Deploy Approvals
Require admin approval before CI/CD deployments.
Rack Gateway integrates with external services for notifications, CI/CD automation, and enhanced security workflows.
Deploy Approvals
Require admin approval before CI/CD deployments.
Slack
Send security and deployment notifications to Slack channels.
Receive security alerts via email using Postmark.
Enforce admin review before deployments:
Configure CI/CD token
Create an API token with the cicd role
Configure the app
Set the app’s vcs_repo and service_image_patterns, and for CircleCI the approval job name and
circleci_auto_approve_on_approval
Set up CI workflow
Add an approval request step and a hold job to your CircleCI config
Get real-time notifications in Slack:
Create Slack app
Use the provided manifest to create your Slack app
Configure credentials
Set SLACK_CLIENT_ID and SLACK_CLIENT_SECRET
Connect via UI
Navigate to Integrations and authorize Slack
Configure channels
Route different event types to appropriate channels
Receive security alerts via email:
Create Postmark account
Sign up at postmarkapp.com
Configure gateway
Set POSTMARK_API_TOKEN and POSTMARK_FROM
Automatic notifications
Security events are sent automatically
Integrations can respond to these event categories:
Every audit log entry can be routed to Slack with an action pattern; the defaults are listed on the Slack page. Email is sent for a fixed set of events:
| Category | Examples | |
|---|---|---|
| Authentication | New CLI login, failed login | The user |
| MFA | Failed verification, automatic lock after 5 failures | The user; admins when an account is locked |
| User Management | User added, locked, unlocked | The user; admins when a user is added |
| API Tokens | Token created | The owner and the other admins |
| Rack Parameters | Parameters changed | Admins |
| Security | Rate limit exceeded | The user and admins |
Deploy approval requests also reach CI and GitHub: approving one can approve the CircleCI hold job, and the gateway can comment on the pull request.
| Variable | Integration | Description |
|---|---|---|
SLACK_CLIENT_ID | Slack | OAuth client ID |
SLACK_CLIENT_SECRET | Slack | OAuth client secret |
POSTMARK_API_TOKEN | Postmark API token | |
POSTMARK_FROM | Sender email address | |
CIRCLECI_TOKEN | CircleCI | API token for job approval |
GITHUB_TOKEN | GitHub | API token for commit verification and PR comments |
GITHUB_API_URL | GitHub | REST API root for GitHub Enterprise (default https://api.github.com) |
See Configuration Reference for complete details.