Mental model
When you run a journey with--cloud (or trigger a cloud run from the UI or a scheduled automation), Reqflo:
- Resolves the journey’s current build artifact — the compiled, versioned representation of the journey’s steps, values, and assertions.
- Dispatches the artifact to a durable worker for execution.
- The worker executes each step, resolving secret references from cloud-managed secrets storage (never from the client).
- Results, assertions, logs, and evidence are collected and returned to the UI and any configured reporters.
Behavior reference
| Behavior | Description |
|---|---|
| Artifact-based execution | The Cloud Runner always executes a build artifact, not the live journey definition. This ensures consistency between what was tested and what is running. |
| Durable worker execution | Runs are managed by a durable worker that can survive transient failures. If a run step fails mid-journey, the failure is captured and reported rather than silently lost. |
| Cloud-managed secret resolution | Secret references in journeys are resolved inside the Cloud Runner against cloud-managed secrets storage. Secret values are never passed from the client and never appear in logs or output. |
| Result reporting | Run output — request/response details, assertion results, derived values, errors, and logs — is returned to Reqflo and available in the UI and any configured output formats. |
| Parallelism | Data-driven runs (using --data) dispatch multiple run instances in parallel, each handling one row or record from the data file. |
| Environment targeting | The Cloud Runner respects the --env flag, pulling environment values (base URLs, service config) for the specified environment. |
Secrets in the Cloud Runner
Secret references work differently from other value types. When a journey step needs a secret:- The secret is identified by name only in the journey YAML and UI.
- The actual secret value is stored in cloud-managed secrets storage, managed via the Admin → Secrets configuration.
- At run time, the Cloud Runner resolves the secret value internally. It is never sent from the client, never logged, and never visible in run output.
--cloud), secret references resolve from your local environment or local secret configuration instead.
Secret values are never displayed anywhere in Reqflo — not in the UI, not in logs, not in run output. If a secret cannot be resolved, the run fails with a missing secret error. See Errors.
When to use the Cloud Runner
| Scenario | Recommendation |
|---|---|
| CI/CD pipeline runs | Use --cloud for consistent, infrastructure-managed execution. |
| Scheduled automation | Cloud runs are the standard mode for scheduled journeys. |
| Production smoke tests | Cloud Runner with cloud-managed secrets keeps credentials off developer machines. |
| Local development and debugging | Local runs (without --cloud) are faster for iteration. |
| Runbook execution | Runbooks can trigger Cloud Runner runs depending on configuration. |

