Web UI Overview

The Rack Gateway web UI is the primary way to inspect rack state, manage users, review audit logs, and configure gateway settings.

Accessing the Web UI

From the CLI

rack-gateway web

Direct URL

https://gateway.example.com

You’ll be redirected to Google OAuth if you aren’t signed in. After signing in you land on the Rack page, or on Account Security if you must enroll an MFA method first: until you do, the other pages are disabled.

Main Sections

Rack

Overview of rack metadata (provider, region, version, status).

Apps

Browse apps and app-specific settings.

API Tokens

Manage automation tokens and permissions.

Audit Logs

Review and export activity history.

Account Security

Manage MFA methods, backup codes, and trusted devices.

Settings

Configure gateway-wide security controls (admins only).

Navigation Overview

The sidebar contains these sections (some are admin-only):

Section	Description	Access
Rack	Rack metadata and status	All users
Apps / Processes / Instances / Builds / Releases	Convox operational views	Role-based
Users	Team directory; your own details and sessions	All users (other users’ details and admin actions: Admin only)
API Tokens	Your tokens (admins: every token)	All users (create/edit/delete own tokens: Deployer; anyone’s: Admin)
Deploy Approvals	Pending approvals	Admin only
Audit Logs	Everyone’s audit trail and export	Admin only
My Activity	Your own audit trail	Non-admins (admins use Audit Logs)
Account Security	MFA + trusted devices	All users
Integrations	Slack, GitHub, CircleCI	Admin only
Settings	Global security settings	Admin only
Background Jobs	Job queue visibility	Admin only
Configure CLI	Quick CLI setup dialog	All users

Note

Non-admins can browse the read-only views their role allows, manage their own sessions, and (deployers) their own API tokens. Only admins can change users, integrations, or global settings. The sidebar only shows pages you can use; the gateway enforces the same rules on every request.

App Settings

App-level settings live under Apps → {app} → Settings. This is where admins configure:

• VCS/CI integration per app (GitHub + CircleCI)
• Protected and secret environment variables. The env editor refuses protected ones; admins change them with env set --allow-protected
• Environment variables whose values audit logs and Slack show (every other value is redacted)
• Approved deploy commands
• Service image patterns used for deploy verification

Signing Out

Use the Logout button at the bottom of the sidebar.

Next Steps

• Rack Overview - Rack landing page
• User Management - Users and roles
• API Tokens - Token management
• Audit Logs - Compliance history
• Settings - Global configuration