Offboarding

Every Runway workload has resources provisioned in two layers:

1. The deployment project resources managed by reconciler
2. The infrastructure resources managed by provisioner

For complete and safe offboarding, resources must be removed in the correct order: first the reconciler-managed resources, then the provisioner-managed resources.

There are two main approaches to offboarding Runway services:

• Option 1: Removing the only service in a repository or all services at once
• Option 2: Removing one specific service from a multi-service repository

1. Create a merge request to remove the service from the workloads configuration file:
   • Current path: https://gitlab.com/gitlab-com/gl-infra/platform/runway/provisioner/-/blob/main/config/runtimes/cloud-run/workloads.yml
   • Include a reference to the offboarding instructions in your MR
   • Assign to a Runway maintainer for approval

1. Trigger the “Trigger dry run to remove workloads” job
2. Review the Terraform destroy plans using the provided URLs
3. Approve the merge request
4. Trigger a new pipeline
5. In the new pipeline, run the “Trigger workload removal” job to destroy resources in the deployment projects
6. Once complete, retry the “Check workloads to destroy” job to unblock the pipeline
7. Complete the review and merge the MR
8. The default branch pipeline will remove the remaining provisioner-managed resources

To turn down a specific service in a multi-service repository:

1. Create a CI variable in the service project named DESTROY_RUNWAY_WORKLOAD with the value set to the specific Runway Service ID. This is the same ID used elsewhere in your .gitlab-ci.yml file and is equal to the deployment repository name

   To turn down all services in the repository set DESTROY_RUNWAY_WORKLOAD to EVERYTHING.

2. Trigger a Runway deployment pipeline (e.g. using a dummy commit)

3. Once resources are removed, create an MR to remove the service from the inventory file

• Always verify that dry-run outputs match expectations before proceeding with destruction
• Reconciler-managed resources must be destroyed before provisioner archives the deployment project
• For complex offboarding scenarios, consult with the Runway team before proceeding

For more detailed information on safely removing Runway workloads, refer to the workload removal instructions in the Provisioner README.