New
Machine Runner Orchestrator (previously Machine Provisioner), which automatically scales self-hosted machine runner VMs to match CI demand, is now generally available (GA).
Machine Runner Orchestrator adds:
- Multi-resource-class support: CPU, GPU, and ARM workloads can all autoscale from a single deployment, removing the single-resource-class limit from the preview release.
- CLI and API controls for queue pause/resume and graceful agent draining before scale-down.
- A Prometheus-compatible metrics endpoint, so you can wire fleet health into monitoring you already run.
- Support for GKE, AKS, and EKS, in addition to any KubeVirt-based Kubernetes cluster.
Runner Provisioner is included with self-hosted runners on every CircleCI plan, at no additional cost.
Breaking
The product was fully renamed from runner-provisioner to machine-runner-orchestrator: Helm chart name, container image repository, and Packagecloud package repository all changed to reflect that. Existing deployments must be uninstalled and reinstalled under the new name.
helm list -n <k8s_namespace>
helm uninstall runner-provisioner -n <k8s_namespace>
helm repo add circleci_machine-runner-orchestrator https://packagecloud.io/circleci/machine-runner-orchestrator/helm
helm repo update
helm install machine-runner-orchestrator circleci_machine-runner-orchestrator/machine-runner-orchestrator \
--namespace <k8s_namespace> \
--version 1.0.0 \
--values my-values.yaml
Keep in mind that Runners for the configured resource classes will be offline between uninstalling the old chart and installing the new one.
Security
This version patches two high-severity gRPC-Go denial-of-service vulnerabilities: heap memory exhaustion via HTTP/2 frame fragmentation (CVE-2026-84304) and a crash on requests missing :authority/Host headers (CVE-2026-84445).