2022.4.8

Erratum: Added 16 January 2024

The SAML SSO Configuration page displayed an incorrect Assertion Customer Service URL. As a workaround, you had to manually configure the Assertion Customer Service URL in the IDP without the partition ID. The Assertion Customer Service URL is now correctly displayed, and the manual workaround is no longer necessary. Upon upgrading to 2022.4.8 or subsequent 2022.4 patches, you will need to change the Assertion Customer Service URL to include the partition ID (can be found in the SAML configuration page).

Release date: 1 September 2023

We have released a new version of the UiPath.OrganizationMigrationApp tool so that you can easily migrate from a standalone UiPath® product to Automation Suite. For details, see Migration prerequisites.

Release date: 11 August 2023

New RHEL version supported

You can now install Automation Suite on machines running Red Hat Enterprise Linux (RHEL) 8.8.

Important:

RHEL kernel version kernel-4.18.0-477.10.1.el8_8 is affected by an issue that interrupts the installation or management of the Automation Suite cluster. Make sure that none of the Automation Suite nodes uses this kernel version either pre- or post-installation. You can update the kernel version by running the following command:

dnf install -y kernel kernel-tools kernel-tools-libs

New alerts for Longhorn backup and snapshot objects

We have introduced new alerts so that you can monitor the number of backup and snapshot objects that Longhorn creates in the system. The following alerts are triggered when the aforementioned number is too high:

• LonghornBackupObjectThresholdExceededWarn

• LonghornBackupObjectThresholdExceededCritical

• LonghornSnapshotObjectThresholdExceededWarn

• LonghornSnapshotObjectThresholdExceededCritical

For details on the alerts and the script you can run to fix the issue that triggered them, see Alert runbook.

Improved Support Bundle Tool

We have made multiple improvements to the Support Bundle tool so that you can easily collect logs when troubleshooting Automation Suite:

• The default number of days for the RKE and UiPath® bundles has been reduced to 2;
• The RKE bundle generation is now disabled by default. To enable it, run the support-bundle.sh -r command;
• Long-running commands in the RKE bundle are now disabled. To enable them, run the scripts/rke2-support-bundle.sh -a command;
• It is now possible to disable Redis bundle generation by running the support-bundle.sh -s command.

Security enhancements

We continue to provide security updates and patches to address Common Vulnerabilities and Exposures (CVEs).

Bug fixes

• When you enable a backup, we now validate the NFS server connectivity with all the nodes. Previously, we only checked the node from which you enabled the backup.

• The Longhorn replica cleanup script was wrongly deleting replicas due to the jq binary being unavailable. We have fixed the issue by ensuring jq is available.

• The config discovery operator was hanging if there was a failure in copying secrets or config maps. Now it continues its operations when when failures occur.

• We have upgraded the version of Stakater so that it can perform a rolling restart of applications when new secrets get created.

• Previously, when uipath-service-rook-ceph-secret was deleted or its fields were updated, recovery was not possible. Now re-running the credential manager job recreates the secret and reverts the fields to their original values.

• The Rancher Webhook certificate would occasionally expire and cause an outage. This issue no longer occurs as we have introduced an auto-renewal mechanism for the Rancher Webhook certificate.

• We have updated cluster_config.json to no longer allow capitalized FQDNs as this led to post-installation issues. We now enforce the FQDN values to be in all lowercase.

Known issues

• Erratum January 2024: The replica cleanup script would incorrectly reclaim storage on the nodes. For more details, see the Storage reclamation patch troubleshooting article.

Known issues

• Erratum - added October 11, 2024: In a proxy environment, if the proxy server uses the same port as the TCP port of any other service in the Istio service mesh, such as port 8080, pods cannot communicate with the FQDN. The issue causes the following error:

  System.Net.Http.HttpRequestException: The proxy tunnel request to proxy 'http://<proxyFQDN>:8080/' failed with status code '404'.

  To fix the issue, see the Troubleshooting section.

• Erratum - added August 29, 2024: We have identified certain vulnerabilities associated with the usage of weak ciphers in TLS 1.2. For details on how to mitigate the issue, see How to address weak ciphers in TLS 1.2.

• Erratum - added May 20, 2024: On single-node deployments with in-cluster storage, upgrades from version 2022.4.1 or older fail at the fabric stage due to a rook-ceph migration issue. To prevent the issue, follow the instructions in this troubleshooting article: Single-node upgrade fails at the fabric stage.

• Erratum - added April 19, 2024: In certain situations, Prometheus pods can fail to start due to an out-of-memory (OOM) error. To fix the issue, see the Troubleshooting section.

• Erratum - added April 19, 2024: In certain situations, Ceph metrics and alerts are missing from the monitoring dashboards. To fix the issue, see the Troubleshooting section.

• Erratum - added April 19, 2024: False positive CephMgrIsAbsent alerts are displayed even though there are no storage issues.

Bundling details

Product versions

To find out what has changed on each Automation Suite product, visit the following links.

If the product is greyed out, this new Automation Suite version does not bring any changes to it.

DISCOVER	BUILD	MANAGE	ENGAGE
Automation Hub 2022.4.7	Automation Ops 2022.4.8	AI Center 2022.4.8	Action Center 2022.4.7
Task Mining 2022.4.7	AI Computer Vision 2022.4.0	Insights 2022.4.8	Apps 2022.4.4
	Document Understanding 2022.4.7	Orchestrator 2022.4.9
		Test Manager 2022.4.7
		Data Service 2022.4.8

Internal third-party component versions

This Automation Suite release bundles the following internal components:

Component	Version
RKE2	v1.21.4+rke2r2
ArgoCD	v2.2.5
rook-ceph	v1.8.9
cert-manager	1.2.0
rancher	2.6.0
rancher-istio	100.0.0-up1.10.4
longhorn	1.3.3
longhorn-crd	1.1.100
reloader	v0.0.89
csi-driver-smb	v1.8.0
rabbitmq-operator	1.5.0
redis-operator	6.2.8-11
redis-cluster	6.2.8-53
mongodb	4.4.4-ent
docker_registry	2.7.1
self_heal_operator	0.0.1