Skip to content
Ona Docs

Runners

CheckAuthenticationForHost
client.runners.checkAuthenticationForHost(RunnerCheckAuthenticationForHostParams { host, runnerId } body, RequestOptionsoptions?): RunnerCheckAuthenticationForHostResponse { authenticated, authenticationUrl, patSupported, 4 more }
POST/gitpod.v1.RunnerService/CheckAuthenticationForHost
CheckRepositoryAccess
client.runners.checkRepositoryAccess(RunnerCheckRepositoryAccessParams { repositoryUrl, runnerId } body, RequestOptionsoptions?): RunnerCheckRepositoryAccessResponse { errorMessage, hasAccess }
POST/gitpod.v1.RunnerService/CheckRepositoryAccess
CreateRunner
client.runners.create(RunnerCreateParams { kind, name, provider, 2 more } body, RequestOptionsoptions?): RunnerCreateResponse { runner, accessToken, exchangeToken }
POST/gitpod.v1.RunnerService/CreateRunner
CreateRunnerLogsToken
client.runners.createLogsToken(RunnerCreateLogsTokenParams { runnerId } body, RequestOptionsoptions?): RunnerCreateLogsTokenResponse { accessToken }
POST/gitpod.v1.RunnerService/CreateRunnerLogsToken
CreateRunnerToken
client.runners.createRunnerToken(RunnerCreateRunnerTokenParams { runnerId } body, RequestOptionsoptions?): RunnerCreateRunnerTokenResponse { accessToken, exchangeToken }
POST/gitpod.v1.RunnerService/CreateRunnerToken
DeleteRunner
client.runners.delete(RunnerDeleteParams { force, runnerId } body, RequestOptionsoptions?): RunnerDeleteResponse
POST/gitpod.v1.RunnerService/DeleteRunner
ListRunners
client.runners.list(RunnerListParams { token, pageSize, filter, pagination } params, RequestOptionsoptions?): RunnersPage<Runner { createdAt, creator, kind, 7 more } >
POST/gitpod.v1.RunnerService/ListRunners
ListSCMOrganizations
client.runners.listScmOrganizations(RunnerListScmOrganizationsParams { token, pageSize, runnerId, scmHost } params, RequestOptionsoptions?): RunnerListScmOrganizationsResponse { organizations }
POST/gitpod.v1.RunnerService/ListSCMOrganizations
ParseContextURL
client.runners.parseContextURL(RunnerParseContextURLParams { contextUrl, runnerId } body, RequestOptionsoptions?): RunnerParseContextURLResponse { git, issue, originalContextUrl, 4 more }
POST/gitpod.v1.RunnerService/ParseContextURL
GetRunner
client.runners.retrieve(RunnerRetrieveParams { runnerId } body, RequestOptionsoptions?): RunnerRetrieveResponse { runner }
POST/gitpod.v1.RunnerService/GetRunner
SearchRepositories
client.runners.searchRepositories(RunnerSearchRepositoriesParams { limit, pagination, runnerId, 3 more } body, RequestOptionsoptions?): RunnerSearchRepositoriesResponse { lastPage, pagination, repositories }
POST/gitpod.v1.RunnerService/SearchRepositories
UpdateRunner
client.runners.update(RunnerUpdateParams { name, runnerId, spec } body, RequestOptionsoptions?): RunnerUpdateResponse
POST/gitpod.v1.RunnerService/UpdateRunner
ModelsExpand Collapse
GatewayInfo { gateway, latency }
gateway?: Gateway { name, url, region }

Gateway represents a system gateway that provides access to services

name: string

name is the human-readable name of the gateway. name is unique across all gateways.

url: string

url of the gateway

region?: string

region is the geographical region where the gateway is located

latency?: string

latency is the round-trip time of the runner to the gateway in milliseconds.

formatregex
LogLevel = "LOG_LEVEL_UNSPECIFIED" | "LOG_LEVEL_DEBUG" | "LOG_LEVEL_INFO" | 2 more
One of the following:
"LOG_LEVEL_UNSPECIFIED"
"LOG_LEVEL_DEBUG"
"LOG_LEVEL_INFO"
"LOG_LEVEL_WARN"
"LOG_LEVEL_ERROR"
MetricsConfiguration { enabled, managedMetricsEnabled, password, 2 more }
enabled?: boolean

enabled indicates whether the runner should collect metrics

managedMetricsEnabled?: boolean

When true, the runner pushes metrics to the management plane via ReportRunnerMetrics instead of directly to the remote_write endpoint.

password?: string

password is the password to use for the metrics collector

url?: string

url is the URL of the metrics collector

username?: string

username is the username to use for the metrics collector

Runner { createdAt, creator, kind, 7 more }
createdAt?: string

Time when the Runner was created.

formatdate-time
creator?: Subject { id, principal }

creator is the identity of the creator of the environment

id?: string

id is the UUID of the subject

formatuuid
principal?: Principal

Principal is the principal of the subject

One of the following:
"PRINCIPAL_UNSPECIFIED"
"PRINCIPAL_ACCOUNT"
"PRINCIPAL_USER"
"PRINCIPAL_RUNNER"
"PRINCIPAL_ENVIRONMENT"
"PRINCIPAL_SERVICE_ACCOUNT"
"PRINCIPAL_RUNNER_MANAGER"
kind?: RunnerKind

The runner’s kind

One of the following:
"RUNNER_KIND_UNSPECIFIED"
"RUNNER_KIND_LOCAL"
"RUNNER_KIND_REMOTE"
"RUNNER_KIND_LOCAL_CONFIGURATION"
name?: string

The runner’s name which is shown to users

provider?: RunnerProvider

The runner’s provider

One of the following:
"RUNNER_PROVIDER_UNSPECIFIED"
"RUNNER_PROVIDER_AWS_EC2"
"RUNNER_PROVIDER_LINUX_HOST"
"RUNNER_PROVIDER_DESKTOP_MAC"
"RUNNER_PROVIDER_MANAGED"
"RUNNER_PROVIDER_GCP"
"RUNNER_PROVIDER_DEV_AGENT"
runnerId?: string
runnerManagerId?: string

The runner manager id specifies the runner manager for the managed runner. This field is only set for managed runners.

formatuuid
spec?: RunnerSpec { configuration, desiredPhase, variant }

The runner’s specification

configuration?: RunnerConfiguration { autoUpdate, devcontainerImageCacheEnabled, logLevel, 4 more }

The runner’s configuration

autoUpdate?: boolean

auto_update indicates whether the runner should automatically update itself.

devcontainerImageCacheEnabled?: boolean

devcontainer_image_cache_enabled controls whether the devcontainer build cache is enabled for this runner. Only takes effect on supported runners, currently only AWS EC2 and Gitpod-managed runners.

logLevel?: LogLevel

log_level is the log level for the runner

One of the following:
"LOG_LEVEL_UNSPECIFIED"
"LOG_LEVEL_DEBUG"
"LOG_LEVEL_INFO"
"LOG_LEVEL_WARN"
"LOG_LEVEL_ERROR"
metrics?: MetricsConfiguration { enabled, managedMetricsEnabled, password, 2 more }

metrics contains configuration for the runner’s metrics collection

enabled?: boolean

enabled indicates whether the runner should collect metrics

managedMetricsEnabled?: boolean

When true, the runner pushes metrics to the management plane via ReportRunnerMetrics instead of directly to the remote_write endpoint.

password?: string

password is the password to use for the metrics collector

url?: string

url is the URL of the metrics collector

username?: string

username is the username to use for the metrics collector

region?: string

Region to deploy the runner in, if applicable. This is mainly used for remote runners, and is only a hint. The runner may be deployed in a different region. See the runner’s status for the actual region.

releaseChannel?: RunnerReleaseChannel

The release channel the runner is on

One of the following:
"RUNNER_RELEASE_CHANNEL_UNSPECIFIED"
"RUNNER_RELEASE_CHANNEL_STABLE"
"RUNNER_RELEASE_CHANNEL_LATEST"
updateWindow?: UpdateWindow { endHour, startHour }

update_window defines the daily time window (UTC) during which auto-updates are allowed. If not set, updates are allowed at any time.

endHour?: number | null

end_hour is the end of the update window as a UTC hour (0-23). If not set, defaults to start_hour + 2.

startHour?: number | null

start_hour is the beginning of the update window as a UTC hour (0-23). +required

desiredPhase?: RunnerPhase

RunnerPhase represents the phase a runner is in

One of the following:
"RUNNER_PHASE_UNSPECIFIED"
"RUNNER_PHASE_CREATED"
"RUNNER_PHASE_INACTIVE"
"RUNNER_PHASE_ACTIVE"
"RUNNER_PHASE_DELETING"
"RUNNER_PHASE_DELETED"
"RUNNER_PHASE_DEGRADED"
variant?: RunnerVariant

The runner’s variant

One of the following:
"RUNNER_VARIANT_UNSPECIFIED"
"RUNNER_VARIANT_STANDARD"
"RUNNER_VARIANT_ENTERPRISE"
status?: RunnerStatus { additionalInfo, capabilities, gatewayInfo, 10 more }

The runner’s status

additionalInfo?: Array<FieldValue { key, value } >

additional_info contains additional information about the runner, e.g. a CloudFormation stack URL.

key?: string
value?: string
capabilities?: Array<RunnerCapability>

capabilities is a list of capabilities the runner supports.

One of the following:
"RUNNER_CAPABILITY_UNSPECIFIED"
"RUNNER_CAPABILITY_FETCH_LOCAL_SCM_INTEGRATIONS"
"RUNNER_CAPABILITY_SECRET_CONTAINER_REGISTRY"
"RUNNER_CAPABILITY_AGENT_EXECUTION"
"RUNNER_CAPABILITY_ALLOW_ENV_TOKEN_POPULATION"
"RUNNER_CAPABILITY_DEFAULT_DEV_CONTAINER_IMAGE"
"RUNNER_CAPABILITY_ENVIRONMENT_SNAPSHOT"
"RUNNER_CAPABILITY_PREBUILDS_BEFORE_SNAPSHOT_TRIGGER"
"RUNNER_CAPABILITY_LIST_SCM_ORGANIZATIONS"
"RUNNER_CAPABILITY_CHECK_REPOSITORY_ACCESS"
"RUNNER_CAPABILITY_RUNNER_SIDE_AGENT"
"RUNNER_CAPABILITY_WARM_POOL"
"RUNNER_CAPABILITY_ASG_WARM_POOL"
"RUNNER_CAPABILITY_PORT_AUTHENTICATION"
gatewayInfo?: GatewayInfo { gateway, latency }

gateway_info is information about the gateway to which the runner is connected.

gateway?: Gateway { name, url, region }

Gateway represents a system gateway that provides access to services

name: string

name is the human-readable name of the gateway. name is unique across all gateways.

url: string

url of the gateway

region?: string

region is the geographical region where the gateway is located

latency?: string

latency is the round-trip time of the runner to the gateway in milliseconds.

formatregex
llmUrl?: string

llm_url is the URL of the LLM service to which the runner is connected.

logUrl?: string
message?: string

The runner’s reported message which is shown to users. This message adds more context to the runner’s phase.

phase?: RunnerPhase

The runner’s reported phase

One of the following:
"RUNNER_PHASE_UNSPECIFIED"
"RUNNER_PHASE_CREATED"
"RUNNER_PHASE_INACTIVE"
"RUNNER_PHASE_ACTIVE"
"RUNNER_PHASE_DELETING"
"RUNNER_PHASE_DELETED"
"RUNNER_PHASE_DEGRADED"
publicKey?: string

public_key is the runner’s public key used for encryption (32 bytes)

formatbyte
maxLength32
minLength32
region?: string

region is the region the runner is running in, if applicable.

supportBundleUrl?: string

support_bundle_url is the URL at which the runner support bundle can be accessed. This URL provides access to pprof profiles and other debug information. Only available for standalone runners.

systemDetails?: string
updatedAt?: string

Time when the status was last updated.

formatdate-time
version?: string
updatedAt?: string

Time when the Runner was last udpated.

formatdate-time
RunnerCapability = "RUNNER_CAPABILITY_UNSPECIFIED" | "RUNNER_CAPABILITY_FETCH_LOCAL_SCM_INTEGRATIONS" | "RUNNER_CAPABILITY_SECRET_CONTAINER_REGISTRY" | 11 more
One of the following:
"RUNNER_CAPABILITY_UNSPECIFIED"
"RUNNER_CAPABILITY_FETCH_LOCAL_SCM_INTEGRATIONS"
"RUNNER_CAPABILITY_SECRET_CONTAINER_REGISTRY"
"RUNNER_CAPABILITY_AGENT_EXECUTION"
"RUNNER_CAPABILITY_ALLOW_ENV_TOKEN_POPULATION"
"RUNNER_CAPABILITY_DEFAULT_DEV_CONTAINER_IMAGE"
"RUNNER_CAPABILITY_ENVIRONMENT_SNAPSHOT"
"RUNNER_CAPABILITY_PREBUILDS_BEFORE_SNAPSHOT_TRIGGER"
"RUNNER_CAPABILITY_LIST_SCM_ORGANIZATIONS"
"RUNNER_CAPABILITY_CHECK_REPOSITORY_ACCESS"
"RUNNER_CAPABILITY_RUNNER_SIDE_AGENT"
"RUNNER_CAPABILITY_WARM_POOL"
"RUNNER_CAPABILITY_ASG_WARM_POOL"
"RUNNER_CAPABILITY_PORT_AUTHENTICATION"
RunnerConfiguration { autoUpdate, devcontainerImageCacheEnabled, logLevel, 4 more }
autoUpdate?: boolean

auto_update indicates whether the runner should automatically update itself.

devcontainerImageCacheEnabled?: boolean

devcontainer_image_cache_enabled controls whether the devcontainer build cache is enabled for this runner. Only takes effect on supported runners, currently only AWS EC2 and Gitpod-managed runners.

logLevel?: LogLevel

log_level is the log level for the runner

One of the following:
"LOG_LEVEL_UNSPECIFIED"
"LOG_LEVEL_DEBUG"
"LOG_LEVEL_INFO"
"LOG_LEVEL_WARN"
"LOG_LEVEL_ERROR"
metrics?: MetricsConfiguration { enabled, managedMetricsEnabled, password, 2 more }

metrics contains configuration for the runner’s metrics collection

enabled?: boolean

enabled indicates whether the runner should collect metrics

managedMetricsEnabled?: boolean

When true, the runner pushes metrics to the management plane via ReportRunnerMetrics instead of directly to the remote_write endpoint.

password?: string

password is the password to use for the metrics collector

url?: string

url is the URL of the metrics collector

username?: string

username is the username to use for the metrics collector

region?: string

Region to deploy the runner in, if applicable. This is mainly used for remote runners, and is only a hint. The runner may be deployed in a different region. See the runner’s status for the actual region.

releaseChannel?: RunnerReleaseChannel

The release channel the runner is on

One of the following:
"RUNNER_RELEASE_CHANNEL_UNSPECIFIED"
"RUNNER_RELEASE_CHANNEL_STABLE"
"RUNNER_RELEASE_CHANNEL_LATEST"
updateWindow?: UpdateWindow { endHour, startHour }

update_window defines the daily time window (UTC) during which auto-updates are allowed. If not set, updates are allowed at any time.

endHour?: number | null

end_hour is the end of the update window as a UTC hour (0-23). If not set, defaults to start_hour + 2.

startHour?: number | null

start_hour is the beginning of the update window as a UTC hour (0-23). +required

RunnerKind = "RUNNER_KIND_UNSPECIFIED" | "RUNNER_KIND_LOCAL" | "RUNNER_KIND_REMOTE" | "RUNNER_KIND_LOCAL_CONFIGURATION"

RunnerKind represents the kind of a runner

One of the following:
"RUNNER_KIND_UNSPECIFIED"
"RUNNER_KIND_LOCAL"
"RUNNER_KIND_REMOTE"
"RUNNER_KIND_LOCAL_CONFIGURATION"
RunnerPhase = "RUNNER_PHASE_UNSPECIFIED" | "RUNNER_PHASE_CREATED" | "RUNNER_PHASE_INACTIVE" | 4 more

RunnerPhase represents the phase a runner is in

One of the following:
"RUNNER_PHASE_UNSPECIFIED"
"RUNNER_PHASE_CREATED"
"RUNNER_PHASE_INACTIVE"
"RUNNER_PHASE_ACTIVE"
"RUNNER_PHASE_DELETING"
"RUNNER_PHASE_DELETED"
"RUNNER_PHASE_DEGRADED"
RunnerProvider = "RUNNER_PROVIDER_UNSPECIFIED" | "RUNNER_PROVIDER_AWS_EC2" | "RUNNER_PROVIDER_LINUX_HOST" | 4 more

RunnerProvider identifies the specific implementation type of a runner. Each provider maps to a specific kind of runner (local or remote), as specified below for each provider.

One of the following:
"RUNNER_PROVIDER_UNSPECIFIED"
"RUNNER_PROVIDER_AWS_EC2"
"RUNNER_PROVIDER_LINUX_HOST"
"RUNNER_PROVIDER_DESKTOP_MAC"
"RUNNER_PROVIDER_MANAGED"
"RUNNER_PROVIDER_GCP"
"RUNNER_PROVIDER_DEV_AGENT"
RunnerReleaseChannel = "RUNNER_RELEASE_CHANNEL_UNSPECIFIED" | "RUNNER_RELEASE_CHANNEL_STABLE" | "RUNNER_RELEASE_CHANNEL_LATEST"
One of the following:
"RUNNER_RELEASE_CHANNEL_UNSPECIFIED"
"RUNNER_RELEASE_CHANNEL_STABLE"
"RUNNER_RELEASE_CHANNEL_LATEST"
RunnerSpec { configuration, desiredPhase, variant }
configuration?: RunnerConfiguration { autoUpdate, devcontainerImageCacheEnabled, logLevel, 4 more }

The runner’s configuration

autoUpdate?: boolean

auto_update indicates whether the runner should automatically update itself.

devcontainerImageCacheEnabled?: boolean

devcontainer_image_cache_enabled controls whether the devcontainer build cache is enabled for this runner. Only takes effect on supported runners, currently only AWS EC2 and Gitpod-managed runners.

logLevel?: LogLevel

log_level is the log level for the runner

One of the following:
"LOG_LEVEL_UNSPECIFIED"
"LOG_LEVEL_DEBUG"
"LOG_LEVEL_INFO"
"LOG_LEVEL_WARN"
"LOG_LEVEL_ERROR"
metrics?: MetricsConfiguration { enabled, managedMetricsEnabled, password, 2 more }

metrics contains configuration for the runner’s metrics collection

enabled?: boolean

enabled indicates whether the runner should collect metrics

managedMetricsEnabled?: boolean

When true, the runner pushes metrics to the management plane via ReportRunnerMetrics instead of directly to the remote_write endpoint.

password?: string

password is the password to use for the metrics collector

url?: string

url is the URL of the metrics collector

username?: string

username is the username to use for the metrics collector

region?: string

Region to deploy the runner in, if applicable. This is mainly used for remote runners, and is only a hint. The runner may be deployed in a different region. See the runner’s status for the actual region.

releaseChannel?: RunnerReleaseChannel

The release channel the runner is on

One of the following:
"RUNNER_RELEASE_CHANNEL_UNSPECIFIED"
"RUNNER_RELEASE_CHANNEL_STABLE"
"RUNNER_RELEASE_CHANNEL_LATEST"
updateWindow?: UpdateWindow { endHour, startHour }

update_window defines the daily time window (UTC) during which auto-updates are allowed. If not set, updates are allowed at any time.

endHour?: number | null

end_hour is the end of the update window as a UTC hour (0-23). If not set, defaults to start_hour + 2.

startHour?: number | null

start_hour is the beginning of the update window as a UTC hour (0-23). +required

desiredPhase?: RunnerPhase

RunnerPhase represents the phase a runner is in

One of the following:
"RUNNER_PHASE_UNSPECIFIED"
"RUNNER_PHASE_CREATED"
"RUNNER_PHASE_INACTIVE"
"RUNNER_PHASE_ACTIVE"
"RUNNER_PHASE_DELETING"
"RUNNER_PHASE_DELETED"
"RUNNER_PHASE_DEGRADED"
variant?: RunnerVariant

The runner’s variant

One of the following:
"RUNNER_VARIANT_UNSPECIFIED"
"RUNNER_VARIANT_STANDARD"
"RUNNER_VARIANT_ENTERPRISE"
RunnerStatus { additionalInfo, capabilities, gatewayInfo, 10 more }

RunnerStatus represents the status of a runner

additionalInfo?: Array<FieldValue { key, value } >

additional_info contains additional information about the runner, e.g. a CloudFormation stack URL.

key?: string
value?: string
capabilities?: Array<RunnerCapability>

capabilities is a list of capabilities the runner supports.

One of the following:
"RUNNER_CAPABILITY_UNSPECIFIED"
"RUNNER_CAPABILITY_FETCH_LOCAL_SCM_INTEGRATIONS"
"RUNNER_CAPABILITY_SECRET_CONTAINER_REGISTRY"
"RUNNER_CAPABILITY_AGENT_EXECUTION"
"RUNNER_CAPABILITY_ALLOW_ENV_TOKEN_POPULATION"
"RUNNER_CAPABILITY_DEFAULT_DEV_CONTAINER_IMAGE"
"RUNNER_CAPABILITY_ENVIRONMENT_SNAPSHOT"
"RUNNER_CAPABILITY_PREBUILDS_BEFORE_SNAPSHOT_TRIGGER"
"RUNNER_CAPABILITY_LIST_SCM_ORGANIZATIONS"
"RUNNER_CAPABILITY_CHECK_REPOSITORY_ACCESS"
"RUNNER_CAPABILITY_RUNNER_SIDE_AGENT"
"RUNNER_CAPABILITY_WARM_POOL"
"RUNNER_CAPABILITY_ASG_WARM_POOL"
"RUNNER_CAPABILITY_PORT_AUTHENTICATION"
gatewayInfo?: GatewayInfo { gateway, latency }

gateway_info is information about the gateway to which the runner is connected.

gateway?: Gateway { name, url, region }

Gateway represents a system gateway that provides access to services

name: string

name is the human-readable name of the gateway. name is unique across all gateways.

url: string

url of the gateway

region?: string

region is the geographical region where the gateway is located

latency?: string

latency is the round-trip time of the runner to the gateway in milliseconds.

formatregex
llmUrl?: string

llm_url is the URL of the LLM service to which the runner is connected.

logUrl?: string
message?: string

The runner’s reported message which is shown to users. This message adds more context to the runner’s phase.

phase?: RunnerPhase

The runner’s reported phase

One of the following:
"RUNNER_PHASE_UNSPECIFIED"
"RUNNER_PHASE_CREATED"
"RUNNER_PHASE_INACTIVE"
"RUNNER_PHASE_ACTIVE"
"RUNNER_PHASE_DELETING"
"RUNNER_PHASE_DELETED"
"RUNNER_PHASE_DEGRADED"
publicKey?: string

public_key is the runner’s public key used for encryption (32 bytes)

formatbyte
maxLength32
minLength32
region?: string

region is the region the runner is running in, if applicable.

supportBundleUrl?: string

support_bundle_url is the URL at which the runner support bundle can be accessed. This URL provides access to pprof profiles and other debug information. Only available for standalone runners.

systemDetails?: string
updatedAt?: string

Time when the status was last updated.

formatdate-time
version?: string
RunnerVariant = "RUNNER_VARIANT_UNSPECIFIED" | "RUNNER_VARIANT_STANDARD" | "RUNNER_VARIANT_ENTERPRISE"
One of the following:
"RUNNER_VARIANT_UNSPECIFIED"
"RUNNER_VARIANT_STANDARD"
"RUNNER_VARIANT_ENTERPRISE"
SearchMode = "SEARCH_MODE_UNSPECIFIED" | "SEARCH_MODE_KEYWORD" | "SEARCH_MODE_NATIVE"
One of the following:
"SEARCH_MODE_UNSPECIFIED"
"SEARCH_MODE_KEYWORD"
"SEARCH_MODE_NATIVE"
UpdateWindow { endHour, startHour }

UpdateWindow defines a daily time window (UTC) during which auto-updates are allowed. The window must be at least 2 hours long. Overnight windows are supported (e.g., start_hour=22, end_hour=4).

endHour?: number | null

end_hour is the end of the update window as a UTC hour (0-23). If not set, defaults to start_hour + 2.

startHour?: number | null

start_hour is the beginning of the update window as a UTC hour (0-23). +required

RunnerCheckAuthenticationForHostResponse { authenticated, authenticationUrl, patSupported, 4 more }
authenticated?: boolean
DeprecatedauthenticationUrl?: string
DeprecatedpatSupported?: boolean
scmId?: string

scm_id is the unique identifier of the SCM provider

scmName?: string

scm_name is the human-readable name of the SCM provider (e.g., “GitHub”, “GitLab”)

supportsOauth2?: SupportsOauth2 { authUrl, docsUrl }

supports_oauth2 indicates that the host supports OAuth2 authentication

authUrl?: string

auth_url is the URL where users can authenticate

docsUrl?: string

docs_url is the URL to the documentation explaining this authentication method

supportsPat?: SupportsPat { createUrl, docsUrl, example, requiredScopes }

supports_pat indicates that the host supports Personal Access Token authentication

createUrl?: string

create_url is the URL where users can create a new Personal Access Token

docsUrl?: string

docs_url is the URL to the documentation explaining PAT usage for this host

example?: string

example is an example of a Personal Access Token

requiredScopes?: Array<string>

required_scopes is the list of permissions required for the Personal Access Token

RunnerCheckRepositoryAccessResponse { errorMessage, hasAccess }
errorMessage?: string

error_message provides details when access check fails. Empty when has_access is true.

hasAccess?: boolean

has_access indicates whether the principal has read access to the repository.

RunnerCreateResponse { runner, accessToken, exchangeToken }
runner: Runner { createdAt, creator, kind, 7 more }
createdAt?: string

Time when the Runner was created.

formatdate-time
creator?: Subject { id, principal }

creator is the identity of the creator of the environment

id?: string

id is the UUID of the subject

formatuuid
principal?: Principal

Principal is the principal of the subject

One of the following:
"PRINCIPAL_UNSPECIFIED"
"PRINCIPAL_ACCOUNT"
"PRINCIPAL_USER"
"PRINCIPAL_RUNNER"
"PRINCIPAL_ENVIRONMENT"
"PRINCIPAL_SERVICE_ACCOUNT"
"PRINCIPAL_RUNNER_MANAGER"
kind?: RunnerKind

The runner’s kind

One of the following:
"RUNNER_KIND_UNSPECIFIED"
"RUNNER_KIND_LOCAL"
"RUNNER_KIND_REMOTE"
"RUNNER_KIND_LOCAL_CONFIGURATION"
name?: string

The runner’s name which is shown to users

provider?: RunnerProvider

The runner’s provider

One of the following:
"RUNNER_PROVIDER_UNSPECIFIED"
"RUNNER_PROVIDER_AWS_EC2"
"RUNNER_PROVIDER_LINUX_HOST"
"RUNNER_PROVIDER_DESKTOP_MAC"
"RUNNER_PROVIDER_MANAGED"
"RUNNER_PROVIDER_GCP"
"RUNNER_PROVIDER_DEV_AGENT"
runnerId?: string
runnerManagerId?: string

The runner manager id specifies the runner manager for the managed runner. This field is only set for managed runners.

formatuuid
spec?: RunnerSpec { configuration, desiredPhase, variant }

The runner’s specification

configuration?: RunnerConfiguration { autoUpdate, devcontainerImageCacheEnabled, logLevel, 4 more }

The runner’s configuration

autoUpdate?: boolean

auto_update indicates whether the runner should automatically update itself.

devcontainerImageCacheEnabled?: boolean

devcontainer_image_cache_enabled controls whether the devcontainer build cache is enabled for this runner. Only takes effect on supported runners, currently only AWS EC2 and Gitpod-managed runners.

logLevel?: LogLevel

log_level is the log level for the runner

One of the following:
"LOG_LEVEL_UNSPECIFIED"
"LOG_LEVEL_DEBUG"
"LOG_LEVEL_INFO"
"LOG_LEVEL_WARN"
"LOG_LEVEL_ERROR"
metrics?: MetricsConfiguration { enabled, managedMetricsEnabled, password, 2 more }

metrics contains configuration for the runner’s metrics collection

enabled?: boolean

enabled indicates whether the runner should collect metrics

managedMetricsEnabled?: boolean

When true, the runner pushes metrics to the management plane via ReportRunnerMetrics instead of directly to the remote_write endpoint.

password?: string

password is the password to use for the metrics collector

url?: string

url is the URL of the metrics collector

username?: string

username is the username to use for the metrics collector

region?: string

Region to deploy the runner in, if applicable. This is mainly used for remote runners, and is only a hint. The runner may be deployed in a different region. See the runner’s status for the actual region.

releaseChannel?: RunnerReleaseChannel

The release channel the runner is on

One of the following:
"RUNNER_RELEASE_CHANNEL_UNSPECIFIED"
"RUNNER_RELEASE_CHANNEL_STABLE"
"RUNNER_RELEASE_CHANNEL_LATEST"
updateWindow?: UpdateWindow { endHour, startHour }

update_window defines the daily time window (UTC) during which auto-updates are allowed. If not set, updates are allowed at any time.

endHour?: number | null

end_hour is the end of the update window as a UTC hour (0-23). If not set, defaults to start_hour + 2.

startHour?: number | null

start_hour is the beginning of the update window as a UTC hour (0-23). +required

desiredPhase?: RunnerPhase

RunnerPhase represents the phase a runner is in

One of the following:
"RUNNER_PHASE_UNSPECIFIED"
"RUNNER_PHASE_CREATED"
"RUNNER_PHASE_INACTIVE"
"RUNNER_PHASE_ACTIVE"
"RUNNER_PHASE_DELETING"
"RUNNER_PHASE_DELETED"
"RUNNER_PHASE_DEGRADED"
variant?: RunnerVariant

The runner’s variant

One of the following:
"RUNNER_VARIANT_UNSPECIFIED"
"RUNNER_VARIANT_STANDARD"
"RUNNER_VARIANT_ENTERPRISE"
status?: RunnerStatus { additionalInfo, capabilities, gatewayInfo, 10 more }

The runner’s status

additionalInfo?: Array<FieldValue { key, value } >

additional_info contains additional information about the runner, e.g. a CloudFormation stack URL.

key?: string
value?: string
capabilities?: Array<RunnerCapability>

capabilities is a list of capabilities the runner supports.

One of the following:
"RUNNER_CAPABILITY_UNSPECIFIED"
"RUNNER_CAPABILITY_FETCH_LOCAL_SCM_INTEGRATIONS"
"RUNNER_CAPABILITY_SECRET_CONTAINER_REGISTRY"
"RUNNER_CAPABILITY_AGENT_EXECUTION"
"RUNNER_CAPABILITY_ALLOW_ENV_TOKEN_POPULATION"
"RUNNER_CAPABILITY_DEFAULT_DEV_CONTAINER_IMAGE"
"RUNNER_CAPABILITY_ENVIRONMENT_SNAPSHOT"
"RUNNER_CAPABILITY_PREBUILDS_BEFORE_SNAPSHOT_TRIGGER"
"RUNNER_CAPABILITY_LIST_SCM_ORGANIZATIONS"
"RUNNER_CAPABILITY_CHECK_REPOSITORY_ACCESS"
"RUNNER_CAPABILITY_RUNNER_SIDE_AGENT"
"RUNNER_CAPABILITY_WARM_POOL"
"RUNNER_CAPABILITY_ASG_WARM_POOL"
"RUNNER_CAPABILITY_PORT_AUTHENTICATION"
gatewayInfo?: GatewayInfo { gateway, latency }

gateway_info is information about the gateway to which the runner is connected.

gateway?: Gateway { name, url, region }

Gateway represents a system gateway that provides access to services

name: string

name is the human-readable name of the gateway. name is unique across all gateways.

url: string

url of the gateway

region?: string

region is the geographical region where the gateway is located

latency?: string

latency is the round-trip time of the runner to the gateway in milliseconds.

formatregex
llmUrl?: string

llm_url is the URL of the LLM service to which the runner is connected.

logUrl?: string
message?: string

The runner’s reported message which is shown to users. This message adds more context to the runner’s phase.

phase?: RunnerPhase

The runner’s reported phase

One of the following:
"RUNNER_PHASE_UNSPECIFIED"
"RUNNER_PHASE_CREATED"
"RUNNER_PHASE_INACTIVE"
"RUNNER_PHASE_ACTIVE"
"RUNNER_PHASE_DELETING"
"RUNNER_PHASE_DELETED"
"RUNNER_PHASE_DEGRADED"
publicKey?: string

public_key is the runner’s public key used for encryption (32 bytes)

formatbyte
maxLength32
minLength32
region?: string

region is the region the runner is running in, if applicable.

supportBundleUrl?: string

support_bundle_url is the URL at which the runner support bundle can be accessed. This URL provides access to pprof profiles and other debug information. Only available for standalone runners.

systemDetails?: string
updatedAt?: string

Time when the status was last updated.

formatdate-time
version?: string
updatedAt?: string

Time when the Runner was last udpated.

formatdate-time
DeprecatedaccessToken?: string

deprecated, will be removed. Use exchange_token instead.

exchangeToken?: string

exchange_token is a one-time use token that should be exchanged by the runner for an access token, using the IdentityService.ExchangeToken rpc. The token expires after 24 hours.

RunnerCreateLogsTokenResponse { accessToken }
accessToken: string

access_token is the token that can be used to access the logs and support bundle of the runner

RunnerCreateRunnerTokenResponse { accessToken, exchangeToken }
DeprecatedaccessToken?: string

deprecated, will be removed. Use exchange_token instead.

exchangeToken?: string

exchange_token is a one-time use token that should be exchanged by the runner for an access token, using the IdentityService.ExchangeToken rpc. The token expires after 24 hours.

RunnerDeleteResponse = unknown
RunnerListScmOrganizationsResponse { organizations }
organizations?: Array<Organization>

List of organizations the user belongs to

isAdmin?: boolean

Whether the user has admin permissions in this organization. Admin permissions typically allow creating organization-level webhooks.

name?: string

Organization name/slug (e.g., “gitpod-io”)

url?: string

Organization URL (e.g., “https://github.com/gitpod-io”)

RunnerParseContextURLResponse { git, issue, originalContextUrl, 4 more }
git?: Git { branch, cloneUrl, commit, 5 more }
branch?: string
cloneUrl?: string
commit?: string
host?: string
owner?: string
repo?: string
tag?: string
upstreamRemoteUrl?: string
issue?: Issue { id, title }
id?: string

id is the source system’s ID of this issue, e.g. BNFRD-6100

title?: string
originalContextUrl?: string
Deprecatedpr?: Pr { id, fromBranch, title, toBranch }

Deprecated: Use top-level PullRequest message instead

id?: string
fromBranch?: string
title?: string
toBranch?: string
projectIds?: Array<string>

project_ids is a list of projects to which the context URL belongs to.

pullRequest?: PullRequest { id, author, draft, 6 more }

PullRequest represents pull request metadata from source control systems. This message is used across workflow triggers, executions, and agent contexts to maintain consistent PR information throughout the system.

id?: string

Unique identifier from the source system (e.g., “123” for GitHub PR #123)

author?: string

Author name as provided by the SCM system

draft?: boolean

Whether this is a draft pull request

fromBranch?: string

Source branch name (the branch being merged from)

repository?: Repository { cloneUrl, host, name, owner }

Repository information

cloneUrl?: string
host?: string
name?: string
owner?: string
state?: State

Current state of the pull request

One of the following:
"STATE_UNSPECIFIED"
"STATE_OPEN"
"STATE_CLOSED"
"STATE_MERGED"
title?: string

Pull request title

toBranch?: string

Target branch name (the branch being merged into)

url?: string

Pull request URL (e.g., “https://github.com/owner/repo/pull/123”)

scmId?: string

scm_id is the unique identifier of the SCM provider (e.g., “github”, “gitlab”, “bitbucket”)

RunnerRetrieveResponse { runner }
runner: Runner { createdAt, creator, kind, 7 more }
createdAt?: string

Time when the Runner was created.

formatdate-time
creator?: Subject { id, principal }

creator is the identity of the creator of the environment

id?: string

id is the UUID of the subject

formatuuid
principal?: Principal

Principal is the principal of the subject

One of the following:
"PRINCIPAL_UNSPECIFIED"
"PRINCIPAL_ACCOUNT"
"PRINCIPAL_USER"
"PRINCIPAL_RUNNER"
"PRINCIPAL_ENVIRONMENT"
"PRINCIPAL_SERVICE_ACCOUNT"
"PRINCIPAL_RUNNER_MANAGER"
kind?: RunnerKind

The runner’s kind

One of the following:
"RUNNER_KIND_UNSPECIFIED"
"RUNNER_KIND_LOCAL"
"RUNNER_KIND_REMOTE"
"RUNNER_KIND_LOCAL_CONFIGURATION"
name?: string

The runner’s name which is shown to users

provider?: RunnerProvider

The runner’s provider

One of the following:
"RUNNER_PROVIDER_UNSPECIFIED"
"RUNNER_PROVIDER_AWS_EC2"
"RUNNER_PROVIDER_LINUX_HOST"
"RUNNER_PROVIDER_DESKTOP_MAC"
"RUNNER_PROVIDER_MANAGED"
"RUNNER_PROVIDER_GCP"
"RUNNER_PROVIDER_DEV_AGENT"
runnerId?: string
runnerManagerId?: string

The runner manager id specifies the runner manager for the managed runner. This field is only set for managed runners.

formatuuid
spec?: RunnerSpec { configuration, desiredPhase, variant }

The runner’s specification

configuration?: RunnerConfiguration { autoUpdate, devcontainerImageCacheEnabled, logLevel, 4 more }

The runner’s configuration

autoUpdate?: boolean

auto_update indicates whether the runner should automatically update itself.

devcontainerImageCacheEnabled?: boolean

devcontainer_image_cache_enabled controls whether the devcontainer build cache is enabled for this runner. Only takes effect on supported runners, currently only AWS EC2 and Gitpod-managed runners.

logLevel?: LogLevel

log_level is the log level for the runner

One of the following:
"LOG_LEVEL_UNSPECIFIED"
"LOG_LEVEL_DEBUG"
"LOG_LEVEL_INFO"
"LOG_LEVEL_WARN"
"LOG_LEVEL_ERROR"
metrics?: MetricsConfiguration { enabled, managedMetricsEnabled, password, 2 more }

metrics contains configuration for the runner’s metrics collection

enabled?: boolean

enabled indicates whether the runner should collect metrics

managedMetricsEnabled?: boolean

When true, the runner pushes metrics to the management plane via ReportRunnerMetrics instead of directly to the remote_write endpoint.

password?: string

password is the password to use for the metrics collector

url?: string

url is the URL of the metrics collector

username?: string

username is the username to use for the metrics collector

region?: string

Region to deploy the runner in, if applicable. This is mainly used for remote runners, and is only a hint. The runner may be deployed in a different region. See the runner’s status for the actual region.

releaseChannel?: RunnerReleaseChannel

The release channel the runner is on

One of the following:
"RUNNER_RELEASE_CHANNEL_UNSPECIFIED"
"RUNNER_RELEASE_CHANNEL_STABLE"
"RUNNER_RELEASE_CHANNEL_LATEST"
updateWindow?: UpdateWindow { endHour, startHour }

update_window defines the daily time window (UTC) during which auto-updates are allowed. If not set, updates are allowed at any time.

endHour?: number | null

end_hour is the end of the update window as a UTC hour (0-23). If not set, defaults to start_hour + 2.

startHour?: number | null

start_hour is the beginning of the update window as a UTC hour (0-23). +required

desiredPhase?: RunnerPhase

RunnerPhase represents the phase a runner is in

One of the following:
"RUNNER_PHASE_UNSPECIFIED"
"RUNNER_PHASE_CREATED"
"RUNNER_PHASE_INACTIVE"
"RUNNER_PHASE_ACTIVE"
"RUNNER_PHASE_DELETING"
"RUNNER_PHASE_DELETED"
"RUNNER_PHASE_DEGRADED"
variant?: RunnerVariant

The runner’s variant

One of the following:
"RUNNER_VARIANT_UNSPECIFIED"
"RUNNER_VARIANT_STANDARD"
"RUNNER_VARIANT_ENTERPRISE"
status?: RunnerStatus { additionalInfo, capabilities, gatewayInfo, 10 more }

The runner’s status

additionalInfo?: Array<FieldValue { key, value } >

additional_info contains additional information about the runner, e.g. a CloudFormation stack URL.

key?: string
value?: string
capabilities?: Array<RunnerCapability>

capabilities is a list of capabilities the runner supports.

One of the following:
"RUNNER_CAPABILITY_UNSPECIFIED"
"RUNNER_CAPABILITY_FETCH_LOCAL_SCM_INTEGRATIONS"
"RUNNER_CAPABILITY_SECRET_CONTAINER_REGISTRY"
"RUNNER_CAPABILITY_AGENT_EXECUTION"
"RUNNER_CAPABILITY_ALLOW_ENV_TOKEN_POPULATION"
"RUNNER_CAPABILITY_DEFAULT_DEV_CONTAINER_IMAGE"
"RUNNER_CAPABILITY_ENVIRONMENT_SNAPSHOT"
"RUNNER_CAPABILITY_PREBUILDS_BEFORE_SNAPSHOT_TRIGGER"
"RUNNER_CAPABILITY_LIST_SCM_ORGANIZATIONS"
"RUNNER_CAPABILITY_CHECK_REPOSITORY_ACCESS"
"RUNNER_CAPABILITY_RUNNER_SIDE_AGENT"
"RUNNER_CAPABILITY_WARM_POOL"
"RUNNER_CAPABILITY_ASG_WARM_POOL"
"RUNNER_CAPABILITY_PORT_AUTHENTICATION"
gatewayInfo?: GatewayInfo { gateway, latency }

gateway_info is information about the gateway to which the runner is connected.

gateway?: Gateway { name, url, region }

Gateway represents a system gateway that provides access to services

name: string

name is the human-readable name of the gateway. name is unique across all gateways.

url: string

url of the gateway

region?: string

region is the geographical region where the gateway is located

latency?: string

latency is the round-trip time of the runner to the gateway in milliseconds.

formatregex
llmUrl?: string

llm_url is the URL of the LLM service to which the runner is connected.

logUrl?: string
message?: string

The runner’s reported message which is shown to users. This message adds more context to the runner’s phase.

phase?: RunnerPhase

The runner’s reported phase

One of the following:
"RUNNER_PHASE_UNSPECIFIED"
"RUNNER_PHASE_CREATED"
"RUNNER_PHASE_INACTIVE"
"RUNNER_PHASE_ACTIVE"
"RUNNER_PHASE_DELETING"
"RUNNER_PHASE_DELETED"
"RUNNER_PHASE_DEGRADED"
publicKey?: string

public_key is the runner’s public key used for encryption (32 bytes)

formatbyte
maxLength32
minLength32
region?: string

region is the region the runner is running in, if applicable.

supportBundleUrl?: string

support_bundle_url is the URL at which the runner support bundle can be accessed. This URL provides access to pprof profiles and other debug information. Only available for standalone runners.

systemDetails?: string
updatedAt?: string

Time when the status was last updated.

formatdate-time
version?: string
updatedAt?: string

Time when the Runner was last udpated.

formatdate-time
RunnerSearchRepositoriesResponse { lastPage, pagination, repositories }
lastPage?: number

Deprecated: Use pagination token instead. Total pages can be extracted from token.

formatint32
repositories?: Array<Repository>

List of repositories matching the search criteria

name?: string

Repository name (e.g., “my-project”)

url?: string

Repository URL (e.g., “https://github.com/owner/my-project”)

RunnerUpdateResponse = unknown

RunnersConfigurations

ValidateRunnerConfiguration
client.runners.configurations.validate(ConfigurationValidateParams { environmentClass, runnerId, scmIntegration } body, RequestOptionsoptions?): ConfigurationValidateResponse { environmentClass, scmIntegration }
POST/gitpod.v1.RunnerConfigurationService/ValidateRunnerConfiguration
ModelsExpand Collapse
EnvironmentClassValidationResult { configurationErrors, descriptionError, displayNameError, valid }
configurationErrors?: Array<FieldValidationError { error, key } >
error?: string
key?: string
descriptionError?: string | null
displayNameError?: string | null
valid?: boolean
FieldValidationError { error, key }
error?: string
key?: string
ScmIntegrationValidationResult { hostError, oauthError, patError, 2 more }
hostError?: string | null
oauthError?: string | null
patError?: string | null
scmIdError?: string | null
valid?: boolean
ConfigurationValidateResponse { environmentClass, scmIntegration }
environmentClass?: EnvironmentClassValidationResult { configurationErrors, descriptionError, displayNameError, valid }
configurationErrors?: Array<FieldValidationError { error, key } >
error?: string
key?: string
descriptionError?: string | null
displayNameError?: string | null
valid?: boolean
scmIntegration?: ScmIntegrationValidationResult { hostError, oauthError, patError, 2 more }
hostError?: string | null
oauthError?: string | null
patError?: string | null
scmIdError?: string | null
valid?: boolean

RunnersConfigurationsEnvironment Classes

CreateEnvironmentClass
client.runners.configurations.environmentClasses.create(EnvironmentClassCreateParams { configuration, description, displayName, runnerId } body, RequestOptionsoptions?): EnvironmentClassCreateResponse { id }
POST/gitpod.v1.RunnerConfigurationService/CreateEnvironmentClass
ListEnvironmentClasses
client.runners.configurations.environmentClasses.list(EnvironmentClassListParams { token, pageSize, filter, pagination } params, RequestOptionsoptions?): EnvironmentClassesPage<EnvironmentClass { id, runnerId, configuration, 3 more } >
POST/gitpod.v1.RunnerConfigurationService/ListEnvironmentClasses
GetEnvironmentClass
client.runners.configurations.environmentClasses.retrieve(EnvironmentClassRetrieveParams { environmentClassId } body, RequestOptionsoptions?): EnvironmentClassRetrieveResponse { environmentClass }
POST/gitpod.v1.RunnerConfigurationService/GetEnvironmentClass
UpdateEnvironmentClass
client.runners.configurations.environmentClasses.update(EnvironmentClassUpdateParams { description, displayName, enabled, environmentClassId } body, RequestOptionsoptions?): EnvironmentClassUpdateResponse
POST/gitpod.v1.RunnerConfigurationService/UpdateEnvironmentClass
ModelsExpand Collapse
EnvironmentClassCreateResponse { id }
id?: string
EnvironmentClassRetrieveResponse { environmentClass }
environmentClass?: EnvironmentClass { id, runnerId, configuration, 3 more }
id: string

id is the unique identifier of the environment class

runnerId: string

runner_id is the unique identifier of the runner the environment class belongs to

configuration?: Array<FieldValue { key, value } >

configuration describes the configuration of the environment class

key?: string
value?: string
description?: string

description is a human readable description of the environment class

maxLength200
minLength3
displayName?: string

display_name is the human readable name of the environment class

maxLength127
minLength3
enabled?: boolean

enabled indicates whether the environment class can be used to create new environments.

EnvironmentClassUpdateResponse = unknown

RunnersConfigurationsHost Authentication Tokens

CreateHostAuthenticationToken
client.runners.configurations.hostAuthenticationTokens.create(HostAuthenticationTokenCreateParams { token, expiresAt, host, 7 more } body, RequestOptionsoptions?): HostAuthenticationTokenCreateResponse { token }
POST/gitpod.v1.RunnerConfigurationService/CreateHostAuthenticationToken
DeleteHostAuthenticationToken
client.runners.configurations.hostAuthenticationTokens.delete(HostAuthenticationTokenDeleteParams { id } body, RequestOptionsoptions?): HostAuthenticationTokenDeleteResponse
POST/gitpod.v1.RunnerConfigurationService/DeleteHostAuthenticationToken
ListHostAuthenticationTokens
client.runners.configurations.hostAuthenticationTokens.list(HostAuthenticationTokenListParams { token, pageSize, filter, pagination } params, RequestOptionsoptions?): TokensPage<HostAuthenticationToken { id, expiresAt, host, 6 more } >
POST/gitpod.v1.RunnerConfigurationService/ListHostAuthenticationTokens
GetHostAuthenticationToken
client.runners.configurations.hostAuthenticationTokens.retrieve(HostAuthenticationTokenRetrieveParams { id } body, RequestOptionsoptions?): HostAuthenticationTokenRetrieveResponse { token }
POST/gitpod.v1.RunnerConfigurationService/GetHostAuthenticationToken
UpdateHostAuthenticationToken
client.runners.configurations.hostAuthenticationTokens.update(HostAuthenticationTokenUpdateParams { id, token, expiresAt, 2 more } body, RequestOptionsoptions?): HostAuthenticationTokenUpdateResponse
POST/gitpod.v1.RunnerConfigurationService/UpdateHostAuthenticationToken
ModelsExpand Collapse
HostAuthenticationToken { id, expiresAt, host, 6 more }
id: string
expiresAt?: string

A Timestamp represents a point in time independent of any time zone or local calendar, encoded as a count of seconds and fractions of seconds at nanosecond resolution. The count is relative to an epoch at UTC midnight on January 1, 1970, in the proleptic Gregorian calendar which extends the Gregorian calendar backwards to year one.

All minutes are 60 seconds long. Leap seconds are “smeared” so that no leap second table is needed for interpretation, using a 24-hour linear smear.

The range is from 0001-01-01T00:00:00Z to 9999-12-31T23:59:59.999999999Z. By restricting to that range, we ensure that we can convert to and from RFC 3339 date strings.

Examples

Example 1: Compute Timestamp from POSIX time().

 Timestamp timestamp;
 timestamp.set_seconds(time(NULL));
 timestamp.set_nanos(0);

Example 2: Compute Timestamp from POSIX gettimeofday().

 struct timeval tv;
 gettimeofday(&tv, NULL);

 Timestamp timestamp;
 timestamp.set_seconds(tv.tv_sec);
 timestamp.set_nanos(tv.tv_usec * 1000);

Example 3: Compute Timestamp from Win32 GetSystemTimeAsFileTime().

 FILETIME ft;
 GetSystemTimeAsFileTime(&ft);
 UINT64 ticks = (((UINT64)ft.dwHighDateTime) << 32) | ft.dwLowDateTime;

 // A Windows tick is 100 nanoseconds. Windows epoch 1601-01-01T00:00:00Z
 // is 11644473600 seconds before Unix epoch 1970-01-01T00:00:00Z.
 Timestamp timestamp;
 timestamp.set_seconds((INT64) ((ticks / 10000000) - 11644473600LL));
 timestamp.set_nanos((INT32) ((ticks % 10000000) * 100));

Example 4: Compute Timestamp from Java System.currentTimeMillis().

 long millis = System.currentTimeMillis();

 Timestamp timestamp = Timestamp.newBuilder().setSeconds(millis / 1000)
     .setNanos((int) ((millis % 1000) * 1000000)).build();

Example 5: Compute Timestamp from Java Instant.now().

 Instant now = Instant.now();

 Timestamp timestamp =
     Timestamp.newBuilder().setSeconds(now.getEpochSecond())
         .setNanos(now.getNano()).build();

Example 6: Compute Timestamp from current time in Python.

 timestamp = Timestamp()
 timestamp.GetCurrentTime()

JSON Mapping

In JSON format, the Timestamp type is encoded as a string in the RFC 3339 format. That is, the format is “{year}-{month}-{day}T{hour}:{min}:{sec}[.{frac_sec}]Z” where {year} is always expressed using four digits while {month}, {day}, {hour}, {min}, and {sec} are zero-padded to two digits each. The fractional seconds, which can go up to 9 digits (i.e. up to 1 nanosecond resolution), are optional. The “Z” suffix indicates the timezone (“UTC”); the timezone is required. A proto3 JSON serializer should always use UTC (as indicated by “Z”) when printing the Timestamp type and a proto3 JSON parser should be able to accept both UTC and other timezones (as indicated by an offset).

For example, “2017-01-15T01:30:15.01Z” encodes 15.01 seconds past 01:30 UTC on January 15, 2017.

In JavaScript, one can convert a Date object to this format using the standard toISOString() method. In Python, a standard datetime.datetime object can be converted to this format using strftime with the time format spec ‘%Y-%m-%dT%H:%M:%S.%fZ’. Likewise, in Java, one can use the Joda Time’s ISODateTimeFormat.dateTime() to obtain a formatter capable of generating timestamps in this format.

formatdate-time
host?: string
integrationId?: string

links to integration instance

runnerId?: string
scopes?: Array<string>

token permissions

One of the following:
"HOST_AUTHENTICATION_TOKEN_SOURCE_UNSPECIFIED"
"HOST_AUTHENTICATION_TOKEN_SOURCE_OAUTH"
"HOST_AUTHENTICATION_TOKEN_SOURCE_PAT"
subject?: Subject { id, principal }

Subject identifies the principal (user or service account) for the token Note: actual token and refresh_token values are retrieved via GetHostAuthenticationTokenValue API

id?: string

id is the UUID of the subject

formatuuid
principal?: Principal

Principal is the principal of the subject

One of the following:
"PRINCIPAL_UNSPECIFIED"
"PRINCIPAL_ACCOUNT"
"PRINCIPAL_USER"
"PRINCIPAL_RUNNER"
"PRINCIPAL_ENVIRONMENT"
"PRINCIPAL_SERVICE_ACCOUNT"
"PRINCIPAL_RUNNER_MANAGER"
DeprecateduserId?: string

Deprecated: Use principal_id and principal_type instead principal (user)

HostAuthenticationTokenSource = "HOST_AUTHENTICATION_TOKEN_SOURCE_UNSPECIFIED" | "HOST_AUTHENTICATION_TOKEN_SOURCE_OAUTH" | "HOST_AUTHENTICATION_TOKEN_SOURCE_PAT"
One of the following:
"HOST_AUTHENTICATION_TOKEN_SOURCE_UNSPECIFIED"
"HOST_AUTHENTICATION_TOKEN_SOURCE_OAUTH"
"HOST_AUTHENTICATION_TOKEN_SOURCE_PAT"
HostAuthenticationTokenCreateResponse { token }
token: HostAuthenticationToken { id, expiresAt, host, 6 more }
id: string
expiresAt?: string

A Timestamp represents a point in time independent of any time zone or local calendar, encoded as a count of seconds and fractions of seconds at nanosecond resolution. The count is relative to an epoch at UTC midnight on January 1, 1970, in the proleptic Gregorian calendar which extends the Gregorian calendar backwards to year one.

All minutes are 60 seconds long. Leap seconds are “smeared” so that no leap second table is needed for interpretation, using a 24-hour linear smear.

The range is from 0001-01-01T00:00:00Z to 9999-12-31T23:59:59.999999999Z. By restricting to that range, we ensure that we can convert to and from RFC 3339 date strings.

Examples

Example 1: Compute Timestamp from POSIX time().

 Timestamp timestamp;
 timestamp.set_seconds(time(NULL));
 timestamp.set_nanos(0);

Example 2: Compute Timestamp from POSIX gettimeofday().

 struct timeval tv;
 gettimeofday(&tv, NULL);

 Timestamp timestamp;
 timestamp.set_seconds(tv.tv_sec);
 timestamp.set_nanos(tv.tv_usec * 1000);

Example 3: Compute Timestamp from Win32 GetSystemTimeAsFileTime().

 FILETIME ft;
 GetSystemTimeAsFileTime(&ft);
 UINT64 ticks = (((UINT64)ft.dwHighDateTime) << 32) | ft.dwLowDateTime;

 // A Windows tick is 100 nanoseconds. Windows epoch 1601-01-01T00:00:00Z
 // is 11644473600 seconds before Unix epoch 1970-01-01T00:00:00Z.
 Timestamp timestamp;
 timestamp.set_seconds((INT64) ((ticks / 10000000) - 11644473600LL));
 timestamp.set_nanos((INT32) ((ticks % 10000000) * 100));

Example 4: Compute Timestamp from Java System.currentTimeMillis().

 long millis = System.currentTimeMillis();

 Timestamp timestamp = Timestamp.newBuilder().setSeconds(millis / 1000)
     .setNanos((int) ((millis % 1000) * 1000000)).build();

Example 5: Compute Timestamp from Java Instant.now().

 Instant now = Instant.now();

 Timestamp timestamp =
     Timestamp.newBuilder().setSeconds(now.getEpochSecond())
         .setNanos(now.getNano()).build();

Example 6: Compute Timestamp from current time in Python.

 timestamp = Timestamp()
 timestamp.GetCurrentTime()

JSON Mapping

In JSON format, the Timestamp type is encoded as a string in the RFC 3339 format. That is, the format is “{year}-{month}-{day}T{hour}:{min}:{sec}[.{frac_sec}]Z” where {year} is always expressed using four digits while {month}, {day}, {hour}, {min}, and {sec} are zero-padded to two digits each. The fractional seconds, which can go up to 9 digits (i.e. up to 1 nanosecond resolution), are optional. The “Z” suffix indicates the timezone (“UTC”); the timezone is required. A proto3 JSON serializer should always use UTC (as indicated by “Z”) when printing the Timestamp type and a proto3 JSON parser should be able to accept both UTC and other timezones (as indicated by an offset).

For example, “2017-01-15T01:30:15.01Z” encodes 15.01 seconds past 01:30 UTC on January 15, 2017.

In JavaScript, one can convert a Date object to this format using the standard toISOString() method. In Python, a standard datetime.datetime object can be converted to this format using strftime with the time format spec ‘%Y-%m-%dT%H:%M:%S.%fZ’. Likewise, in Java, one can use the Joda Time’s ISODateTimeFormat.dateTime() to obtain a formatter capable of generating timestamps in this format.

formatdate-time
host?: string
integrationId?: string

links to integration instance

runnerId?: string
scopes?: Array<string>

token permissions

One of the following:
"HOST_AUTHENTICATION_TOKEN_SOURCE_UNSPECIFIED"
"HOST_AUTHENTICATION_TOKEN_SOURCE_OAUTH"
"HOST_AUTHENTICATION_TOKEN_SOURCE_PAT"
subject?: Subject { id, principal }

Subject identifies the principal (user or service account) for the token Note: actual token and refresh_token values are retrieved via GetHostAuthenticationTokenValue API

id?: string

id is the UUID of the subject

formatuuid
principal?: Principal

Principal is the principal of the subject

One of the following:
"PRINCIPAL_UNSPECIFIED"
"PRINCIPAL_ACCOUNT"
"PRINCIPAL_USER"
"PRINCIPAL_RUNNER"
"PRINCIPAL_ENVIRONMENT"
"PRINCIPAL_SERVICE_ACCOUNT"
"PRINCIPAL_RUNNER_MANAGER"
DeprecateduserId?: string

Deprecated: Use principal_id and principal_type instead principal (user)

HostAuthenticationTokenDeleteResponse = unknown
HostAuthenticationTokenRetrieveResponse { token }
token: HostAuthenticationToken { id, expiresAt, host, 6 more }
id: string
expiresAt?: string

A Timestamp represents a point in time independent of any time zone or local calendar, encoded as a count of seconds and fractions of seconds at nanosecond resolution. The count is relative to an epoch at UTC midnight on January 1, 1970, in the proleptic Gregorian calendar which extends the Gregorian calendar backwards to year one.

All minutes are 60 seconds long. Leap seconds are “smeared” so that no leap second table is needed for interpretation, using a 24-hour linear smear.

The range is from 0001-01-01T00:00:00Z to 9999-12-31T23:59:59.999999999Z. By restricting to that range, we ensure that we can convert to and from RFC 3339 date strings.

Examples

Example 1: Compute Timestamp from POSIX time().

 Timestamp timestamp;
 timestamp.set_seconds(time(NULL));
 timestamp.set_nanos(0);

Example 2: Compute Timestamp from POSIX gettimeofday().

 struct timeval tv;
 gettimeofday(&tv, NULL);

 Timestamp timestamp;
 timestamp.set_seconds(tv.tv_sec);
 timestamp.set_nanos(tv.tv_usec * 1000);

Example 3: Compute Timestamp from Win32 GetSystemTimeAsFileTime().

 FILETIME ft;
 GetSystemTimeAsFileTime(&ft);
 UINT64 ticks = (((UINT64)ft.dwHighDateTime) << 32) | ft.dwLowDateTime;

 // A Windows tick is 100 nanoseconds. Windows epoch 1601-01-01T00:00:00Z
 // is 11644473600 seconds before Unix epoch 1970-01-01T00:00:00Z.
 Timestamp timestamp;
 timestamp.set_seconds((INT64) ((ticks / 10000000) - 11644473600LL));
 timestamp.set_nanos((INT32) ((ticks % 10000000) * 100));

Example 4: Compute Timestamp from Java System.currentTimeMillis().

 long millis = System.currentTimeMillis();

 Timestamp timestamp = Timestamp.newBuilder().setSeconds(millis / 1000)
     .setNanos((int) ((millis % 1000) * 1000000)).build();

Example 5: Compute Timestamp from Java Instant.now().

 Instant now = Instant.now();

 Timestamp timestamp =
     Timestamp.newBuilder().setSeconds(now.getEpochSecond())
         .setNanos(now.getNano()).build();

Example 6: Compute Timestamp from current time in Python.

 timestamp = Timestamp()
 timestamp.GetCurrentTime()

JSON Mapping

In JSON format, the Timestamp type is encoded as a string in the RFC 3339 format. That is, the format is “{year}-{month}-{day}T{hour}:{min}:{sec}[.{frac_sec}]Z” where {year} is always expressed using four digits while {month}, {day}, {hour}, {min}, and {sec} are zero-padded to two digits each. The fractional seconds, which can go up to 9 digits (i.e. up to 1 nanosecond resolution), are optional. The “Z” suffix indicates the timezone (“UTC”); the timezone is required. A proto3 JSON serializer should always use UTC (as indicated by “Z”) when printing the Timestamp type and a proto3 JSON parser should be able to accept both UTC and other timezones (as indicated by an offset).

For example, “2017-01-15T01:30:15.01Z” encodes 15.01 seconds past 01:30 UTC on January 15, 2017.

In JavaScript, one can convert a Date object to this format using the standard toISOString() method. In Python, a standard datetime.datetime object can be converted to this format using strftime with the time format spec ‘%Y-%m-%dT%H:%M:%S.%fZ’. Likewise, in Java, one can use the Joda Time’s ISODateTimeFormat.dateTime() to obtain a formatter capable of generating timestamps in this format.

formatdate-time
host?: string
integrationId?: string

links to integration instance

runnerId?: string
scopes?: Array<string>

token permissions

One of the following:
"HOST_AUTHENTICATION_TOKEN_SOURCE_UNSPECIFIED"
"HOST_AUTHENTICATION_TOKEN_SOURCE_OAUTH"
"HOST_AUTHENTICATION_TOKEN_SOURCE_PAT"
subject?: Subject { id, principal }

Subject identifies the principal (user or service account) for the token Note: actual token and refresh_token values are retrieved via GetHostAuthenticationTokenValue API

id?: string

id is the UUID of the subject

formatuuid
principal?: Principal

Principal is the principal of the subject

One of the following:
"PRINCIPAL_UNSPECIFIED"
"PRINCIPAL_ACCOUNT"
"PRINCIPAL_USER"
"PRINCIPAL_RUNNER"
"PRINCIPAL_ENVIRONMENT"
"PRINCIPAL_SERVICE_ACCOUNT"
"PRINCIPAL_RUNNER_MANAGER"
DeprecateduserId?: string

Deprecated: Use principal_id and principal_type instead principal (user)

HostAuthenticationTokenUpdateResponse = unknown

RunnersConfigurationsSchema

GetRunnerConfigurationSchema
client.runners.configurations.schema.retrieve(SchemaRetrieveParams { runnerId } body, RequestOptionsoptions?): SchemaRetrieveResponse { schema }
POST/gitpod.v1.RunnerConfigurationService/GetRunnerConfigurationSchema
ModelsExpand Collapse
RunnerConfigurationSchema { environmentClasses, runnerConfig, scm, version }
environmentClasses?: Array<EnvironmentClass>
id?: string
bool?: Bool { default }
default?: boolean
description?: string
display?: Display { default }
default?: string
enum?: Enum { default, defaultValue, possibleValues, values }
Deprecateddefault?: string

deprecated, will be removed, use default_value instead

defaultValue?: DefaultValue { detail, subtitle, title }
detail?: string
subtitle?: string
title?: string
possibleValues?: Array<PossibleValue>
detail?: string
subtitle?: string
title?: string
Deprecatedvalues?: Array<string>

deprecated, will be removed, use possible_values instead

int?: Int { default, max, min }
default?: number
formatint32
max?: number
formatint32
min?: number
formatint32
name?: string
required?: boolean
secret?: boolean
string?: String { default, pattern }
default?: string
pattern?: string
runnerConfig?: Array<RunnerConfig>
id?: string
bool?: Bool { default }
default?: boolean
description?: string
display?: Display { default }
default?: string
enum?: Enum { default, defaultValue, possibleValues, values }
Deprecateddefault?: string

deprecated, will be removed, use default_value instead

defaultValue?: DefaultValue { detail, subtitle, title }
detail?: string
subtitle?: string
title?: string
possibleValues?: Array<PossibleValue>
detail?: string
subtitle?: string
title?: string
Deprecatedvalues?: Array<string>

deprecated, will be removed, use possible_values instead

int?: Int { default, max, min }
default?: number
formatint32
max?: number
formatint32
min?: number
formatint32
name?: string
required?: boolean
secret?: boolean
string?: String { default, pattern }
default?: string
pattern?: string
scm?: Array<Scm>
defaultHosts?: Array<string>
name?: string
oauth?: OAuth { callbackUrl }
callbackUrl?: string

callback_url is the URL the OAuth app will redirect to after the user has authenticated.

pat?: Pat { description, docsLink }
description?: string

description is a human-readable description of the PAT.

scmId?: string
version?: string

The schema version

SchemaRetrieveResponse { schema }
schema?: RunnerConfigurationSchema { environmentClasses, runnerConfig, scm, version }
environmentClasses?: Array<EnvironmentClass>
id?: string
bool?: Bool { default }
default?: boolean
description?: string
display?: Display { default }
default?: string
enum?: Enum { default, defaultValue, possibleValues, values }
Deprecateddefault?: string

deprecated, will be removed, use default_value instead

defaultValue?: DefaultValue { detail, subtitle, title }
detail?: string
subtitle?: string
title?: string
possibleValues?: Array<PossibleValue>
detail?: string
subtitle?: string
title?: string
Deprecatedvalues?: Array<string>

deprecated, will be removed, use possible_values instead

int?: Int { default, max, min }
default?: number
formatint32
max?: number
formatint32
min?: number
formatint32
name?: string
required?: boolean
secret?: boolean
string?: String { default, pattern }
default?: string
pattern?: string
runnerConfig?: Array<RunnerConfig>
id?: string
bool?: Bool { default }
default?: boolean
description?: string
display?: Display { default }
default?: string
enum?: Enum { default, defaultValue, possibleValues, values }
Deprecateddefault?: string

deprecated, will be removed, use default_value instead

defaultValue?: DefaultValue { detail, subtitle, title }
detail?: string
subtitle?: string
title?: string
possibleValues?: Array<PossibleValue>
detail?: string
subtitle?: string
title?: string
Deprecatedvalues?: Array<string>

deprecated, will be removed, use possible_values instead

int?: Int { default, max, min }
default?: number
formatint32
max?: number
formatint32
min?: number
formatint32
name?: string
required?: boolean
secret?: boolean
string?: String { default, pattern }
default?: string
pattern?: string
scm?: Array<Scm>
defaultHosts?: Array<string>
name?: string
oauth?: OAuth { callbackUrl }
callbackUrl?: string

callback_url is the URL the OAuth app will redirect to after the user has authenticated.

pat?: Pat { description, docsLink }
description?: string

description is a human-readable description of the PAT.

scmId?: string
version?: string

The schema version

RunnersConfigurationsScm Integrations

CreateSCMIntegration
client.runners.configurations.scmIntegrations.create(ScmIntegrationCreateParams { host, issuerUrl, oauthClientId, 5 more } body, RequestOptionsoptions?): ScmIntegrationCreateResponse { id }
POST/gitpod.v1.RunnerConfigurationService/CreateSCMIntegration
DeleteSCMIntegration
client.runners.configurations.scmIntegrations.delete(ScmIntegrationDeleteParams { id } body, RequestOptionsoptions?): ScmIntegrationDeleteResponse
POST/gitpod.v1.RunnerConfigurationService/DeleteSCMIntegration
ListSCMIntegrations
client.runners.configurations.scmIntegrations.list(ScmIntegrationListParams { token, pageSize, filter, pagination } params, RequestOptionsoptions?): IntegrationsPage<ScmIntegration { id, host, oauth, 4 more } >
POST/gitpod.v1.RunnerConfigurationService/ListSCMIntegrations
GetSCMIntegration
client.runners.configurations.scmIntegrations.retrieve(ScmIntegrationRetrieveParams { id } body, RequestOptionsoptions?): ScmIntegrationRetrieveResponse { integration }
POST/gitpod.v1.RunnerConfigurationService/GetSCMIntegration
UpdateSCMIntegration
client.runners.configurations.scmIntegrations.update(ScmIntegrationUpdateParams { id, issuerUrl, oauthClientId, 3 more } body, RequestOptionsoptions?): ScmIntegrationUpdateResponse
POST/gitpod.v1.RunnerConfigurationService/UpdateSCMIntegration
ModelsExpand Collapse
ScmIntegration { id, host, oauth, 4 more }
id?: string

id is the unique identifier of the SCM integration

host?: string
oauth?: ScmIntegrationOAuthConfig { clientId, encryptedClientSecret, issuerUrl } | null
clientId?: string

client_id is the OAuth app’s client ID in clear text.

encryptedClientSecret?: string

encrypted_client_secret is the OAuth app’s secret encrypted with the runner’s public key.

formatbyte
issuerUrl?: string

issuer_url is used to override the authentication provider URL, if it doesn’t match the SCM host.

+optional if not set, this account is owned by the installation.

pat?: boolean
runnerId?: string
scmId?: string

scm_id references the scm_id in the runner’s configuration schema that this integration is for

virtualDirectory?: string | null

virtual_directory is the virtual directory path for Azure DevOps Server (e.g., “/tfs”). This field is only used for Azure DevOps Server SCM integrations and should be empty for other SCM types. Azure DevOps Server APIs work without collection when PAT scope is ‘All accessible organizations’.

ScmIntegrationOAuthConfig { clientId, encryptedClientSecret, issuerUrl }
clientId?: string

client_id is the OAuth app’s client ID in clear text.

encryptedClientSecret?: string

encrypted_client_secret is the OAuth app’s secret encrypted with the runner’s public key.

formatbyte
issuerUrl?: string

issuer_url is used to override the authentication provider URL, if it doesn’t match the SCM host.

+optional if not set, this account is owned by the installation.

ScmIntegrationCreateResponse { id }
id?: string

id is a uniquely generated identifier for the SCM integration

formatuuid
ScmIntegrationDeleteResponse = unknown
ScmIntegrationRetrieveResponse { integration }
integration?: ScmIntegration { id, host, oauth, 4 more }
id?: string

id is the unique identifier of the SCM integration

host?: string
oauth?: ScmIntegrationOAuthConfig { clientId, encryptedClientSecret, issuerUrl } | null
clientId?: string

client_id is the OAuth app’s client ID in clear text.

encryptedClientSecret?: string

encrypted_client_secret is the OAuth app’s secret encrypted with the runner’s public key.

formatbyte
issuerUrl?: string

issuer_url is used to override the authentication provider URL, if it doesn’t match the SCM host.

+optional if not set, this account is owned by the installation.

pat?: boolean
runnerId?: string
scmId?: string

scm_id references the scm_id in the runner’s configuration schema that this integration is for

virtualDirectory?: string | null

virtual_directory is the virtual directory path for Azure DevOps Server (e.g., “/tfs”). This field is only used for Azure DevOps Server SCM integrations and should be empty for other SCM types. Azure DevOps Server APIs work without collection when PAT scope is ‘All accessible organizations’.

ScmIntegrationUpdateResponse = unknown

RunnersPolicies

CreateRunnerPolicy
client.runners.policies.create(PolicyCreateParams { groupId, role, runnerId } body, RequestOptionsoptions?): PolicyCreateResponse { policy }
POST/gitpod.v1.RunnerService/CreateRunnerPolicy
DeleteRunnerPolicy
client.runners.policies.delete(PolicyDeleteParams { groupId, runnerId } body, RequestOptionsoptions?): PolicyDeleteResponse
POST/gitpod.v1.RunnerService/DeleteRunnerPolicy
ListRunnerPolicies
client.runners.policies.list(PolicyListParams { token, pageSize, pagination, runnerId } params, RequestOptionsoptions?): PoliciesPage<RunnerPolicy { groupId, role } >
POST/gitpod.v1.RunnerService/ListRunnerPolicies
UpdateRunnerPolicy
client.runners.policies.update(PolicyUpdateParams { groupId, role, runnerId } body, RequestOptionsoptions?): PolicyUpdateResponse { policy }
POST/gitpod.v1.RunnerService/UpdateRunnerPolicy
ModelsExpand Collapse
RunnerPolicy { groupId, role }
groupId?: string
formatuuid
role?: RunnerRole

role is the role assigned to the group

One of the following:
"RUNNER_ROLE_UNSPECIFIED"
"RUNNER_ROLE_ADMIN"
"RUNNER_ROLE_USER"
RunnerRole = "RUNNER_ROLE_UNSPECIFIED" | "RUNNER_ROLE_ADMIN" | "RUNNER_ROLE_USER"
One of the following:
"RUNNER_ROLE_UNSPECIFIED"
"RUNNER_ROLE_ADMIN"
"RUNNER_ROLE_USER"
PolicyCreateResponse { policy }
policy: RunnerPolicy { groupId, role }
groupId?: string
formatuuid
role?: RunnerRole

role is the role assigned to the group

One of the following:
"RUNNER_ROLE_UNSPECIFIED"
"RUNNER_ROLE_ADMIN"
"RUNNER_ROLE_USER"
PolicyDeleteResponse = unknown
PolicyUpdateResponse { policy }
policy: RunnerPolicy { groupId, role }
groupId?: string
formatuuid
role?: RunnerRole

role is the role assigned to the group

One of the following:
"RUNNER_ROLE_UNSPECIFIED"
"RUNNER_ROLE_ADMIN"
"RUNNER_ROLE_USER"