uTask - Open Source Workflow Automation Engine

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

# Why uTask Over Other Automation Engines uTask is OVH's open source automation engine purpose-built for turning operational runbooks into auditable, repeatable, self-service tasks. Unlike imperative job runners where logic lives in scattered scripts, uTask uses a purely declarative YAML model: you describe a process once as a task template with typed and validated inputs, steps that declare their dependencies, conditions, loops, and JSON schema checks on each step's output. The engine handles execution, retries, human approval gates, and maintains a complete encrypted audit trail - all queryable via REST API or web dashboard. Because tasks are resumable by design, an interrupted run picks up exactly where it stopped rather than restarting from the beginning. This matters for long-running workflows spanning multiple systems where partial re-execution would cause inconsistencies or duplicate actions. ## Ready to Run in Under 10 Minutes This AMI delivers uTask fully installed and configured with its PostgreSQL database on the same machine, running as hardened systemd services behind nginx. A working automation engine is answering within minutes of launch - you skip the database setup, schema loading, encryption key management, and access control wiring that a manual install requires. Two self-contained example templates are preloaded so the dashboard is useful the moment you log in and you have a working pattern to copy when you write your first template. ## Concrete Workflow Scenario Consider automating a quarterly access review across your infrastructure: uTask can orchestrate SSH connections to each server to pull access lists, aggregate results, pause for manager approval on flagged accounts, execute revocations on approval, send notification emails, and record the entire chain as an encrypted audit record. Each step declares its dependencies, so failures are isolated and retried without re-running completed work. The same pattern applies to deployment rollbacks requiring SRE sign-off, scheduled compliance checks, or any multi-step process your team currently executes from a wiki page. ## Security Architecture Authentication follows the design uTask itself prescribes. uTask has no built-in login - it sits behind a trusted reverse proxy that identifies the caller. In this image, nginx is that proxy. It authenticates every request against a credential unique to your instance and passes the verified username to uTask, overwriting anything a client tries to claim. uTask is bound away from the network so the proxy cannot be sidestepped. Nothing secret is baked into the image: the database password, the dashboard password, and the storage encryption key that protects every task input and result at rest are all generated on the first boot of each instance and written to a root-only file. The image ships with no database, so no build-time data or shared key can follow you into production. ## Key Capabilities - Declare workflows as versioned YAML templates instead of shell scripts on someone's laptop

• Expose them to your team as self-service tasks through a web dashboard or REST API
• Drive real systems with built-in actions for HTTP calls, SSH commands, scripts, email, notifications, and subtasks
• Require human validation on steps that need a second pair of eyes
• Keep a full, encrypted, queryable audit trail of everything that ran, who asked for it, and what it returned ## Get Started Read the generated credentials from /root/.utask-credentials, open the dashboard, run the bundled example task, and watch the engine resolve it step by step. Then drop your own template into the templates directory. cloudimg engineers can help you model your runbooks as templates, front the dashboard with your own TLS certificate and domain, wire uTask into your existing identity provider and monitoring, and plan encryption key rotation. To discuss your automation requirements before subscribing or to book a guided walkthrough, contact cloudimg support via live chat or email. This is a repackaged open source software product with additional charges for cloudimg support services. uTask is licensed under the BSD 3-Clause License. All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.