fix notification timeout results in hanging jobs
• Improvement on the Resource Model plugins configuration using runners
• Fix: "Job Running" when job has completed for scheduled jobs.
• Fix: Text/HTML download appears garbled if execution log has unicode text
• Fix: Pagination Issue due to calculation by casting string into number
• Avoid multiple executions for same schedule
• Add LDAP rolePagination config option for docker

Here is a link to the full list of public PRs

Links

• Download the Releases: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions
• Watch the Live Stream Release Recap

Version Info

Name: "Fansiban salmon bullhorn"

Release Date: September 12, 2024

Community Contributors

Submit your own Pull Requests to get recognition here!

• Matthias (palto42)
• Rui Melo Amaro (rmeloamaro)
• Bruno Dias (brmdias)
• Gastón Urbina (urbinet)
• Victor de Jong (victordejong)
• Adam Barrand (abarrand)

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Alexander Grachtchouk (mrdubr)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Charlie Crawford (ChuckCrawford)
• Darwis Narvaez (DarwisNarvaezDev)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Oscar Cerda (ocerda)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)
• Stephen Joyner (sjrd218)

Check out the new features and enhancements for PagerDuty Runbook Automation commercial offerings and Rundeck Community included in this release.

Highlights

Automatic Runner Selection for Job Execution

The Enterprise Runner is most commonly used to dispatch automation to nodes within environments that are not directly accessible by Runbook Automation (cloud or self hosted). With this latest enhancement, users can assign subsets of their node inventory to each Runner so that the Runners used for Job execution are dynamically selected. This reduces the complexity of Job authoring and enables customers to target multiple environments with a single Job execution.

Full documentation on the Runner’s Remote Node Dispatch can be found here.

Runners as Nodes

There are many cases where users need to execute automation tasks on the Runner’s host. A frequent example of this includes retrieving an artifact, script, or Ansible playbook from Git. It is also common for customers with a physically distributed footprint - such as in retail, hospitality, or food & beverage - to place a single Runner in each location and then target each location with automation. Previously, the configuration and execution of automation for these use-cases was complex and non-intuitive.

With this release, Runner’s hosts are natively added as nodes to the Node Inventory and can be targeted with automation. This reduces the time to set up your Project for automation and simplifies the Job creation and execution. Full documentation on the Runners as Nodes can be found here.

Missing Executions Fix

If you had upgraded to our 5.4.0 release and noticed some executions missing from the UI this is fixed in 5.5.0. This only affected customers that have previously run version 4.16.0 and older that upgraded to 5.4.0. With the upgrade to 5.5.0 the executions are shown properly in the UI.

Runbook Automation Updates

Also includes all Open Source updates from below

Additional Updates

• Resource Model Runner filter is not displayed as expected
• PagerDuty webhook plugin should return 400 on mismatched signature instead of 500
• Fix: Runner - Cyberark Key Storage Plugin Doesn't Work with CCP Mode

Rundeck Open Source Product Updates

• Fix report delete by execution ID
• Look up execution by id if uuid not in report
• Fix for group selection on old UI
• Add runner acl admin permissions in docker image
• Moves requestId interface to core module.
• Fix typescript issues to use NodeTable and NodeFilterInput components in another enterprise component
• Improve validation of project archive import
• Fix get reports
• Fix node filter input text not showing in execute job modal
• Upgrade ansible plugin to 4.0.4
• Bring in uiv translations
• Add JMX metrics for Authorization Success and Fail
• Convert details tab to vue
• Add JMX metrics for to track user login and logout
• Jobs scheduled at Project level continue to run when disabled by a Not Owner cluster member
• Move SSHJ and JSCH functional executor tests to core
• Initial request id support
• Fix API calls returning 500 where 400 is more appropriate
• Add JMX metric that reports the quartz thread pool size
• : Add isConfigured check to the StoragePlugin
• Add jetty jmx metrics

Here is a link to the full list of public PRs

Ansible Plugin Updates

• Error using new ansible inventory list with empty inventory (defined in ansible.cfg)
• Enh: Added yaml data size parameter at model source
• Fix: Ansible model source - limit error
• Fix: Ansible model source - limit error
• add a functional test for larges inventories
• fix when master password configured

Links

• Download the Release: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions
• Watch the Live Stream Release Recap

Version Info

Name: "Fairweather orchid tower"

Release Date: August 8th, 2024

Community Contributors

Submit your own Pull Requests to get recognition here!

• Ginfranco Groppo (gian4820)
• Oswaldo Peralta (runwaldo)

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Alexander Grachtchouk (mrdubr)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Charlie Crawford (ChuckCrawford)
• Darwis Narvaez (DarwisNarvaezDev)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Oscar Cerda (ocerda)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)
• Stephen Joyner (sjrd218)

Our 5.4.0 release adds support for configuring separate endpoints for Credential Provider and API web-server, making it more flexible to integrate with different CyberArk deployment configurations while following security best practices.

Highlights

Reminder: Project Runner Management Early Access

With 5.3.0 we announced Early Access to project-based Runner management. If you are interested in testing out the feature and providing us feedback, fill out our Early Access form and we will reach out promptly.

CyberArk Integration Enhancements

Customers integrate Runbook Automation with secrets management providers - such as CyberArk - as a means to secure and standardize how keys and passwords are utilized within automation across their organization.

This latest release now allows users to integrate with CyberArk through a more secure method, where the CyberArk API credentials no longer need to be stored in Runbook Automation. This allows users to follow CyberArk’s best-practices for configuring integrations.

In addition, users can now configure separate endpoints for the Credential Provider and the API web-server in Runbook Automation – allowing for easier integration with various CyberArk deployment configurations.

Process Automation Updates

Also includes all Open Source updates from below

Additional Updates

• Updated awssdk library to mitigate CVE-2024-29025
• CyberArk plugin enhancements

Rundeck Open Source Product Updates

• When posting to a disabled webhook return a 404
• Change on forecast api to fetch future executions for "run job later"
• Fix: Main docs link goes to 404
• Restores Tomcat JDBC pool.
• Add runner permissions to admin.aclpolicy template
• update API, update tests and bump API version
• Enables building arm64 Docker images locally
• relabel property
• Login as local user doesn't evaluate case sensitive feature
• nextUI: Converted forecast page
• Feature undeck.feature.caseInsensitiveUsername.enabled doesn't show on System configuration page
• fix: npe during cleanup incomplete executions
• Update webpack 4 to 5
• Fixes on Docker images directories and permissions

Here is a link to the full list of public PRs

Links

• Download the Release: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions
• Watch the Live Stream Release Recap

Version Info

Name: "Everest deeppink piggy-bank"

Release Date: June 18, 2024

Community Contributors

Submit your own Pull Requests to get recognition here!

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)
• Stephen Joyner (sjrd218)

Version 5.3.0 is here! These latest updates introduce Project Runner Management for enhanced team autonomy, new PagerDuty Incident Workflow integration for improved incident response, and SFTP support for more secure file transfers. These features collectively empower teams with better control over their automation workflows, strengthen incident management capabilities, and provide more secure options for script execution and file transfers in enterprise environments.

dataSource.properties.maximumPoolSize=100

Highlights

Project Runner Management Early Access

Users can now create, download, and manage Enterprise Runners from within Projects. This gives teams more autonomy and flexibility with their automation and decreases their dependency on the tool administrators of Runbook Automation (cloud or self-hosted).

To try out project-based Runner Management, submit the Early Access form here and select Project Runner Management. We will respond promptly with instructions on how to enable the feature. Read more about Runner management here.

New PagerDuty Job Steps

Among the more common use cases for Runbook Automation (cloud or self-hosted) is incident automation — either for retrieving diagnostics or carrying out remediation. To assist users with further automating the incident process, Runbook Automation can now natively invoke PagerDuty Incident Workflows. This release includes both a Job Step and a Notification plugin to start an Incident Workflow. These plugins better enable users to connect the technical infrastructure processes with the communication and collaboration processes as part of their incident response. Read more about the new plugins here.

SFTP Option for Script Execution & File Transfer

The SSH File Transfer plugin (powered by SSHJ) now includes an option to use SFTP (Secure File Transfer Protocol) instead of SCP (Secure Copy Protocol) for securely executing scripts and transferring files. As of recently, SFTP is the recommended method for dispatching files over networks. In conjunction with the Enterprise Runner, this allows users to confidently execute scripts and transfer files in their most secure environments.
We will continue to support SCP in the SSHJ plugin for the foreseeable future. Read more about the SFTP option for our SSHJ plugin here.

Note: SCP was flagged with a Moderate level CVE by Red Hat. You can read the details of the CVE here.

Additional Updates

• Configurable maximum log size for Job execution logs
• Performance improvement for Runbook Automation users with large numbers of Job executions through Runners.
• Update http-step plugin to mitigate CVE-2023-24621
• Additional plugin credentials are now treated as secrets:
  • framework.plugin.UserGroupSource.OktaGroupSource.apiToken
  • rundeck.security.oauth.okta.clientSecret
  • rundeck.security.oauth.azure.clientSecret
  • framework.plugin.ExecutionFileStorage.org.rundeck.amazon-s3.AWSSecretKey
• Additional ACL policies for project-based Runner management
• Fix: OpenSSH CopyFile not working on Docker
• Fix: duplicate user entries when using LDAP and case sensitivity
• Fix: Error when using step labels with Ruleset workflow strategy
• Fix: Autotakeover resuming executions that use a Runner
• Update Azure and SSHJ plugins to mitigate CVE-2021-29425
• Update spring to 5.3.34 to mitigate CVE-2024-22262
• Fix: log event metadata produces errors when using specific log filters
• Update nimbus-jose dependencies and constraints to mitigate CVE-2023-52428
• Fix: Docker image ignoring value of JVM_MAX_RAM_PERCENTAGE
• Fix: intermittent 500 errors when querying the execution metrics through the API
• Fix: Database errors when upgrading to 5.2.0 while using Microsoft SQL Server.
• Upgrade Grails to 6.1

Rundeck Open Source Product Updates

• RUN:2243: Update sshj-plugin version to mitigate CVE
• testdeck schedule job
• Login counting multiple times in user classes
• Update spring to 5.3.34 address CVE-2024-22262
• add TZ to scheduled jobs in tests
• QAF-migration2
• Add functional test for ldap duplicated user fix
• unit tests for edit project file
• fix log event metadata may be incorrect
• fixes project label and description tests
• bump sshj plugin version to 0.1.12
• Make max log size configurable (whale log limit)
• Add ACL's for project runner management
• Change label and description of secureExposed option type
• Grails 6.1.2 upgrade
• OpenSSH CopyFile not working on Docker
• Remove packages that are not being used and update dependencies
• Update nimbus-jose deps and constraints for CVE-2023-52428
• Fix: Case sensitive in users when used LDAP OSS
• Fix: Users logged from LDAP are duplicate
• Fix docker image ignoring value of JVM_MAX_RAM_PERCENTAGE
• Fix hibernate user session on scm context
• Ui:Next: remove duplicated backslash on nextUi for menu/home
• Run-2255 add unit tests for RundeckInfo component
• Fix/selenium
• Update version to 5.3.0-SNAPSHOT
• QAF Migration: Default File Copier
• Tests: Added tests for job options duplication
• pt2: QAF's Oss Migration Package
• add ansible functional test using runner
• Tests: Migrated job timeout and log data wf step tests
• QAF Migration: 3 tests
• Tests: Migrated Job Reference tests from qafw
• QAF Migration Oss
• Fix: Case sensitive in users when used LDAP module OSS
• & Fix: Users logged in rundeck from LDAP are duplicate
• QAF Migration to New Testdeck
• QAF selenium tests migration
• Fix: Flaky "json resource" Test
• Fix: Server Error while Metrics Request
• Fixed overlapping label and button
• Testdeck Migration: 10 Tests
• Migrate api new testdeck - config the cluster environment
• Grails 6.1 upgrade

Here is a link to the full list of public PRs

Ansible Plugin Updates

• add plugin group
• Fix: No Syntax Highlight Between Edit Sessions Ansible Plugin
• Use ansible vault for temporary files

Links

• Download the Release: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions
• Watch the Live Stream Release Recap

Version Info

Name: "Etna turquoise lamp"

Release Date: May 20th, 2024

Community Contributors

Submit your own Pull Requests to get recognition here!

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Dave Darby (David Darby)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)
• Stephen Joyner (sjrd218)

Our 5.2.0 release is focused on bug fixes, CVE remediation and testing. The team spent time revamping our testing framework and migrating tests into that new model. There is also effort being put into the UI code to modernize, and standardize it to Vue to bring performance improvements and simplify building future enhancements.

Runbook Automation Updates

Also includes all Open Source updates from below

Additional Updates

• Fix: Add Projects button not shown
• Update spring to 5.3.32 because CVE-2024-22243
• Fix: Bug with Oracle migrations from previous versions
• Update pg driver due CVE-2024-1597
• Upgrade sshj-plugin version to 0.1.11
• Fix Runner jobs timing out when under heavy output load
• Add runners statistics to system report

Rundeck Open Source Product Updates

• Fix: Spinner always shown in nextUi jobs list
• Update to Spring 5.3.33 for CVE-2024-22259
• Upgrade spring-security to version 5.8.11
• Upgrade ansible-plugin 3.2.10
• Fix error when deleting jobs after upgrade.
• Fix: don't include UI timezone data in schedules json
• Update golang and remco
• Scheduled forecast GUI errors
• Fix npe error when wrong runner token is presented
• Percentage in number showing in progress bar instead of undefined%
• Move hold method from cluster base container
• Improve test "click on gutter and refresh should highlight correct line"
• Move hold method from ClusterBaseContainer
• Send a grails event when an execution is being aborted
• Update spring to 5.3.32 because CVE-2024-22243
• Update pg driver due CVE-2024-1597
• Cleanup: prettier for pluginConfig
• Vue conversion of job option editor
• [Snyk] Fix for 1 vulnerabilities
• Convert project node sources page to Vue
• Fix: Allow to update existing webhooks at project import
• Upgrade sshj-plugin version to 0.1.11
• Update API tests harness project import
• Fix: Slowness clicking the job name (migrate job scm status badge and scm action buttons to vue)
• Install primevue and continuum tokens
• Allow display of request error messages in spacecat 500 page.
• Fix: Remove dependency from rd-api-client
• legacyXml feature flag should support defaultEnabled
• Rdcli is not working properly updating projects on several rundeck versions
• UI:Next: Project list with lazy loading
• UI:Next: jobs list SCM status fixes
• Bug/fix behavior when remotevalues reload
• UI: activity list spacing and layout fixes
• Project and Storage usage of unique value for fetch
• Update messages_fr_FR.properties

Here is a link to the full list of public PRs

Ansible Plugin Updates

• Using ssh-agent with passphrase is not working in Ansible Plugin
• Share the vault storage password with the runner

Links

• Download the Release: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions
• Watch the Live Stream Release Recap

Version Info

Name: "Erebus rebeccapurple glass"

Release Date: April 10th, 2024

Community Contributors

Submit your own Pull Requests to get recognition here!

• André (muehan)
• José Ortiz (JoseOrtiz)
• (mazzella-c)
• (FriendlyTroll)
• Reiner (MegaDrive68k)
• Rui Melo Amaro (rmeloamaro)

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)
• Stephen Joyner (sjrd218)

• Download the Releases
• Sign up for Release Notes
• Upgrade instructions

Overview

Fixes to a scenario when upgrading to versions after 4.17.0 would result in an inability to delete jobs.

Rundeck Open Source Product Updates

• Fix error when deleting jobs after upgrade

Here is a link to the full list of public PRs

Community Contributors

Submit your own Pull Requests to get recognition here!

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)
• Stephen Joyner (sjrd218)

This release fixes the following issues:

Nodes were not showing properly in certain scenarios. If users didn't have system: read permissions, they wouldn't be able to see the project's nodes and would get a 403 error. Nodes would also have trouble being displayed if they contained a url to edit them (e.g AWS Nodes).

When AWS authentication was configured at the project level using plugin group config, AWS plugins would not properly authenticate in versions 5.1.0 and 5.1.1.

Fixes to a scenario when upgrading to versions after 4.17.0 would result in an inability to delete jobs properly.

Runbook/Runbook Automation Updates

• Fix AwsPluginGroup not working when the configuration was set at the project level.

Rundeck Open Source Product Updates

• Fix for nodes not showing
• Replace api call for fetching execution modes for nodes
• Fix error when deleting jobs after upgrade.

Here is a link to the full list of public PRs

Links

• Download the Release: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions

Version Info

Name: "Elbrus orchid flag"

Release Date: March 28th, 2024

Community Contributors

Submit your own Pull Requests to get recognition here!

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)
• Stephen Joyner (sjrd218)

This release patches the included Postgres JDBC Driver against the Critical CVE-2024-1597. There is also a fix to the Ansible libraries to address an issue when using Ansible and the SSHAgent.

Rundeck Open Source Product Updates

• Update Postgres SQL JDBC driver to address CVE-2024-1597
• Fix: Issues with Ansible Plugin when using SSHAgent on 5.1.0

Here is a link to the full list of public PRs

Links

• Download the Release: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions

Version Info

Name: "Elbrus orange cutlery"

Release Date: March 5th, 2024

Community Contributors

Submit your own Pull Requests to get recognition here!

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)
• Stephen Joyner (sjrd218)

• Download the Releases
• Sign up for Release Notes
• Upgrade instructions

Overview

This release patches the included Postgres JDBC Driver against the Critical CVE-2024-1597.

Rundeck Open Source Product Updates

• Update Postgres driver to patch CVE-2024-1597
• Rdcli is not working properly updating projects on severals rundeck versions
• Fix: Job option description too long

Here is a link to the full list of public PRs

Community Contributors

Submit your own Pull Requests to get recognition here!

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)
• Stephen Joyner (sjrd218)

The latest release introduces AWS Secrets Manager integration for seamless secret retrieval across multiple AWS accounts and regions, alongside new Enterprise Runner integrations with CyberArk Secrets Manager and Thycotic Secret Server. These key storage enhancements enable organizations to securely manage secrets within their existing infrastructure while using Runbook Automation, eliminating the need to store sensitive credentials directly within the platform.

All fixes from the 5.0.2 release are also included in this version.

Highlights

AWS Secrets Manager

This new Key Storage integration with AWS Secrets Manager can retrieve and use secrets stored in AWS for Jobs, node discovery, and dispatch. The integration can connect with multiple AWS accounts and retrieve secrets from across any number of AWS regions, giving users a quick method for tying in their existing secrets management to Runbook Automation.
See the full AWS Secrets Manager documentation for more details.

CyberArk and Thycotic Key Storage plugins

The Enterprise Runner can now integrate with CyberArk Secrets Manager and Thycotic Secret Server. These integrations enable customers to retrieve and use secrets within Runbook Automation (self-hosted or cloud) from a CyberArk or Thycotic instance that is not directly accessible from Runbook Automation.
This allows customers to continue using their existing secrets-management provider and not store, copy or save those secrets within Runbook Automation. Full documentation for Thycotic can be found here and for Cyberark here.

Runbook Automation Updates

Also includes all Open Source updates from Rundeck section below

• Fix error messages not showing the GUI
• AWS secret storage plugin - Support for multiple regions
• Upgrade sshj plugin to 0.1.10
• Upgrade pywinrm plugin to 2.1.3
• Upgrade Ansible plugin to 3.2.9
• Report Thycotic errors to Runner Logs
• AWS Secret Plugin
• Upgrade JSCH plugin in runner

Rundeck Open Source Product Updates

Important: Package and binary signing for our Community edition products, for versions 5.1.0 and late, now uses SHA256.

• Fix: legacyXml flag not working
• NPE While Reading Null Default Values for Secure Options
• Moving code to the try/catch block in order to show errors in the GUI
• Don't create a duplicate webhook when same name already exists in the project
• Fix: Job output highlight not highlighting correct line
• Upgrade sshj plugin to 0.1.10
• Upgrade pywinrm plugin to 2.1.3
• Upgrade ansible plugin to 3.2.9
• Skip rundeck.security.requiredRole if the call is from the runner
• Attach change event listener on mount instead of watch
• Fix: Wrong Value Used as Secure Option
• Brazilian Translation Updates
• Unexpected Default Value Field for Options
• Fix: Using storage plugins to load plugin group settings
• Fix: Cluster not retrying execution on another node when owner shutdown
• Allow single quotes in usernames
• Fix: Active Connection Required, StackOverflow false upload error (s3) on LogFileStorage Service
• Minor update for openapi docs
• Move JSCH plugin from bundle-in plugin to a core-plugin
• Header for homepage VUE Conversion
• Add api endpoint for Home summary
• Fix: SCM Disabled in Cluster while Job Plugins Metadata Retrieval
• nextUI: job list page: add job filters
• Fix: No Indentation on JSON Resource Model Edit Page
• Move execution logging classes to core
• 897 Follow button not working on log view page
• Transactional write to database for AuthToken and Webhook
• Fix: Asynchronous Project Import
• Update and fix brazillian translation

Here is a link to the full list of public PRs

Ansible Plugin Updates

• Print an error if the node doesn't have a hostname in generate inventory
• Share passphrase with the runner
• Fix error message when attempting to read SSH private key from storage

Links

• Download the Release: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions
• Watch the Live Stream Release Recap

Version Info

Name: "Elbrus olivedrab camera"

Release Date: February 14th, 2024

Community Contributors

Submit your own Pull Requests to get recognition here!

• (rafawalter)
• (dldrk)
• JP Lassnibatt (jplassnibatt)
• (jgarces-pd)
• Jess Crees (jesscrees)
• Rui Melo Amaro (rmeloamaro)
• (FriendlyTroll)
• Guillaume Lefranc (tanji)

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)
• Stephen Joyner (sjrd218)

The 5.0 and 5.0.1 releases had some un-intended compatibility issues that this 5.0.2 version is meant to address. Details listed below about the issues from previous versions and the changes included.

Release Details

Remove mandatory Enterprise Runner upgrade.

It is no longer required to update the Enterprise Runner when upgrading to 5.x.

5.x job definitions can now work on 4.x

This version does fix an issue where job definitions created in 5.x were not usable in older product versions. It's important to note that not all job definitions are backwards compatible if the job uses plugins or features not available on the older system, but this fix addressed some foundational issues with backwards compatibility for job definitions.

XML API Support

XML Support for the API is deprecated and future endpoints/enhancements will not support XML, but there is an option to turn it on for legacy needs. This version repaired an issue when enabling "legacyXML" feature of the API.

JSON/JQ Filter Quoting Behavior

In 5.0 we updated the JSON/JQ libraries and from that update the behavior of the filter improved in the form of performing much closer to a command line version of jq. This version adds an option flag to allow it to continue to add quotes as seen in previous product versions. New instances of the JSON/JQ Log filter will default to the new/improved behavior. Existing jobs will maintain the original behavior until a change is made to that log filter.

Links

• Download the Release: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions

Version Info

Name: "Denali deeppink book"

Release Date: February 12th, 2024

Community Contributors

Submit your own Pull Requests to get recognition here!

• Rui Melo Amaro (rmeloamaro)

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)
• Stephen Joyner (sjrd218)

Please use version 5.0.2

We have found some issues with Log Filters and passing data to the Enterprise Runner. Please use the 5.0.2 Release when upgrading.

Overview

Check out the new features and enhancements for PagerDuty Runbook Automation and Rundeck Community included in this release.

Highlights

This release fixes some key issues found in the 5.0.0 release. This release fixes the following issues:

• The JSON/JQ Log Filter was not properly capturing data into workflow variables.
• Certain data context variables were not being passed properly to the Enterprise Runner resulting in jobs failing to execute.

There is a new signing key to validate binaries starting with version 5.0.1. The new key can be downloaded here

Rundeck Open Source Product Updates

• Update Jgit version for CVE-2023-4759
• fix: step labels unavailable for workflow strategy
• Fix replace token for command plugin

Here is a link to the full list of public PRs

Links

• Download the Release: Open Source | Self-Hosted
• Sign up for Release Notes
• Upgrade instructions

Version Info

Name: "Denali coral bell"

Release Date: January 15th, 2024

Community Contributors

Submit your own Pull Requests to get recognition here!

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)
• Stephen Joyner (sjrd218)

Rundeck/Runbook Automation 5.0 is here! This release updates the underlying foundations of the Rundeck and Runbook Automation platform to open up more opportunities for enhancements and improvements in the 5.x series.

Our major version releases typically center around updates to the foundational libraries we use to build Rundeck. The result is a more stable, extensible, and secure product from the extensive library updates. There are also commonly breaking changes or key upgrade steps to be aware of. For this 5.0 release, we still included some enhancements and have more planned throughout the 5.x release cycle.

Runner Key Storage GUI for Resource Model Sources.

With version 4.16.0, the Enterprise Runner became capable of populating the Node Inventory with nodes that can only be accessed internally - such as VMware virtual machines and Kubernetes pods. Now, if accessing the inventory for these nodes requires a secret - such as an API Key for VMware - that secret can be retrieved by the Runner from a self-hosted secrets management provider, such as Hashicorp Vault. This allows users to populate the Node Inventory through the Runner - even when the source of those nodes are secured by a secret.

Jobs List Performance

The Job Lists UI has been fully refactored on the backend, resulting in a performance improvement of up to 85%. This will be most noticeable for Projects and a lot of grouped jobs.

Java 11 Minimum Required

To align the product with some of the foundational updates listed below the 5.0 version now requires Java 11.

Deprecations

Saved Job, Report, and Node filters are no longer stored in the database. Node Filters are now stored locally on the browser and we will be updating Job and Report filters to function the same way in a future release.

Apache Tomcat is no longer a supported Application Server platform for Rundeck or Runbook Automation.

API Changes

The new Current API version is now 46. The new API depreciation version is 17. This means that future Rundeck releases will have a minimum API version of 17. Customers should ensure that code using the API is updated accordingly.

XML Support on the API is being deprecated and starting with the 5.x series we will only be supporting the JSON input and output options. (Note: Job definitions in XML format are still supported)

Check the API Versions page for all the details.

Runner Versioning

With this release the versioning for the Enterprise Runner is now aligned with the build version of the product. The Runner version included in this release will be 5.0.0

“Under the hood” updates

• Grails 6 is now the foundation for Rundeck and Runbook Automation products.
• Builds are now completed using Node 18.
• Started conversion of pages from old UI code to Vue. This effort will be on-going through the 5.x series and will bring performance improvements across the product.

Additional Improvements/Changes

• Upgraded H2 database to resolve CVE-2022-45868. (Please see Upgrade Notes if using H2.)
• Clearer logging messaging when running into Database Lock issues.
• The rdCLI tool version 2.0.8 now supports JSON job definitions.

Also includes all Open Source updates from below

Rundeck Open Source Product Details

• Upgrade to micronaut 3.10.3 & netty-codec 4.1.100.Final
• Fix liquidbase checksum error
• Add specific message when facing a liquibase LockException
• Fix: Node wizard and resourceyaml sources cannot store +4K lines of node entries
• Prevent markdown-view from applying its default theme
• Convert Node view pages to Vue
• Convert Edit Readme/MOTD Page to Vue
• Fix: Job option description too long
• CircleCI: Store generated rpm and deb as build artifacts
• Fix: API listing running executions fail using wildcards
• Add runner key storage GUI for node sources
• Grails 6 Upgrade
• Remove XML API support
• Integrate rundeck-plugins/job-kill-handler-addon into Rundeck Core
• API Minimum version 14
• Fix variable expansion for DYNAMIC_FORM property values
• Remove Job and Report filters saved in DB
• Remove database storage for "Node Filters"
• Fix: Project Components not exported when using export to another instance
• Upgrade H2 database to resolve CVE-2022-45868 (see upgrade notes)

Here is a link to the full list of public PRs

Ansible Plugin Updates

• Fix: Error handler not working as expected with Ansible Node Step
• Fixing ANSIBLE_BINARIES_DIR_PATH resolution
• Dedicated log filter plugin to capture the output of ansible set_stats module

Links

• Download the Release: Open Source | Self-Hosted
• Sign up for Release Notes
• Watch the Live Stream Release Recap

Version Info

Name: "Denali brown apple" Release Date: December 14th, 2023

Community Contributors

Submit your own Pull Requests to get recognition here!

• SimonC (Simon-cto)
• (rmeloamaro)

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Eric He (ehe-pd)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)
• Stephen Joyner (sjrd218)

• Download the Releases
• Sign up for Release Notes
• Upgrade instructions

Overview

Check out the new features and enhancements for PagerDuty Runbook Automation and Rundeck Community included in this release.

Runbook Automation Updates

Also includes all Open Source updates from below

Overview

This release fixes a bug in 4.17.3 with Large Log files causing instability on browsers and causing a crash.

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)
• Stephen Joyner (sjrd218)

• Download the Releases
• Sign up for Release Notes
• Upgrade instructions

Overview

This release addresses two CVE announcements for Rundeck/Runbook Automation:

• CVE-2023-48222
  Authenticated users can view or delete jobs for which they do not have authorization.
• CVE-2023-47112
  Authenticated users can view job names and groups for which they do not have read authorization.

Also includes other fixes for PagerDuty Runbook Automation and Rundeck Community included in this release.

Runbook Automation Updates

• Fix: Error with authentication using assume-role if using EC2/ECS credential provider
• Fix: ERROR 500 When creating ACL on Rundeck 4.16 + Postgres/Oracle

Also includes all Open Source updates from below

Rundeck Open Source Product Updates

• Fix: CVE-2023-47112 and CVE-2023-48222 | Job information endpoints not properly authorized
• Fix runtimeException Error on Script Resource Model

Here is a link to the full list of public PRs

Enterprise Runner Updates

Bundled Runner Version: 0.1.53

Community Contributors

Submit your own Pull Requests to get recognition here!

• (rmeloamaro)
• Jai Govindani (jai)
• Bruno Dias (brmdias)

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)
• Stephen Joyner (sjrd218)

• Download the Releases
• Sign up for Release Notes
• Upgrade instructions

Overview

Check out the new features and enhancements for PagerDuty Runbook Automation and Rundeck Community included in this release.

This is a smaller point release version that fixes some urgent bugs.

Runbook Automation Updates

Also includes all Open Source updates from below

Additional Updates

• S3 Log Import Issue in Clustered Environments.
• Fix: Switch to active mode with remote execution enabled kills all "run job later" executions
• Add assumeRoleArn property to ECS Node Source plugin and ECS Node Step plugins
• Fix: ServiceNow Quick filter not pulling all nodes after 4.17
• Azure group source plugin fix: avoid including null in groups result
• Webhook Debug Activity Not showing up in 4.17
• Fix: Performance issues - HealthStatus Node Enhancer

Rundeck Open Source Product Updates

• Upgrade Ansible plugin to 3.2.8
• Fix AVERAGE_DURATION_EXCEEDED execution status when using API
• Fix: Scheduled Editor not showing helper messages
• Improve Project config plugin validation issue from API request
• Update snakeyaml usage to be forward compatible with snakeyaml 2.0
• Avoid NPE if UserGroupSourcePlugin returns a null entry
• Fix exception in job start can cause system logs to stop
• Fix: flickering execution log view
• Fix Project Component Export
• Fix: Adjust infomation on 500 error page and replace with SpaceCat
• Fix: not importing logs from s3logstore
• Fix: node step with workflow error handler missing top level step state

Here is a link to the full list of public PRs

Ansible Plugin Updates

• Ansible Playbook Inline Workflow step couldn't run in a node dispatched from a Remote Runner

Enterprise Runner Updates

Bundled Runner Version: 0.1.53

Community Contributors

Submit your own Pull Requests to get recognition here!

• Connor McBrine-Ellis (mcbrineellis)
• Reiner (MegaDrive68k)
• Bruno Dias (brmdias)
• Tiago Barbosa (t1agob)

Terraform Provider Contributions (Cathcing up on these... If we missed anyone please let us know)

• Nathan Neulinger (nneul)
• Sander Descamps (sanderdescamps)
• Oliver Borchertborchero (borchero)
• Chris M (tebriel)
• Søren Mathiasen (sorenmat)
• Dmitriy Kostikov (rumatavz)
• Daniel B (dbrowneihg)
• Stéphane Bruckert (stephanebruckert)
• Adam Brett (adambrett)

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Eric He (ehe-pd)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)
• Stephen Joyner (sjrd218)

• Download the Releases
• Sign up for Release Notes
• Upgrade instructions
• Watch the Live Stream Release Recap

Overview

Check out the new features and enhancements for PagerDuty Runbook Automation and Rundeck Community included in this release.

Runbook Automation Updates

Also includes all Open Source updates from below

Highlights

This is a smaller point release of our 4.17.0 version that fixes some urgent bugs and a CVE that came up on our scans.

Additional Updates

• Upgrade Jetty due CVE-2023-36478
• Fix: System calendar not appearing
• Fix: Issue with job reference using group/name with Runners
• Fix: Schedules Not Paginated
• Update: Default unix node executor/file copier in Node Wizard to SSHJ
• Fix: ECS Stop Task Plugin uses correct stop code now

Rundeck Open Source Product Updates

• Upgrade Jetty due CVE-2023-36478
• Manual backport
• Fix log viewer progress bar
• Disable resource model runner selector for only local plugins

Here is a link to the full list of public PRs

Enterprise Runner Updates

Bundled Runner Version: 0.1.52

Community Contributors

Submit your own Pull Requests to get recognition here!

• Lucas Canavosio (lcanavosio)
• Reiner (MegaDrive68k)
• Matthew Evans (x86txt)
• Jeremy Olexa (jolexa)
• Programster (programster)

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Eric He (ehe-pd)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)
• Stephen Joyner (sjrd218)

• Download the Releases
• Sign up for Release Notes
• Upgrade instructions
• Watch the Live Stream Release Recap

Overview

Rundeck 4.17.0 is here! Check out the new features and enhancements for PagerDuty Runbook Automation, and Rundeck Community included in this release.

Runbook Automation Updates

Also includes all Open Source updates from below

Highlights

Runner secrets authentication improvements

Last release we announced support for integrating Runners with secrets-management providers that could be used in Job Step plugins. Now, the keys retrieved from this integration can be used with Node Executor and File Copier plugins as the method for connecting with remote nodes. The Runner can retrieve those secrets from providers like Vault and connect and execute commands or scripts on nodes.
For details on how to use secret management providers with Runners, see this documentation.

Runner Key Storage enhancement

Previously, if a Runner was integrated with a secrets-management provider, then a Job executed through that Runner couldn’t use secrets stored in the native Key Storage. With this release, that limitation is no longer in place. Now the Job can use both the Runner (and Key retrieved through the Runner), as well as keys stored in the native Key Storage facility.
For details on how to use secret management providers with Runners, see this documentation.

Cross-role and cross-account support for EC2, AWS Systems Manager

This release introduces the ability to use Runbook Automation to execute commands and scripts on EC2 instances spread across multiple AWS Accounts–all from within a single project. By using the AssumeRole functionality that is now built into both the EC2 Node Source and SSM Node Executor plugins, Runbook Automation can now integrate with multiple AWS IAM Roles that reside in one or multiple AWS Accounts.
To configure the AWS integration with Runbook Automation, see this documentation.

Enhanced feedback message on Enterprise Runners

Previously, if a user chose to use a Node Source that was not available on an Enterprise Runner, they would not see an error message only after they configured and then saved the Node Source. Now, users will see a message whether a given Node Source is available on their Runners when the remote Runners option is selected.

Additional Updates

• Enhance CyberArk To Support CCP Mode
• Upgrade runner to 0.1.52
• Fix: Stored Cross-Site Scripting (XSS) in Tour Management
• Fixed documentation bug in Athena Query Plugin
• Fix: SSO settings now reload without system restart
• Typo: ROI metrics plugin description shows wrong API url
• Allow combining properties in selector definitions for ServiceNow Node Sources

Rundeck Open Source Product Updates

• Fix: Execution mode is not retained after config refresh
• Fix webhook update to keep auth config
• Fix logViewer regression
• Fix: Key Storage view does not show error when saving fails
• Fix table header in dark mode
• Update project label naming
• Fix: File System keys unreachable in Rundeck
• Add default tab name for Nodes
• Fix: Cannot Import Jobs with Blank Notification's Config
• Remove MaxMetaspaceSize flag
• Inject storage filter and fieldId to Vue
• Fix: short description not shown for node/workflow steps in workflow step create picker
• Fix SSO settings reloading
• Runner UI fixes in support of the feature in rundeckpro
• Update Ansible plugin to 3.2.7
• Runner key selector doesn't list private keys
• Fix: Key Value data log filter unable to capture empty values
• Upgrade jdbc mssql driver
• Fix: Metrics Call Fails in PSQL
• Propagate status result to log filter complete method
• Fix typescript build error
• Vue3 compat build

Here is a link to the full list of public PRs

Ansible Plugin Updates

• Update AnsibleNodeExecutor.java

Enterprise Runner Updates

Bundled Runner Version: 0.1.52

Community Contributors

Submit your own Pull Requests to get recognition here!

• J. Casalino (thedoc31)
• Rodrigo Borchert (rodrigoborchert)
• Elio Espinel (elioe)
• Lucas Canavosio (lcanavosio)
• Simon Cateau (simon-c-msc)

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Eric He (ehe-pd)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• José Ortiz (JoseOrtiz)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Sarah Martinelli Benedetti (smartinellibenedetti)
• Stephen Joyner (sjrd218)

• Download the Releases
• Sign up for Release Notes
• Upgrade instructions
• Watch the Live Stream Release Recap

Overview

Check out the new features and enhancements for PagerDuty Runbook Automation and Rundeck Community included in this release.

Runbook Automation Updates

Also includes all Open Source updates from below

Highlights

Secrets Management Integrations through Enterprise Runner

With the latest release, customers can integrate the Runner with Hashicorp Vault and use secrets from Vault in their workflows and to discover nodes. When users navigate to select keys from key Storage, there is now an option to browse and select secrets from Vault that the Runner is integrated with. While the key names and paths are visible in the GUI, the secrets themselves are not sent to the server. The integration between Runners and secrets-management instances now enable customers to automate workflows in secure, remote environments where they have self-hosted secrets-stores:

For further details on configuring and using secrets-management providers with the Enterprise Runner, see this documentation.

Node Inventory Discovery through Enterprise Runner

This release enables the Runner to be used for discovering nodes and populating the node-inventory through the Runner. When users select to add a new Node Source through the GUI, there is now an option to select a Runner to use for discovering Nodes in the remote environment. Through existing Node Source plugins such as Ansible, VMware, Docker and Kubernetes, the Runner will retrieve and send the node data back to the server to be visible in the GUI and targeted for Job and Command execution. This integration allows customers to automate more tasks in their secure and remote environments where inventory can only be discovered within their environment’s perimeter.

For further details on configuring and using node discovery through the Enterprise Runner, see this documentation.

SSHJ Default Node Executor for New Projects

Prior to this release, the out-of-the-box Default Node Executor for projects was the JSCH plugin. However, this plugin no longer supports the latest SSH security standards – such as the most secure RSA algorithms. In order to support these latest standards for SSH security, new projects created within Rundeck and Runbook Automation will use the SSHJ plugin as the Default Node Executor. Customers who are using the JSCH plugin are not required to switch over to SSHJ and we will continue to support the JSCH Node Executor plugin.

Additional Updates

• Fixed: Issues were jobs with runners fail if the cluster member executing the job is not the same member communicating with the runner.
• Fix: System report statistics are not loading
• Support for file and script resource models to be executed in a Runner
• Fix: Cleanup misfire tracker properly when job was deleted
• Fix: AWS PluginGroup within Runbook Automation does not commit saved changes
• Update Jetty due to CVE-2023-26048 - CVE-2023-26049
• Upgrade guava due to CVE-2023-2976
• Fix Add tags with same name in project

Rundeck Open Source Product Updates

• Enable execution of Script file resource model in a remote runner
• Force Reloading of Runner keys
• Fix: Select the correct webhook when saving a new one
• Fix: Button border width causes misaligned input group on hi-dpi screen
• New LDAP setting for "allGroups" is true by default.
• Fix: Expand Timeout Variable on Scheduled Job
• Upgrade hibernate to 5.6.15 bc of compatibility issues with h2 2.0
• Fixes job deletion of a scheduled job
• Runner Key Storage GUI
• Update core storage plugins to hide password fields in UI
• Change default node executor and file copier to use SSHJ
• Fix: Execution state is not synchronized among cluster members when using shared file system log storage
• Remove un-stylish border from notifications
• Upgrade spring security due CVE-2023-34034
• Some jobs do not trigger after disabling/enabling the schedule
• Dark mode updates
• Fix: When clicking "Save" button at webhook can't copy the genereated string
• Update Jetty due to CVE-2023-26048 and CVE-2023-26049
• Fix: Map Different Required Authorizing Roles
• Fix stuck log output on a job with high number of nodes
• Fix: Throwing a precise message when the data column limit is reached
• Fix: rundeck.scm.startup.initDeferred config not defined in remco
• :Flag to enable/disable search for more than 1000 users
• Fixing repeating warn log messages
• Support for setting runner in Node source
• Cleanup: remove unused events fragment

Here is a link to the full list of public PRs

Ansible Plugin Updates

• Node source in the runner

Enterprise Runner Updates

Bundled Runner Version: 0.1.50

• Additional support for File and Script node source plugins
• Runner can support Key Storage plugins
• Runner can execute Node Sources
• Fix usage of maven local repository

Community Contributors

Submit your own Pull Requests to get recognition here!

• Luis Toledo (ltamaster)
• Eric He (ehe-pd)
• Carlos Eduardo (carlosrfranco)
• Greg Schueler (gschueler)
• Antony Velasquez Ruiz (avelasquezr)
• Darwis Narvaez (DarwisNarvaezDev)
• Alberto Hormazabal (ahormazabal)
• Rodrigo Navarro (ronaveva)
• McG (chrismcg14)
• Leonel Juarez (L2JE)
• Jesus Osuna (Jesus-Osuna-M)
• Osman Albarran (Oalbarran94)
• Nathan Fluegel (wayfaringson)

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Eric He (ehe-pd)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Stephen Joyner (sjrd218)

• Download the Releases
• Sign up for Release Notes
• Upgrade instructions
• Watch the Live Stream Release Recap

Overview

Check out the new features and enhancements for PagerDuty Runbook Automation and Rundeck Community included in this release.

Runbook Automation Updates

Also includes all Open Source updates from below

Highlights

IAM AWS Authentication for Runbook Automation

Previously, the only supported authentication method for the AWS plugins with Runbook Automation was through Access Key and Secret Key. Now, customers can leverage the cross-account, IAM based authentication method for integrating Runbook Automation with their AWS accounts. Not only is this method more secure and easy to configure, but it also allows customers to have multiple AWS Accounts integrated with their Runbook Automation instance, thereby allowing for a centralized hub of managing resources across multiple AWS environments

Key Storage Configuration Enhancement

Customers can now view and configure Key Storage integrations, such as Vault, Cyberark, and Thycotic, using a new graphical user interface (GUI) which displays the various integrations available and the necessary fields for each integration. Users no longer have to reference documentation in order to identify the required and optional fields, these are now presented to the user natively within the product. This not only simplifies the setup and management of Key Storage integrations, but also reduces the likelihood of misconfiguration. (Existing setups will continue to work and show up in the new configuration screens upon upgrade.)

Additional Updates

• Fixed Cyberark Logo
• Fix: PagerDuty incident Update, didn't add a resolution note
• Fix: Unscheduling a Job In Cluster now works across all members

Enterprise Runner Updates

Bundled Runner Version: 0.1.46

Rundeck Open Source Product Updates

• SSHJ-plugin: Remove use of temporary file to authenticate with password
• Script plugins, skip exceptions for key storage conversion
• Fix: Error importing job definition from 4.5
• Add Azure icon to core plugin
• Upgrade guava due to CVE-2023-2976
• Doc: Run API on local environment
• LDAP Fix large number of groups results in truncated user list
• Fix error handling format in MenuController forecast and info endpoints
• Fix/add changeset preconditions
• fix: authz checks for project type annotations
• Update to remco 0.12.4
• Fix: unable to upload xml jobs on 4.12 being exported from 4.5
• Bump snapshot version to 4.15.0
• Key Storage plugin GUI prep for Enterprise
• Fix: Added a customizer to avoid trace method on root path
• Dynamic default values for properties plugins
• Fix: HTTP Strict Transport Security (HSTS) Header Not Used
• Fix: Error responses including stacktraces
• Fix: "Active Connection is required" errors when using s3 log storage

Here is a link to the full list of public PRs

Community Contributors

• (rmeloamaro)
• (tomerarazy)
• Cris Walther (cwaltherf)
• (simon-c-msc)
• JP Lassnibatt (jplassnibatt)

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Eric He (ehe-pd)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Stephen Joyner (sjrd218)

Release Date: July 13, 2023

• Download the Releases
• Sign up for Release Notes
• Upgrade instructions

Overview

Password Reset operations over https were getting error messages on Enteprise versions of the product. Passwords were still being reset properly, but the user experience resulted in an error screen.

Community Contributors

Submit your own Pull Requests to get recognition here!

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Eric He (ehe-pd)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Stephen Joyner (sjrd218)

Release Date:June 15th, 2023

• Download the Releases
• Sign up for Release Notes
• Upgrade instructions

Overview

This release was created to fix a security vulnerability involving REMCO.

Rundeck Open Source Product Updates

• Upgrade to REMCO 0.12.4

Community Contributors

Submit your own Pull Requests to get recognition here!

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Eric He (ehe-pd)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Stephen Joyner (sjrd218)

Release Date: June 15th, 2023

• Download the Releases
• Sign up for Release Notes
• Upgrade instructions

Overview

Check out the new features and enhancements for PagerDuty Runbook Automation, and Rundeck Community included in this release.This release includes new enhancements to the user experience, bug fixes around CyberArk, and new versioning for Twistlock security.

Highlights

• Enhanced user experience for managing large projects. Previously, when removing existing projects from the system, users would have to wait for the delete operation to complete. For large projects – such as those with 100,00 executions – this could take upwards of 25 minutes or more. Now, when users delete a project, the operation takes place in the background, eliminating user wait times for the delete operation to complete.
• Major bug fixes for CyberArk. Two major fixes were implemented that make the Key Storage integration with CyberArk more reliable for the user.
• Improved security with additional vulnerability scanning coverage. 45 new CVEs have been addressed.

Additional Enterprise Updates

• Fix: Cyberark key storage plugin exceptions on startup and null initialization
• Fix: ECS plugin updated
• Fix: SSO error causes "White label" error page release-notes/include to-jira
• Update Azure plugin group name to be capitalized like other plugin groups
• Job Runner user-class allowed to read Nodes

Rundeck Open Source Product Updates

• Upgrade to spring boot 2.7.12
• Fix: references to ctxProject.
• Fix: notifications not triggering
• Fix: RSS feed generation not working
• Fix: Job Step plugin that uses ${config.*} variables within are no longer resolving
• Fix: Key Storage Making Call to List Keys Twice
• Fix: Import status not consistent in cluster after importing jobs through UI
• Fix: SCM Options in Job Menu Not Loading
• Fix: SCM General Disconnection Issues
• Fix: SCM import plugin does not refresh status in API unless GUI is refreshed
• Fix: Successful remote job import from API but getting error in SCM API response
• Upgrade ansible plugin to v3.2.5 and sshj plugin to 0.1.7
• AzureObjectStore update to exclude json-smart and upgrade nimbus-jose
• Improve UI performance with local assets support in UI plugins by using asset: prefix
• Update aws-s3-model-source plugin version 1.0.8
• Upgrade to spring-boot 2.7.11
• Upgrade libraries azure plugin libraries for azure 1.41.4 and azure-storage to 8.6.6
• Update Postgres driver version to 42.3.8
• Add additional DB index to improve performance
• Add database changeset preconditions
• Put webpack copied jquery autocomplete asset in the vendor folder.
• Minor improvements on spring security plugin config.
• Turn off storage rewrite by default
• Convert project node source edit page to Vue
• Java11 compatibility core
• Change user summary UI attach to use ui-socket
• Deferred project delete
• Add OpenAPI Spec annotations

Here is a link to the full list of public PRs

Community Contributors

Submit your own Pull Requests to get recognition here!

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Eric He (ehe-pd)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Stephen Joyner (sjrd218)

• Download the Releases
• Sign up for Release Notes
• Upgrade instructions
• Watch the Live Stream Release Recap

Overview

Check out the new features and enhancements for PagerDuty Runbook Automation, and Rundeck Community included in this release. This release includes enhancements to the Enterprise Runner, the SSM Node Executor plugins, and a new plugin suite. See below for the full release highlights.

Highlights

• Plugins on Enterprise Runner: The Enterprise Runner is used to automate tasks in secure, remote environments. With this latest release, the SQL Run Command, Github Run Script, VMware Node Steps, and File Transfer plugins have been added to the Runner’s capabilities. These additions enable users to more quickly author automation for their remote environments by using plugins instead of scripts and commands.
• Ad-hoc commands through Runner: There are cases when it is useful to quickly run on-demand commands to a selection of nodes - such as checking package version information or tmp directory files. Ad-hoc commands can now be run through the Enterprise Runner, allowing users to specify a Runner to execute commands on one or multiple nodes. This helps with both ad-hoc tasks as well as improving the setup and testing experience of the Enterprise Runner.
• SSM across multiple AWS accounts: The AWS Systems Manager plugins enable users to execute commands and scripts across their EC2 instances and ECS containers. Users can now orchestrate automation across all of their AWS accounts from a single project, reducing time and potential for human error for critical tasks. Read the technical How To article to learn more.
• Sensu Plugin Suite: The new Sensu plugin suite makes it easier for users to set up and manage the integration between Runbook Automation and Sensu. Whereas before users would have to configure the properties for the integration of the Project or Framework configuration file, this can now be configured in the Plugin Suite user-interface (see below).

Security Updates

• Upgrade to spring 5.3.27 as required by CVE-2023-20863
• Upgrade spring-security to 5.8.3 as required by CVE-2023-20862

Additional Enterprise Updates

• Cross account AWS SSM Enhancement
• Fix: Display Server Name in Cluster Manager
• Add Sensu Plugin Group

Rundeck Open Source Product Updates

• Correct loading indicator text
• Update to jackson 2.15.0
• Sets SameSite cookie policy to Lax as default to allow OAuth2 SSO flows
• Upgrade spring-security to 5.8.3
• PluginGroups Feature Flag Defaults to true
• Fix: Exception handling in job validation with queue+secureOpts
• Fix: Updated vue-moment dependency to latest moment version
• Upgrade spring-core CVE-2023-20863
• Fix: Misplaced SCM Tooltip on Job Show
• Fix: Remove WARN message in service.log related to SSO
• Fix: NPE Job Retry with No Failed Nodes
• Fix: Remove Webhook Debug Data
• Fix: Job definition load does not preserve option value ordering
• RES-288: SCM plugin does not release .pack files from ScmExport folder
• Enh: add multiple node wizard sources
• Fix: Enable schedules from project settings don't work as expected in clustermode

Here is a link to the full list of public PRs

Community Contributors

Submit your own Pull Requests to get recognition here!

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Eric He (ehe-pd)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Stephen Joyner (sjrd218)

• Download the Releases
• Sign up for Release Notes
• Upgrade instructions
• Watch the Live Stream Release Recap

Overview

This release contains a hotfix for a potential login issue. A change in 4.12.0 added a new security configuration by default, which can interfere with SSO login authentication flows.

This release restores the same behavior as 4.11.0.

Rundeck Open Source Product Updates

• Sets SameSite cookie policy to Lax as default to allow OAuth2 SSO flows

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Eric He (ehe-pd)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Miguel Ramos (mishingo)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Stephen Joyner (sjrd218)

• Download the Releases
• Sign up for Release Notes
• Upgrade instructions
• Watch the Live Stream Release Recap

Overview

Check out the new features and enhancements for PagerDuty Runbook Automation, and Rundeck Community included in this release. This release includes new plugins for Kubernetes, new Plugin Suites for Google Cloud, Datadog, and Azure, performance improvements to the Enterprise Runner, new authentication methods for Remote URL Job Options, and security fixes.

Runbook Automation Updates

Also includes all Open Source updates from below

Highlights

Two new Kubernetes plugins:

• Describe Pod is a Job Node Step plugin that allows users to view the status and details of pods in Kubernetes clusters. When diagnosing incidents, this plugin is useful for understanding whether the container in the pod is behaving as expected, or if there is a configuration issue with the pod. Click here for instructions to get set up with the Kubernetes plugins

• Ephemeral Debug Container is also a Job Node Step plugin that allows users to attach an ephemeral container to running pods. This plugin provides a safe method for troubleshooting running pods that may not have debugging utilities in their container image. Capturing debug data from containers can reduce MTTR during incidents or time to identify issues during QA.

New Plugin Suites for Google Cloud, Datadog, and Azure: Plugin Suites streamline the configuration of plugins. The Plugin Suites for Google Cloud, Datadog, and Azure reduce the number of steps required to configure plugins across an entire project—or the entire Runbook Automation instance. For example, previously a user would need to configure credentials for both the GCP Node Source and the GCP Job Step plugins. Now those credentials can be configured in a single location.

New PagerDuty Incident Note notification plugin: Now users can add a note to the Incident timeline in PagerDuty in response to the start, success, failure, or duration of a job. This helps users get an immediate feedback signal on the status of their Job without needing to add extra Job steps to their Job definitions.

Enterprise Runner enhancements: Updates to the performance of the Enterprise Runner result in faster Job execution and output. Now, when Jobs or Job steps are executed concurrently on Runners, users can expect up to an 80% reduction in perceived Job duration. This enhancement builds on top of the new architecture for Runners that was announced in 4.11.0.

Updated to Remote URL Job Options: Now users can pre-populate Job Options Values from remote sources that require authentication. Remote URL Job Options supports multiple authentication methods for making HTTP/S calls to retrieve the list of Job Options. Users can select from the following authentication methods for the remote URL: Basic, API Key, and Bearer Token. The keys for each of these methods can be retrieved from Key Storage. Additionally, users can reference nested JSON elements from the returned payload of the remote URL. Click here for the full documentation.

Security fixes

RUN-1629: Upgrade core libraries for CVE-2023-20861 RUN-1615: Invalidate user sessions upon password change/reset

Additional Updates

• New PagerDuty Notification - Add Note to Incident
• Upgrade core libraries for CVE-2023-20861
• Run 1404: Datadog plugin group
• Run 1615: Invalidate user sessions upon password change/reset
• Change config delete endpoint to use POST
• Fix: Exec-Cleaner Delete Cluster Dead Member's Executions
• Fix: Auto Takeover when scheduling via project schedules
• Fix: Stored Cross-Site Scripting (XSS) in Tour Management
• Fix: Cyberark Plugin Throws Wrong Errors
• Add GCP plugin group
• Azure plugin group
• Add Datadog Plugin Suite

Rundeck Open Source Product Updates

• Revert storage.gsp
• 4.12.0-rc2: disable defer for ui plugins
• Upgrade core libraries for CVE-2023-20861
• Add JSON Path Option to Remote URL Option Input
• Set Cookie SemeSite Flag To Strict
• Fix: ERROR while running a dir command in a path with Japanese files (Upgrade plugin version)
• Invalidate user sessions upon password change/reset
• Update jquery to 3.6.4
• Fix: Job xml parsing not honoring job option list delimiter
• Fix plugin registry loading behavior
• xss activity component
• Improve Authentication Options for Remote URL Option Input
• Convert Key Storage to Vue
• Fix: Exec-Cleaner Delete Cluster Dead Member's Executions
• Add link to execution mode toggle page on passive mode display
• Fix: Cyberark Plugin Throws Wrong Errors
• Notifications fixes for Average Duration, OnRestart, etc.

Here is a link to the full list of public PRs

Community Contributors

• Jobin Joseph (nixjobin)

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Eric He (ehe-pd)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Miguel Ramos (mishingo)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Stephen Joyner (sjrd218)
• Jeremy Olexa (jolexa)

• Download the Releases
• Sign up for Release Notes
• Upgrade instructions
• Watch the Live Stream Release Recap

::: Additionally, we are announcing some exciting product updates this month. Sign up for the launch webinar to learn more. :::

Overview

Check out the new features and enhancements for PagerDuty Runbook Automation, and Rundeck Community included in this release. With the release of PagerDuty Runbook Automation 4.11.0 we are introducing a new architecture for orchestrating workflows across cloud and hybrid environments through the Enterprise Runners. In addition, this release includes two new Plugin Suites to simplify configuration of plugins and the release of an official Docker image for the Runner.

Highlights

The new architecture for Runners offers flexibility to create powerful and resilient cross-environment jobs. The new architecture separates workflow orchestration from task execution. It offers next- generation remote Runners that are now packaged with common plugins such as Ansible, Docker, and Kubernetes that execute locally within the private network. The new architecture now allows job authors to develop automated jobs that incorporate multiple environments, and job authors have the flexibility to specify where and how Runners participate in executing distributed job steps.

This release includes new Plugin Suites for ServiceNow and Jira. As a reminder, Plugin Suites streamline the configuration of plugins. Now users can update plugin configurations from a single location (previously this had to be done in multiple locations). In addition, this release includes an official container image for the Runner.

• The new ServiceNow Plugin Suite has a Node Source and many job steps to help pull in nodes from your CMDB and execute automation back into tables within ServiceNow. The ServiceNow Plugin Suite can be configured on a per-project basis or for the entire system. Learn more.

• Jira plugins, which support Jira Server and Jira Cloud, have also been added to the Plugin Suite configuration model. Now Jira plugins can be configured in the GUI at the project or System level and applied across different plugin types. To get started with the Jira Suite, click here.

• An official Docker container image for the Runner has been published and is available from Dockerhub. The Runner allows users to execute commands, scripts and Job steps within their remote environments using a secure (outbound-only HTTPS) architecture. With a container-version of the Runner, users can more easily deploy, maintain and scale their Runners - as well as deploy them into their containerized environments for more native automation. Learn more.

Additional Updates

• Upgrade commons-fileupload to address CVE-2023-24998
• Status Symbol is not required on Progress Badge. Fixes issues with migration from previous versions.
• Bundle Kubernetes and Docker plugins into Enterprise Build
• Fix: Improve Error Output for Update Escalation PD Step
• EC2 Health Check now included in AWS Plugin Group
• Add ServiceNow Plugin Suite
• Fix: Cyberark Keys to Key Provider Path
• Add Jira Plugin Suite
• Add Note to ServiceNow workflow/notification plugin steps
• Fix: Autotakeover not working when restarting with new uuids

Rundeck Open Source Product Updates

• Fix: Issue with SSHJ Plugin where output would be on the wrong steps.
• Fix: Webhooks not showing proper information After Create
• Fix: ExecutionLifecycle component is not loaded when a job is imported
• Upgrade commons-fileupload to address CVE-2023-24998
• Add a defaultEnabled flag in feature service
• Establish new section in execution head page for feature use.
• No Message On GUI For Scheduled Job On Unhealthy Runner
• Change FeatureService to use an interface instead of the Features enum
• Fix: Now allowed more than 100 users When using Active Directory
• Fix error handling on job component failure
• Update chromedriver to 109
• Update error message for runner not found
• Consolidate UI Build using UI-Trellis
• Add Job Export in JSON format
• Cleanup: Remove unnecessary OpenAPI flags
• Allow hot reload of SSO settings

Here is a link to the full list of public PRs

Community Contributors

• David Darby (ddarby-hike)
• David Garces (jgarces-pd)
• Oswaldo Peralta (runwaldo)

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Eric He (ehe-pd)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Miguel Ramos (mishingo)
• Osman Albarran (Oalbarran94)
• Peco Karayanev (bproverb)
• Rodrigo Navarro (ronaveva)
• Stephen Joyner (sjrd218)

• Download the Releases
• Sign up for Release Notes
• Upgrade instructions
• Watch the Live Stream Release Recap

Enterprise Update

• Fixed an issue in 4.10.0 and 4.10.1 which prevented users from properly resetting their passwords on initial login.

Note: This only affects the Enterprise/Commercial version of the product. Open Source versions are not affected but new versions are still released as part of the build cycle.

Staff Contributors

• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Eric He (ehe-pd)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jason Qualman (qualman)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Miguel Ramos (mishingo)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Stephen Joyner (sjrd218)

• Download the Releases
• Sign up for Release Notes
• Upgrade instructions
• Watch the Live Stream Release Recap

Overview

This is a minor release that addresses some bugs and CVEs.

Highlights:

• We fixed an issue in 4.10.0 which prevented jobs from correctly dispatching to a configured project Runner.
• Additionally we updated some dependency packages in the Runner software to address findings by some security scans. The following CVEs are fixed with the Runner version in this release: CVE-2022-42004, CVE-2022-42003, and CVE-2022-41881. In certain environments CVE-2022-45198 and CVE-2022-45199 may be found. These are false positives and the package is not used in the Enterprise Runner software.
• This release also fixes an issue where Results Data and ROI Metric data were not showing properly in the Output logs.

Rundeck Open Source Product Updates

• Fix execution page UI plugins: Send event to indicate page loaded has completed

Here is a link to the full list of public PRs

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Eric He (ehe-pd)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jason Qualman (qualman)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Miguel Ramos (mishingo)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Stephen Joyner (sjrd218)

• Download the Releases
• Sign up for Release Notes
• Upgrade instructions
• Watch the Live Stream Release Recap

Overview

Check out the new features and enhancements for PagerDuty Runbook Automation, and Rundeck Community included in this release. This release includes enhancements to our AWS plugins.

Runbook Automation Updates

Highlights

Enhanced AWS Plugin Suite Configuration: We have simplified how users can authenticate and set up the integration with their AWS account by utilizing the new configuration mechanism launched in 4.9.0. Previously, users had to configure their AWS credentials in multiple places within the product - such as for the AWS Job Steps, the EC2 Node Source, SSM Node Executor, and ECS Node Executor. Now, users can define their AWS credentials in a single place - either at a Project or System level - and use all of the AWS plugins instantly.

This new enhanced configuration method also removes the need to define AWS credentials in the project-properties configuration file. Users can access an easy-to-use graphical user interface for defining the requisite properties for the integration, which simplifies the setup for new users and configuring new Projects. Click here to see the full documentation.

Additional Updates

Also includes all Open Source updates from below

• Improve No Runner Found error messages
• Upgrade EC2 nodes plugin to support Region setting
• Add Note field to ServiceNow plugins
• Fix: Cannot edit rulesets if the page is too heavy
• No longer require Description in Jira Plugins
• Run-1270: Add Plugin Group support for AWS Suite of plugins

Rundeck Open Source Product Updates

• Fix: Cannot remove notifications from a job by loading an XML file
• update ansible plugin to version 3.2.3
• Fix: User profile flash spacing
• Fix: Cannot update jobs after upgrading from 3.3 to 4.8 job (error 500)
• Implementing a component to display runner info in execution page
• Fix: Cannot Add Node Wizard Sources
• Fix: upgrade pywinrm dependancy for shift_jis encoding issue
• Change jaas-loginmodule remco template to be able to use ReloadablePropertyFileLoginModule
• Add UiSocket support for execution log
• Fix: Cannot Edit Job Schedules when Description is set.
• Add a new ExecutionLifecicleComponent
• Fix class name inconsistency in projectHome.gsp
• Update add plugin button label
• Fix: Cannot edit rulesets if the page is too heavy
• Fix "Save node filter" js console error
• Fixes Fix the Http Header Injection Vulnerability
• Fix: edit/view jobs when SCM Import Plugin is forbidden for user
• Fix: deb install using wrong base dir for commands
• Fix: groovy plugins with suffix matching the service should load correctly
• Generate copyright year at build time
• Change jaas-loginmodule remco template to be able to use ReloadablePropertyFileLoginModule
• Fix: Notifications payload format are not imported properly by the API and the UI
• Fix: passing groups via proxy for preauth shows dupe groups in the Rundeck Profile

Here is a link to the full list of public PRs

Community Contributors

• Leandro Marques (leandromqrs)
• KimDongMin (haracejacob)
• (sokato-mdsol)
• Jim Yanko (jyanko)

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Eric He (ehe-pd)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jason Qualman (qualman)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Miguel Ramos (mishingo)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Stephen Joyner (sjrd218)

• Download the Releases
• Sign up for Release Notes
• Upgrade instructions
• Watch the Live Stream Release Recap

Overview

Check out the new features and enhancements for PagerDuty Runbook Automation, and Rundeck Community included in this release. This release introduces the beta for Plugin Suite Configuration, which simplifies the configuration of plugins.

Highlights

• Plugin Suite Configuration: We’ve simplified the configuration of plugins so users can build more automation faster. PagerDuty Runbook Automation now provides an easier interface for users to define plugin properties and reduce the number of times a user needs to define common properties across plugins. Now users have a graphical interface for configuring plugin properties at the project and system level using predefined sets of properties on a per plugin suite basis. In version 4.9.0, users can access our first predefined plugin-suite setting for the PagerDuty plugin suite and future releases will include Plugin Groups for our other plugin suites - such as Jira, ServiceNow, and AWS.
  Click here to read the full documentation.

• This release also includes a number of backend enhancements that will lend themselves to major releases in the coming months. Stay tuned for announcements regarding major updates to our Runner.

Additional Updates

• Fix: Hashicorp Vault Issue - Cannot navigate through key storage when using approles
• Fix: Issue with Healthcheck setting values to unknown when cache is cleaned
• Add 30 Day User Count to System Report
• Upgrade to jQuery 3.6.1

Rundeck Open Source Product Updates

• Fix: Job activity tab not loading
• Package Upgrades for CVE-2022-41881
• Fix: Project Picker not loading when Projects with special characters exist
• Fix: Error choosing runner on execution runtime
• Fix: Duplicated fields on Notification settings modal
• Upgrade SSHJ Plugin version which includes enchancements and fixes
• Add secrets support for script based plugins
• Fix Missing Execution Clean History Form Display
• Job Runner Run page GUI
• Updates to address CVE-2022-31690, CVE-2022-22978, CVE-2022-31692
• Fix:Ruleset Plugin fails to evaluate conditions if negative number are used
• Overflow Scrollbars on Login Page Removal
• Fix: Dynamic max nodes shown in rundeck GUI
• Fix: Key-Value data log filter unable to capture empty values
• Fix: Invalid property name causing errors when changing project settings
• Refactor Project to Pass through Data Provider
• Fix: Incorrect 404 page response for job edit/update page
• Enabled feature query API endpoint
• Upgrade Moment to 2.29.4
• Upgrade to jQuery 3.6.1
• Job Lifecycle Components
• Runner Node Executor enhancement
• Update French Translation Typo

Here is a link to the full list of public PRs

Ansible Plugin Updates

Community Contributors

• Patrice Duroux (peutch)
• Sota Kato (tokagerous)

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Daniel Da Silva (dldrk)
• Darwis Narvaez (DarwisNarvaezDev)
• Eric He (ehe-pd)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jason Qualman (qualman)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Miguel Ramos (mishingo)
• Nathan Fluegel (wayfaringson
• Néstor Fuenzalida (nestorfm)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Stephen Joyner (sjrd218)

Incubating: This feature or API is new! We may still have a few bugs or change some functionality in the future.

ROI Metrics Data stores arbitrary key value pairs against your job to help understand your ROI per job execution. The metrics will be stored against the execution of the job, and accessible via API for further analysis. This article will walk through a setup scenario and provide some helpful example scripts to gather data from the API.

Configuring the Metrics

Example Scenario:

Customer X has decided to track how much time is saved with their newly implemented Automation job (uniquely titled ROI Job). They know from historical ticket-data that doing the same work manually - prior to writing this job - took around 75 minutes across all teams, start to finish. The job now runs in just seconds. To configure the job follow the steps or download the job definition.

Gathering Data

This section assumes familiarity with fundamental Rundeck operations like Creating User API Tokens, editing/importing jobs, etc.

• Download the Releases
• Sign up for Release Notes
• Upgrade instructions
• Watch the Live Stream Release Recap

Overview

Check out the new features and enhancements for PagerDuty Runbook Automation, and Rundeck Community included in this release. This release includes a new plugin that shows queries status pages from cloud providers and SaaS tools to help users quickly understand if a performance degradation is due to a third party and a number of security and compliance updates and bug fixes.

Highlights

RSS Feed Plugin - Our new RSS Feed Plugin helps users quickly understand whether an incident is due to an internal issue or a third-party. The RSS Feed Plugin allows users to query and parse RSS feeds for events from SaaS tools and public cloud providers. For users deploying the Automated-Diagnostics Solution, this plugin provides a logical first step for implementation.

Job Resume now works with Parallel/Ruleset strategies - It's now possible to execute previously failed step(s) with the same inputs on Parallel and Ruleset execution strategies. When enabled on a Job, the plugin will record the internal Workflow State as the Execution progresses. When one or more steps fail, the Workflow State prior to executing the failed step(s) is recorded and stored and can be restarted if needed. Check out all the details here.

Patched CVE-2022-42889 - A recent security announcement was released for Apache’s common-text library. Rundeck and Runbook Automation products were not using the library in a vulnerable way, but we still went ahead and made updates to the patched versions to reduce false positives for customers that might be scanning for vulnerabilities.

Process/Runbook Automation Updates

• The ServiceNow Application is now certified for the Tokyo Release.
• HTTP Job Step now allows printing of status/response codes to log output.
• Fix: ECS/ELB output now clearly shows zero values
• Update base Ubuntu packages on docker build
• Fix: ROI Metrics Output inconsistent with multiple jobs running
• Fix: Result data plugin may not work with simultaneous jobs
• Fix: Execution history cleaner not working if member UUID changes
• Fix: app start fails when disabling calendars and project schedules
• Implement RSS Feeds Plugin
• Update Job Resume to work with Parallel/Ruleset strategies
• Enh: Upgrade Azure Node Source to allow getting resources from selected resource groups
• FIX: AWS EC2 Node Source Plugin now works with Service Accounts

Rundeck Open Source Product Updates

• Fix: CVE-2022-3515:Update for Docker Base Ubuntu Image (libksba8 to 1.3.5-2ubuntu0.20.04.1)
• Include new version of py-winrm plugin 2.1.0 in buld
• Fix: CVE-2022-42004, CVE-2022-42003 update Rundeck (jackson-databind upgraded to 2.13.4.2)
• Fix: Jobs tags are now included when exporting yaml file with rd-cli
• Fix: Proper Inline Icon rendering within Dropdowns
• Fix: CVE-2022-42889 for Rundeck (remove commons-text dependency)
• Fix: Activity Tab no progress percentage displayed in a Progress-bar
• Allow form data to be sent to Webhooks
• Fix: Improve rendering in Job select-all option
• Fix: Custom Replacement in Key-Value Log Filter Plugin
• Fix: Log error when SCM tries to reconnect
• Fix: Long node names overlapping each other in matched nodes list
• Fix: Execution history cleaner not working if member UUID changes
• Fix: Text overflow on the webhook handler plugin list
• Fix: MOTD (Message of the day) not displayed (Rundeck OSS)
• Fix: allowing user to see logs after the job is deleted
• Add note about new example plugins repo
• Fix: Include auto-complete for job context variables in notifications
• Sec: Change session id after login to avoid fixation attacks

Here is a link to the full list of public PRs

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Eric He (ehe-pd)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jason Qualman (qualman)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Miguel Ramos (mishingo)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Stephen Joyner (sjrd218)

• Download the Releases
• Sign up for Release Notes
• Upgrade instructions
• Watch the Live Stream Release Recap

Overview

Check out the new features and enhancements for PagerDuty Runbook Automation, and Rundeck Community included in this release. This release includes a new plugin for CloudWatch that simplifies the management of diagnostics queries, an incubating feature that helps users understand the return on investment (ROI) of jobs, and a number of security and compliance updates and bug fixes.

Runbook Automation Updates

Also includes all Open Source updates from below

Highlights

ROI Metrics Data (incubating) - Runbook Automation provides value with each workflow execution. Users report saving time, money, and often a combination of both. Now, Runbook Automation users have a way to track time and money saved, as well as begin to see insights into the effectiveness of teams and projects.

The ROI Metrics integration tracks user-defined value of each job execution and stores key value pairs against jobs to help you understand the ROI per job execution. The metrics accessible via API for further analysis. Find out more here.

CloudWatch Logs Saved Query plugin - This new plugin can help users improve incident response and streamline reporting. Amazon customers often save queries for CloudWatch Logs Insights for common reporting and investigation tasks. Now, Runbook Automation customers can use this plugin to execute saved queries as Job steps within their automated runbooks. This allows domain-experts to delegate queries to others as self-service. For incident response, this plugin also helps automate diagnostics by giving responders the ability to pull logs into a PagerDuty incident without escalating to experts. Full details and documentation for the new plugin can be found here.

Enhanced Progress Badge Plugin - The Progress Badge plugin can create graphic badges that render on the Log Output tab. Now, the enhanced Progress Badge allows users to present simplified log-output text to other job-steps and provides the option to include emoticon status-symbols. For users implementing Automated Diagnostics, this gives domain-experts the ability to simplify diagnostics in an easier to consume way. Find the full documentation for the enhanced plugin here.

Additional Updates

• Cleanup/fix some restart flags on System Configuration entries.
• Fix: PagerDuty notifications fail if the Summary field contains unknown variables
• Fix: Unexpected FailureReason string causes node execution to result in success
• Fix: JIRA Notification Plugin Shows password in plain text
• Fix: Runner in-product downloads erroring on windows

Rundeck Open Source Product Updates

• Improvements on job file option input sanitation
• Adding job start failure JMX metric.
• Fix: Minor GUI Bug on Webhook Plugin dropdown
• Fix: Project menu dropdown 'Create project' breaks with an app context path
• Fix: Improved error handling on importing a Project with missing plugins
• Fix: Removed the hardcoded 'Documentation' string in the 'get help' URL in the footer
• Fix: UI update to prevent the login box from being obscured by large images
• Fix: Added regex validation to LogFilter 'Key Value Data' capture

Here is a link to the full list of public PRs

Community Contributors

• Reiner (MegaDrive68k)
• Lucas Canavosio (lcanavosio)
• JP Lassnibatt (jplassnibatt)

Staff Contributors

• Greg Schueler (gschueler)
• Alberto Hormazabal Cespedes (ahormazabal)
• Alexander Abarca (alexander-variacode)
• Antony Velasquez Ruiz (avelasquezr)
• Carlos Eduardo (carlosrfranco)
• Christopher McCarroll-Gilbert (chrismcg14)
• Darwis Narvaez (DarwisNarvaezDev)
• Eric He (ehe-pd)
• Forrest Evans (fdevans)
• Imad Jafir (imad6639)
• Jake Cohen (jsboak)
• Jason Brooks (jbrookspd)
• Jason Qualman (qualman)
• Jesus Osuna (Jesus-Osuna-M)
• Leonel Juarez (L2JE)
• Luis Toledo (ltamaster)
• Miguel Ramos (mishingo)
• Osman Albarran (Oalbarran94)
• Rodrigo Navarro (ronaveva)
• Stephen Joyner (sjrd218)

Automated diagnostics is a solution provided by integrating PagerDuty's Incident Response and Runbook Automation products. By automating the retrieval of “diagnostic” data during incidents, you can shorten the length of incidents, reduce the number of individuals paged to help with resolution, and gather evidence for fixing the root-cause after the incident.

Use Cases

There are multiple use-cases and benefits to the Automated Diagnostics solution. Here are a few of the most common examples:

• Improve Triage: surfacing diagnostic data can improve the time spent troubleshooting and the number of people pulled into incidents.
• Capture Environment State: by capturing the environment or application "state" during an incident, operations engineers and developers have evidence to help them fix code-level bugs and configuration errors - perhaps a while after the incident has been resolved.
• Realtime Updates: by querying backend services in realtime, an Incident Commander can more easily provide updates to stakeholders during an incident.

For more details on these use-cases, see this section of the solution-guide.

Prebuilt Automation

PagerDuty provides a solution that helps users start automating diagnostics quickly. This Solution consists of prebuilt Automation Jobs that retrieve data from common infrastructure and services for investigating, debugging and diagnosing incidents:

As an example, if an incident is triggered for a service running in Kubernetes, PagerDuty Runbook Automation can retrieve information from logs, API’s, databases and other sources that support this service. This could be triggered with the click of a button or through event-driven invocation.

Simplifying and Sharing Diagnostics

Diagnostics retrieved using Runbook Automation can be made available in multiple interfaces such as PagerDuty's Mobil App, Slack, and Microsoft Teams:

Examples & Templates

This guide includes a full section on Examples & Best Practices - a preview of that is shown here:

| Examples | |

What does Rundeck do for Ansible users? Rundeck gives them a great GUI front-end experience and ties together their Ansible automation alongside different tools used by other groups. Rundeck's powerful access control capabilities can be used to safely provide other users and teams with self-service access to run automation (including Ansible playbooks) https://docs.ansible.com/ansible/latest/user_guide/playbooks.html.

What is Ansible?

Ansible is an automation solution developed by RedHat Inc, that handles configuration management, application deployment, cloud provisioning, ad-hoc task execution, network automation, and multi-node orchestration.

The Ansible basic configuration is extremely easy. Ansible just needs two files to work: the configuration file (ansible.cfg, usually at /etc/ansible path) and the inventory file (where Ansible stores their remote nodes in this format, usually at /etc/ansible path too).

Ansible uses playbooks (essentially a defined blueprint for automation tasks), to manage configurations and deployments to remote machines.

The full Ansible documentation is available here https://docs.ansible.com/.

How to Integrate Ansible with Rundeck

Note: This How To assumes readers are very familiar with Rundeck. It is suggested to review and fully understand the Tutorial Exercises prior to attempting these steps.

Both Rundeck versions (Community and Enterprise) use a built-in plugin for Ansible integrations. This plugin imports hosts from Ansible's inventory. It includes a bunch of facts and can run modules and playbooks. There is also a node executor and file copier for the project.

This integration enables Rundeck users to:

• Call Ansible playbooks and modules from Rundeck. Rundeck returns output from Ansible's command line, however in an easier to consume format within Rundeck’s GUI and users can utilize the Rundeck API and access control features.
• Use Ansible as the underlying execution framework. Run any command or script and output will be collated by node and step like typical Rundeck output.

Pre-Requisites

• Rundeck installed with version 5.20.0
• Ansible binaries installed on Rundeck Server based on Ansible documentation.
• Confirmation that Rundeck can SSH as rundeck user to the Ansible endpoints defined in the inventory file.

Note: It is possible to use the Welcome Project environment with the Project File in the Additional Information section at the bottom of this page.

Ansible Configuration

Ansible needs two basic files to work, ansible.cfg (where Ansible configurations are located) and hosts (inventory).

In this guide we use three nodes defined as the Ansible inventory file: (Note-Your file will be different)

[ssh_farm]
192.168.33.20
192.168.33.21
192.168.33.22

Rundeck/Ansible Integration

1. To run commands via the "Commands" menu or the default "Command" node step in a Rundeck job, we can configure a project with the Ansible node executor as a default. Create a new project, go to the Default Node Executor tab and select Ansible Ad-hoc Node Executor.
   
   
   
   
2. In the Ansible Node Executor configuration, set the Executable (usually /bin/bash) and define the Ansible config path (usually at /etc/ansible/ansible.cfg). Click on the Generate Inventory checkbox. Now scroll down and click on the Save button.
   
   
   
   The Rundeck-Ansible plugin uses the rundeck user as the default user to connect to the Ansible remote inventory nodes. At this point, it’s possible to define the SSH authentication method (privatekey and password) and the specific Ansible SSH user to connect to the remote inventory nodes. You need to define the username in the SSH User textbox. Depending on the auth method you can select the password from the storage path or the ssh key (also from the filesystem path).
   
   
   
   
3. Add the Ansible inventory nodes by clicking on Project Settings > Edit Nodes... and then on Add new Node Source +.
   
   
   
   
4. Choose Ansible Resource Model Source and define the Ansible inventory file path on your Rundeck Server (usually at /etc/ansible/hosts) and Ansible config path (usually at /etc/ansible/ansible.cfg).
   
   
   
   
   
   
   
   Similar to the node executor configuration, in the “SSH Connection” section it’s possible to define the Authentication method (privatekey or password-based). Depending on the Authentication method, enter the user, ssh password, or the key file path.
   
   
   
   
5. Now, scroll down and click on the Save button.
6. Click on the Nodes option in the left panel to see the nodes defined in the Ansible inventory.
   
   
   
   

Time for a quick test.

1. Go to the Commands option in the left panel in the Nodes section, select an Ansible node defined in your Ansible inventory, and run some command (in this example we used “ls -la”).
   
   
   
   
2. Now you can run any command/playbooks/inline-playbooks over your Ansible inventory.

First Inline-Playbook Inside a Rundeck Job

1. Create a new Job
2. Give it any name
3. In the Workflow tab select Ansible Playbook Inline Workflow Node Step
4. Put the following playbook:

   - name: test playbook
     hosts: all
     tasks:
       - shell: uname -a
         ignore_errors: yes
         register: uname_result
       - debug: msg="{{ uname_result.stdout }}"
   
5. Go to the Nodes tab in the Job Definition and type the name of an Ansible node as a Node Filter.
6. Save the Job
7. Run the job
   
   
   
   

To see the output you may need to switch to the Log Output view.

Inventory Yaml

When Gather Facts is false, the inventory file is read as Yaml data. This avoids connection validation, significantly saving time and reducing CPU and RAM usage.

• Data Size It supports up to 10MB of data by default, which supports around 19,000 nodes. However, it depends on the operating system.

This parameter can be increased if necessary in this field:

When the limit is exceeded it throws this error in rundeck.log file:

ResourceModelSourceException: Cannot load yaml data coming from Ansible: The incoming YAML document exceeds the limit: 10485760 code points.

• Max Aliases It supports up to 1000 of aliases by default. This is to avoid the application vulnerable to certain types of attacks.

This parameter can be increased if necessary in this field:

When the limit is exceeded it throws this error in rundeck.log file:

ResourceModelSourceException: Cannot load yaml data coming from Ansible: Number of aliases for non-scalar nodes exceeds the specified max=1000.

Additional Information

It is possible to use the Welcome Project environment with this Project File.

1. Create a new project called ansible (or another name if that one is taken)
2. Open the Ansible Project and use Project Settings > Import Archive to import the file.
3. Run the Install Ansible on Rundeck Server Job to install Ansible.

The other jobs have descriptions for what they do and are aligned with this tutorial.

Notes

It's advisable to segment extensive inventories into smaller groups or files containing approximately 1000 nodes each. Consequently, for every 1000 nodes, establish a dedicated source node for the respective group. The information described above is based on the recommendations described in the Ansible documentation. Ansible - Intro Inventory

Rundeck offers powerful Runbook Automation. Most Runbooks are complicated, multi-step processes.

This guide will show various examples of how to share data from one step to another through the use of Log Filters.

Note: If you haven't followed the Exercise Steps in the Tutorial we encourage starting with that walk-through.

Type of Variables

When a Job step is executed, it has a set of context variables that you can access in the Job step. There are several sets of context variables, including: the Job context job, the Node context node, the Option context option, and the Step Data Context data.

Click here for more documentation on: Job Variables Reference

Other Terminology

These are some key terms we'll be using throughout this tour in addition to terms used in our Terminology documentation.

Log Filters

Log Filters are applied to a Job step to act on the output from that step. Certain Job Filters can set variables based on information in the log output. There is a separate guide (coming soon) to cover different types of Log Filters and how they are used.

RegEx

Log Filters use Regular Expression syntax (RegEx) to collect information from the log output. Familiarity with Regex will be key to successfully gathering data from your own job steps. You will not need to know it for these Exercises.

Exercises Intro

As part of the Welcome Projects we have built some example jobs to highlight how variables can be passed from one job step to another. For more information about the Welcome Projects check out the Learning Overview.

It's important to note that Node Steps (which execute on each node) and Workflow Steps (which execute once on the Rundeck server) store variables differently. Node Steps capture data in Node Scope while Workflow Steps capture data in Global Scope. The examples will show how to use variables from different types of steps and highlight common trouble spots.

For a detailed explanation of step types and variable scoping, see Job Step Plugins - Understanding Step Types.

Using Input Option Variables

Input Option are values that are provided at the start of running a job. They may be represented as a form on the Job Execution page or populated by a Webhook or other call.

Using Step Data Variables

Step Data variables are data gathered using Log Filters and stored in memory while the job is running. (See the Log Filters How To for specifics on each type).

How Step Data variables are referenced in Jobs depend on a few things:

• The type of Job Step we are running (Node Step vs. Workflow Step)
• Whether the variable is being accessed from a Command Step or a Script

Job Step Types

There are two types of Job Steps (see Understanding Step Types for complete details):

• Node Steps: Execute once on each node that matches the job's node filter
• Workflow Steps: Execute exactly once per job invocation on the Rundeck server

This is important to keep in mind because when a job is run against more than one node, each Node Step creates a separate variable entry for each node it was run against.

Command Steps vs Scripts

Referencing variables from Command Steps use a different syntax than referencing them from within a Script. Most Job Steps are Command Steps and will follow a format of: ${data.MyKeyName}. Scripts will reference variables by enclosing them in @ symbols: @data.MyKeyName@

Node vs Workflow Steps (Multi-Node Example)

The Using Step Data Variables job in the previous section was configured to only execute against the Rundeck Server. To highlight the difference when running against multiple nodes, let's run the Multi-Node Example job and explore its output and configuration.

Note: It is recommended to configure multiple Nodes as detailed in the Getting Started Tutorial.

A common sticking point is when Workflow Steps need to use a variable value from a Node Step.

Accessing the variable from the node would need to be called using ${data.MyKeyName@hostname} to get the specific value. Note the @hostname portion of that string.

If your job is run against a single node it is also possible to use the * character ${data.MyKeyName*}. The * is used in Step 4 but as you can see in the output when used on jobs with multiple nodes the variables are joined with a comma ,. If you want to use a character other than ,, you can add it after the * like ${data.MyKeyName*;} which will separate all values with ;.

Using Other Context Variables

Using other Context variables follows the same format.

To see what variables might be available check out the list here: Job Variables Reference

To check variable values during your workflow use the Workflow Step titled Log Data Step.

Rundeck CLI (RD-CLI) is a Java client to access and interact with a Rundeck Instance from the command line. In a few words, Rundeck CLI is a Rundeck API abstraction tool. With Rundeck CLI is possible to view system information, list executions, list and manage jobs, manage keys, list and manage node source, projects, and jobs in the command line.

Installation

RD-CLI is available as a separate install from Rundeck Open Source/Enterprise for multiple platforms. There are options to install it using a specific repository or just download the .zip file, uncompress it, and execute the binary directly (inside the bin folder).

CentOS/Redhat based operating systems:

1. Add the repository with:

   curl https://raw.githubusercontent.com/rundeck/packaging/main/scripts/rpm-setup.sh 2> /dev/null | bash -s rundeck
   
2. Then install with the following command:

   yum install rundeck-cli
   
3. Test RD-CLI with the following command:

   rd
   

Debian/Ubuntu based operating systems

1. Add the repository with the following command:

   curl -s https://packagecloud.io/install/repositories/pagerduty/rundeck/script.deb.sh | os=any dist=any bash
   
2. Install with:

   apt-get install rundeck-cli
   
3. Test the installation with the following command:

   rd
   
   

Configuration

Rundeck CLI needs the Rundeck instance connection information and valid credentials (via user/password method or using a valid token), check here to know how to generate a valid user token on Rundeck.

Connection info env vars

RD-CLI needs the Rundeck instance address and port, for this, the RD_URL environment variable is needed, to save it in your environment just do:

export RD_URL=http://rundeck:4440

Also, it’s possible to define the specific API version in the following way:

export RD_URL=http://rundeck:4440/api/12

These env vars could be saved on .bashrc file directly or in ~/.rd/rd.conf config file (needs the following environment variable to get work: export RD_CONF=/path/to/rd.conf).

Using the User/password method

The following environment variables work to connect to the Rundeck instance via the user/password method.

export RD_USER=rundeck_user

export RD_PASSWORD=password

Using the Rundeck token method

The following environment variable it work to connect to the Rundeck instance via API token method, take a look at this to see how to create a new token in Rundeck.

export RD_TOKEN=rundeck_token

How to use the help on RD-CLI

This point is important because RD-CLI offers help for every option that includes. A good way to get help on any RD-CLI command is to put "help" after any action, for example, to get all options available to get jobs info just type:

rd jobs info help

That's applicable for any action. Another example, to see all system options available:

rd system help

Now you can see the available commands, so, if you need specific help for rd system info action, just do: rd system info help and now the command description is available.

First Steps with RD-CLI

1. See a complete Rundeck instance information rd system info
2. See a job information

   rd jobs info -v -i job_id
   
   Where -v is to increase the verbosity and -i is the parameter to define the job UUID.
3. Upload a job from a file (also updates a job with the same UUID).

   rd jobs load -f SpaceCat.yaml -F yaml -p ProjectEXAMPLE
   
   Where -f is the parameter to define the yaml job definition file, -F is the file format, and -p is the project name parameter.
4. See an execution info

   rd executions info -v -e 17
   
   Where -v is the parameter to increase the output verbosity, -i is the parameter to define the execution id and job_id is the job id.
5. Run a job

   rd run -v -i job_id
   
   Where -v is the parameter to increase the output verbosity, -i is the parameter to define the execution id and job_id is the job id.
6. Run a job with options

   rd run -v -i job_id -- -option_name option_value
   
   Where -v is the parameter to increase the output verbosity, -i is the parameter to define the execution id, job_id is the job id, -option_name is the job option name and option_value is the value of -option_name option.

Prerequisites / Background

• Need a GitHub account. Sign Up at this link: https://github.com/
• Understanding of Markdown Language. Learn more about it here: https://www.markdowntutorial.com/

The Rundeck documentation uses VuePress. Updates to the navigation menus may be necessary, but we ask that changes to the underlying VuePress be left to the Rundeck Team.

Quick Doc Fixes

For simple documentation fixes it’s possible to make the changes right in GitHub. Let’s get started with an example. For this example we have provided a page you are welcome to submit an update on at: https://docs.rundeck.com/docs/learning/howto/docs-update-exercise.html

1. Navigate to https://github.com/rundeck/docs/.
2. The content pages are in the /docs/ sub folder. The folder structure here will match what is shown in the URL of the page to be edited. (https://github.com/rundeck/docs/tree/3.4.x/docs)
3. Navigate to the page that needs to be updated by going to learning > howto and finding the docs-update-exercise.md file
4. Feel free to add/edit content below the specified heading by clicking on the pencil icon on the GitHub page.
5. Add content below where it reads “Edits welcome below this section” then fill out the Propose Changes section with a Subject Line and details explaining the update.
6. This form will commit the change and provide a comparison view. Click on Create Pull Request to finalize and send to the Rundeck team for approval.
7. Confirm the details in the Pull Request submission and click Create Pull Request.

Congratulations! Keep an eye out for comments/feedback via the comments section from our team.

Sharing bigger content updates

The steps above work great for small/simple changes. The Rundeck Docs is a public repository. If you are familiar with git commands and want to clone the repository and manage/push your own updates please feel free to do so.

Tips

• Images are stored in the /docs/assets/img folder. There is an example image call in the sample page. It is recommended to name the image in a way that ties it to the page/section it is used in. For example howto-example-joke.png. Be mindful of file sizes when creating images.
• Screenshots should be done in the most current version of Rundeck available. Easiest way to get those is by using the Welcome Projects.
• Look at the markdown code on other pages for examples on how to incorporate tabs, and other Vue specific items.

Looking for content ideas to contribute? Check out https://github.com/rundeck/docs/issues for items that might need fixing.