doc: replace self-hosted runner draft with private runner documentation

Author: henryde

docs/administration.index.md

@@ -56,7 +56,7 @@ per meshcloud installation.
 |   [Platform Notifications](administration.platforms.md#platform-notifications)                       |       ✓       |       ✓       |     ✓      |             |            |                    |                    |                      |
 |   [Platform Restrictions](administration.platforms.md#restrict-platform-access)                      |       ✓       |       ✓       |     ✓      |  ✓   |            |                    |                    |                      |
 |   [Landing Zones](administration.landing-zones.md)                                                   |       ✓       |       ✓       |     ✓      |             |            |                    |                    |                      |
-|   [Usage Reports](meshcloud.project-metering.md#tenant-usage-reports.md)                                |       ✓       |       ✓       |                   |             |  ✓  |                    |                    |                      |
+|   [Usage Reports](meshcloud.project-metering.md#tenant-usage-reports)                                |       ✓       |       ✓       |                   |             |  ✓  |                    |                    |                      |
 |   [Tenants](administration.tenants.md)                                                                    |       ✓       |       ✓       |     ✓      |  ✓   |            |                    |                    |         ✓     |
 |   View [Unmanaged Tenants](administration.unmanaged-tenants.md)                                           |       ✓       |       ✓       |     ✓      |             |            |                    |                    |         ✓     |
 |   Assign [Unmanaged Tenants](administration.unmanaged-tenants.md#assigning-unmanaged-tenants)             |       ✓       |             |           |             |            |                    |                    |             |

docs/meshstack.building-blocks.private-runners.md

@@ -0,0 +1,39 @@
+---
+id: meshstack.building-blocks.private-runners
+title: Private Runners
+---
+
+Private runners can be used to execute building blocks in your own cloud environment to enable access to resources that are not publicly accessible.
+
+These runners are still operated by meshcloud but run outside of your meshStack.
+Otherwise private runners operate like regular runners and connects to meshStack via meshStack API. 
+
+When using a private runner it will run all building blocks from your meshStack.
+
+## Requirements for private runners
+
+To use private runners meshcloud operators need access to an environment with
+
+- network access to your meshStack,
+- internet access for sourcing building block code and requirements (e.g. Terraform providers),
+- a way to run container based workloads (e.g. Kubernetes),
+- a way to facilitate automatic updates to the runner.
+
+## Communication between private runners and meshStack
+
+The private runner connects to the parent meshStack to receive building block executions.
+Since the private runner opens a connection to your meshStack, inbound connections to the runner are not needed.
+
+```mermaid
+graph LR
+
+subgraph meshStack
+  API
+end
+
+subgraph private network
+  runner[private runner]
+end
+
+runner --HTTPS via public internet--> API
+```

website/sidebars.json

@@ -73,7 +73,7 @@
     ],
     "Building Blocks": [
       "administration.building-blocks",
-      "meshstack.building-blocks.self-hosted-runners",
+      "meshstack.building-blocks.private-runners",
       "meshstack.building-blocks.meshStack-http-backend",
       "meshstack.building-blocks.permission-delegation-aws",
       "meshstack.building-pipeline-integration",
@@ -153,4 +153,4 @@
       "meshstack.how-to.get-started-building-blocks"
     ]
   }
-}
+}