- Automation Suite on Linux Release Notes
- Automation Suite on EKS/AKS Release Notes
2023.10.0
Release date: April 25, 2024
- Automation Hub
- Process Mining
- Test Manager
- Insights
Release date: November 22, 2023
We have released a new version of UiPath.OrganizationMigrationApp, the tool helping you migrate from a standalone product to Automation Suite. The new version of the tool now enables you to migrate to Automation Suite 2023.10.0.
For more details, see Migrating standalone products to Automation Suite.
Release date: November 3, 2023
Erratum - added August 14, 2024: We no longer support updating the Kerberos authentication using the CLI tool. As an alternative, you can update the Kerberos authentication using the method described in Configuring Kerberos authentication via cluster_config.json.
We have revamped our installation experience to ensure that all installation modes, regardless of whether they are online/offline or single-node/multi-node, share similar steps and leverage the same commands. These improvements are aimed at creating a more consistent and seamless installation experience for all users.
cluster_config.json file, but it does not perform the actual installation.
For more details, see the following documentation:
You can now perform an Automation Suite upgrade using parallel clusters. This new upgrade method is called side-by-side upgrade, and it allows you to switch traffic from the old Automation Suite cluster (often referred to as the blue deployment in the industry) to the new cluster (the green deployment). One of the benefits of this approach is that your current environment is not impacted by the upgrade operation in any way. In addition to that, if you encounter issues during upgrade, you can easily roll back to the old deployment.
For extensive requirements, an upgrade matrix, and instructions, see Performing a side-by-side upgrade.
Side-by-side upgrades are the preferred method for upgrading your Automation Suite instance due to its efficiency and less risk of disruptions to workflow operations.
As an alternative to the side-by-side upgrade mechanism, you can use the in-place upgrade method to move from one Automation Suite version to another. If you have ever upgraded Automation Suite in the past, then you should be familiar with this method.
What is specific to this upgrade process is that it keeps your settings and data intact on the same hardware. There is only one cluster involved, which means that you should rely on backup and restore operations in case you want to revert to a previous state.
uipathctl.sh tool, which used to help you perform an automation upgrade.
For extensive requirements, an upgrade matrix, and instructions, see Performing a in-place upgrade.
If you are already using Automation Suite on Linux, but you now think that Automation Suite on EKS/AKS would better cater to your needs, we have good news for you. Migrating to a new installation of Automation Suite on EKS/AKS is now possible.
Note that currently you cannot migrate from Automation Suite embedded to an existing installation of Automation Suite on EKS/AKS.
For details on the requirements, required data migration operations, and step-by-step instructions, see Migrating from Automation Suite on Linux to Automation Suite on EKS/AKS.
In our continuous mission to improve stability and quality, we have implemented an alternative mechanism to Longhorn. This change outlines a direct integration of data and volumes with the disk attached to server machines, leading to several implications:
-
Insights, Docker registry, and monitoring applications now exclusively run on server nodes.
-
External objectstore buckets for Insights can now be configured. For details, see External Objectstore configuration.
-
We have added support for NFSv3.
-
Once the upgrade process is completed without migrating from Longhorn, a cluster restored from a backup would not have Longhorn.
-
AI Center pipeline requires additional storage. The pipeline operates on the machine where the extra AI Center disk has been mounted, which could either be a server or agent machine.
uipathctl. Currently, the main purposes of the new tool are to help you diagnose and troubleshoot issues affecting your Automation
Suite installation, perform a side-by-side upgrade, migrate from Automation Suite on Linux to Automation Suite on EKS/AKS,
migrate to an external OCI-compliant registry, and generate the cluster_config.json file.
uipathctl become the go-to tool in many other scenarios.
The latest release introduces the capability to disable access via pre-signed URLs, enhancing the authority over your external objectstore.
Please note, once this setting is enabled, it is irreversible and applies globally. Individual product-level alterations are not possible.
Take into account that this particular configuration does not support Task Mining and specific activities including Write Storage Text, Upload Storage File, List Storage Files, Read Storage Text, Download Storage File, and Delete Storage File.
We have made substantial enhancements to the external Docker registry. You can now benefit from these new functionalities:
-
Your external Docker registry can be equipped with its private certificate, giving you an additional layer of security.
-
In addition to the usage of a mirror registry script, which requires internet access to copy the Automation Suite artifacts, we now support the
hydrate-registry.shscript. This script will take an offline tar bundle, unpack it, and upload its content directly to the external Docker registry, providing more flexibility and options for managing your registry.
as.tar.gz file, which you can use to perform an offline installation. The offline bundle is split into 52 parts for easier downloading,
and you can reassemble it once all parts are downloaded.
as.tar.gz file in one go continues to remain available for those with sufficient bandwidth.
For more information on how to download and merge these split files, visit our official documentation.
You can now install Automation Suite on machines running Red Hat Enterprise Linux (RHEL) 8.8.
RHEL kernel version kernel-4.18.0-477.10.1.el8_8 is affected by an issue that interrupts the installation or management of the Automation Suite cluster. Make sure that none of the Automation Suite nodes uses this kernel version either pre- or post-installation. You can update the kernel version by running the following command:
dnf install -y kernel kernel-tools kernel-tools-libsdnf install -y kernel kernel-tools kernel-tools-libsAll Automation Suite versions support out-of-the-box SELinux, with default policies enabled.
To ensure adherence to best practices and maintain the stability of your operations, we are steering away from the use of the ArgoCD UI as a means to change settings or parameters.
cluster_config.json file for these purposes. This move aims to maintain a consistent source of truth for your configurations.
However, you can continue to use the ArgoCD UI to troubleshoot, see logs, or other similar operations.
configureUiPathAS.sh script or the CLI tool, you can now configure the authentication using the cluster_config.json file. For details, see Configuring Kerberos authentication via cluster_config.json.
Audit log messages change
User <administrator_name> deallocated all licenses of
user(s) <user_names>.
AI Units allocation
AI units can now also be allocated at the tenant level. This is done from the license allocation window corresponding to the desired tenant in the Admin section.
License allocation endpoints
Two new endpoints are available for allocating licenses from the API:
GET/api/account/{accountId}/user-license/group/{groupId}- call this endpoint to retrieve a list of all available user licenses for creating or editing a group.
- You need View permission on License to use this endpoint.
PUT/api/account/{accountId}/user-license/group/{groupId}- call this endpoint to allocate or update a group rule.
- You need Write permission on License to use this endpoint.
We're excited to announce the latest enhancement to our platform's access control capabilities — the introduction of a new user group: Citizen Developers. This new group is defined at the organization level and will be seamlessly integrated across all services within the platform.
With the Citizen Developers group, citizen developers can access resources pertinent to their work without any unnecessary access clutter, leading to reduced overhead for your administrators.
To learn more about how the user group is integrated into the various services within the platform, refer to the product documentation.
While our existing AAD integration offers automatic attribute mapping, this release introduces the ability for organizations to use custom attribute mappings.
We're launching with custom mapping support for the Business unit attribute which allows you to map attributes like organization divisions with the Business Unit field in the UiPath® platform. This mapping can enhance the contextual understanding of users in your organization and can help integrate user identities with services such as Automation Hub.
You can map the Business unit attribute based on Azure AD attributes or via SAML.
We are discontinuing support for the Deployment Assistant. This will allow us to focus on further developing and refining tools that bring you greater benefits.
We encourage all users to delve into our official documentation to understand the existing tools and features. Please share your feedback on our official documentation; your input is essential in helping us continually enhance and fine-tune our offerings to best serve your needs.
uipathtools and contains a subset of uipathctl capabilities specific to health commands. To make sure you have access to mitigation steps in a timely manner, we plan to
provide updates to uipathtools at a higher cadence than our standard releases.
uipathtools and uipathctl CLI tools are here to provide all the diagnostics functionalities of the old Automation Suite Diagnostics tool, diagnostics-report.sh, which we have removed from our offering.
We have updated the process for enabling Single Sign-On (SSO) for ArgoCD, which now involves using a Dex configuration file and specified parameters.
Read more details in our documentation.
-
Erratum January 2024: The replica cleanup script would incorrectly reclaim storage on the nodes. For more details, see the Storage reclamation patch troubleshooting article.
-
Previously, both scheduled and on-demand backups would fail after one hour of timeout. Now you can extend the timeout interval to three hours. For details, see Enabling the snapshot backup and On-demand snapshot backup.
-
On some occasions, the
configureUiPathAS.shscript did not properly update or read the ODBC connection strings. This behavior no longer occurs. -
A failure would occur when trying to rerun the Automation Suite installer 90 days after the first execution. The installer generated self-signed certificates with a 90-day validity, and rerunning it prompted the revalidation of the already expired certificates.
-
Automation Express licenses were available for allocation in on-premises deployments, despite them being solely intended for cloud environments. The issue is now fixed.
-
Data Service units were not granted to organizations that had Action Center - Named User licenses. The issue is now fixed.
-
When you deleted an organization, its licenses were not released. Now, any licenses allocated to an organization go back to the license pool once the organization is deleted.
-
The
minLevelNLog setting in the config map was not being honored. The defaultminLevelis "Info" indicating that logs of "Info" severity and above should have been logged. However, theminLevelwas not being considered, and logs with lower severity levels, specifically "Trace" and "Debug," were also being written to the logs. -
Previously, there was an issue where well-known SIDs were inadvertently included when retrieving security groups, leading to unexpected behavior. Well-known SIDs are no longer included when fetching security groups, ensuring smoother and more predictable functionality.
-
After upgrading to version 2022.10.1 or later, logging into the host tenant, then logging out, and subsequently switching to a different tenant resulted in redirection back to the previous log-out location instead of the selected tenant. Now, after logging out and switching tenants, you will be correctly redirected to the selected tenant's page instead of the previous log-out location.
orchestrator.testautomation section of the cluster_config.json file, the uipathctl binary ignores the connection string and uses the one under the orchestrator section instead. To address the problem, see the Troubleshooting section.
Erratum - added October 17, 2024: When deploying Automation Suite on AWS machines where only IMDSv2 is enabled, installation fails while populating node labels. To address the issue, see the Important note in Optional: Enabling resilience to zonal failures in a multi-node HA-ready production cluster.
system-upgrade namespace. If the upgrade command fails at any stage (infra, fabric, or service upgrade), take the following steps before
retrying the upgrade:
-
List the existing jobs in the
system-upgradenamespace:kubectl get jobs -n system-upgradekubectl get jobs -n system-upgrade -
Delete the failed jobs:
kubectl -n system-upgrade delete jobs <failed_jobs>kubectl -n system-upgrade delete jobs <failed_jobs>When running the command, replace the<failed_jobs>placeholder with the names of the failed jobs, separated by spaces.
We fixed the issue in Automation Suite 2023.10.6.
System.Net.Http.HttpRequestException: The proxy tunnel request to proxy 'http://<proxyFQDN>:8080/' failed with status code '404'.System.Net.Http.HttpRequestException: The proxy tunnel request to proxy 'http://<proxyFQDN>:8080/' failed with status code '404'.To fix the issue, see the Troubleshooting section.
Erratum - added August 14, 2024: An issue affects the support bundle generation when using an external OCI registry in an offline environment. Under these conditions, the generated support bundle lacks historical logs and cannot upload to any selected external object storage. To fix this issue, see the Troubleshooting section.
ListBucket API prerequisite check fails when using an external objectstore. However, AI Center and Task Mining do not use the ListBucket API permission. We removed the unnecessary check in Automation Suite 2023.10.5.
Erratum - added August 14, 2024: You cannot enable SSO for ArgoCD due to an issue with the Dex image versions. We fixed the issue in Automation Suite 2023.10.5.
snapshot-controller-crds pod to remain in the CrashLoopBackOff state after upgrade. This occurs due to a conflict between the newly installed snapshot-controller and the existing one during the RKE2 upgrade. To fix the issue, see the Troubleshooting section.
Erratum - added August, 2024: Migrating from an in-cluster objectstore to an external objectstore fails due to a configuration issue. Therefore, you must not attempt a migration from the Ceph in-cluster objectstore to an external objectstore in this version of Automation Suite. We fixed the issue in Automation Suite 2023.10.2, where you can safely migrate from Ceph to an external objectstore.
Erratum - added July 24, 2024: Using an external storage with a proxy environment causes Orchestrator, the Automation Suite Support Bundle Tool, Prometheus, Thanos, Fluentd, etc. to fail. We fixed the issue in Automation Suite 2023.10.3.
When generating the support bundle, an incorrect FQDN is used for AKS on Azure Government. We fixed the issue in Automation Suite 2023.10.4.
sudo networkPolicyTool.sh --createNetworkPolicy ./Configs/networkPolicyTool/airflow.yaml --addsudo networkPolicyTool.sh --createNetworkPolicy ./Configs/networkPolicyTool/airflow.yaml --addTo install Network Policy Tool, follow the instructions in this troubleshooting article: Network Policy Tool. This issue is fixed in Automation Suite 23.10.3.
Erratum - added May 20, 2024: On single-node deployments with in-cluster storage, upgrades from version 2022.4.1 or older fail at the fabric stage due to a rook-ceph migration issue. To prevent the issue, follow the instructions in Single-node upgrade fails at the fabric stage.
Erattum - added April 19, 2024: False positive CephMgrIsAbsent alerts are displayed even though there are no storage issues. This issue is fixed in Automation Suite 23.10.3.
Erratum - added April 19, 2024: When uninstalling rook-ceph, an error message related to missing external object storage configuration is displayed. This issue accours even though the migration is succesful. This behavior is fixed in Automation Suite 23.10.3.
Erratum - added April 19, 2024: In certain situations, Ceph metrics and alerts are missing from the monitoring dashboards. To fix the issue, see the Troubleshooting section.
Erratum - added February 28, 2024: Stored procedures do not support collation differences between the SQL server and SQL database. To avoid any potential problems, you must ensure that the collation settings of both SQL server and SQL database are identical.
Erratum - added February 28, 2024: We have identified an issue impacting the side-by-side upgrade of Automation Suite 2022.10 or earlier to 2023.10.0 and 2023.10.1. Due to a faulty migration from MongoDB to SQL Server, the upgrade operation fails if you have Apps enabled and use Kerberos authentication for the SQL Server database.
The recommended solution is to upgrade to Automation Suite 2023.10.2 or later instead.
Erratum - added February 28, 2024: Whenever trying to add a new product to an existing Automation Suite installation, the installer wrongly asks you to provide a temporary registry, causing a failure in the installation process.
To solve the problem, use the following workaround:
- Make sure the temporary registry is up.
- Change the readinessProbe setting of the docker registry StatefulSet by running the following command:
kubectl patch statefulset docker-registry -n docker-registry --type json -p '[{"op": "replace", "path": "/spec/template/spec/containers/0/readinessProbe", "value": {"httpGet":{"scheme":"HTTPS", "path": "/", "port": 5000}}}]'kubectl patch statefulset docker-registry -n docker-registry --type json -p '[{"op": "replace", "path": "/spec/template/spec/containers/0/readinessProbe", "value": {"httpGet":{"scheme":"HTTPS", "path": "/", "port": 5000}}}]'
We recommend using Splunk and forwarding application logs there.
Erratum - added December 19, 2023: After performing an offline installation, the Docker registry readiness probes trigger zombie processes.
To fix the issue, run the following command after performing a 2023.10.0 offline installation to update the existing readiness probes. This step is not required for online installations.
kubectl patch statefulset docker-registry -n docker-registry --type json -p '[{"op": "replace", "path": "/spec/template/spec/containers/0/readinessProbe", "value": {"exec":{"command":["sh","-c", "[ -f /var/lib/registry/ready ] || { echo \"Registry is not seeded\"; exit 1; } "]}}}]'kubectl patch statefulset docker-registry -n docker-registry --type json -p '[{"op": "replace", "path": "/spec/template/spec/containers/0/readinessProbe", "value": {"exec":{"command":["sh","-c", "[ -f /var/lib/registry/ready ] || { echo \"Registry is not seeded\"; exit 1; } "]}}}]'After a Disaster Recovery, Dapr is not restored properly, and the certificates needed by dapr to provide services for Process Mining and Task Mining are incorrect. The dapr, processmining, and taskmining applications appear to be healthy first, but will then go back to progressing state and the environment becomes unstable. When logging in to Process Mining or Task Mining, the application may not load, or return unexpected errors.
See Process Mining troubleshooting for a description of the steps you should take to resolve the issue.
In certain situations, the Out of the Box Packages installer can fail. If this happens, some ML Package versions will be missing in Document Understanding. To fix this, you can either trigger the ArgoCD sync, or wait until the ArgoCD sync triggers the installer automatically to reinstall the packages.
{ for PYODBC.
When upgrading from 2023.4.3 to 2023.10, you run into issues with provisioning AI Center.
"exception":"sun.security.pkcs11.wrapper.PKCS11Exception: CKR_KEY_SIZE_RANGEai-trainer deployment. To do this, run the following command:
kubectl -n uipath rollout restart deploy ai-trainer-deploymentkubectl -n uipath rollout restart deploy ai-trainer-deploymentWe recommend that you regularly check the deprecation timeline for any updates regarding features that will be deprecated and removed.
To find out what has changed on each Automation Suite product, visit the following links.
If the product is greyed out, this new Automation Suite version does not bring any changes to it.
| DISCOVER | BUILD | MANAGE | ENGAGE |
|---|---|---|---|
| AI Center 2023.10.0 | Action Center 2023.10.0 | ||
| Task Mining 2023.10.0 | AI Computer Vision 2023.4.3 | Insights 2023.10.0 | Apps 2023.10.0 |
| Document Understanding 2023.10.0 | Orchestrator 2023.10.0 | ||
| Test Manager 2023.10.0 | |||
This Automation Suite release bundles the following internal components:
|
Component |
Version |
|---|---|
|
RKE2 |
1.26.5 |
|
ArgoCD |
2.7.7 |
|
logging-operator | 3.17.10 |
| logging-operator-logging | 3.17.10 |
| gatekeeper | 3.11.0 |
|
rook-ceph |
1.9.4 |
| prometheus-pushgateway |
2.1.6 |
|
cert-manager |
1.12.3 |
|
rancher-istio |
102.2.0-up1.17.2 |
| rancher-logging | 102.0.1-up3.17.10 |
| rancher-logging-crd | 102.0.1-up3.17.10 |
| rancher-monitoring-crd | 102.0.1-up40.1.2 |
| rancher-gatekeeper-crd | 100.2.0-up3.8.1 |
| rancher-gatekeeper |
100.2.0-up3.8.1 |
| rancher-monitoring |
102.0.1-up40.1.2 |
|
longhorn |
1.4.3 |
|
longhorn-crd |
1.1.100 |
|
reloader |
0.0.129 |
|
csi-driver-smb |
1.8.0 |
|
velero |
3.1.6 |
|
redis-operator |
6.2.18-41 |
|
redis-cluster |
6.2.18-65 |
The migration tool version you need depends on the standalone products you plan to migrate and the targeted Automation Suite version. For more details, see Migration compatibility matrix.
For instructions on migrating a standalone product to the current version of Automation Suite, see Full migration.
- Changes to license-related tenant limitations
- New UiPath.OrganizationMigrationApp version released
- What's new
- Kerberos authentication changes
- Streamlined installation experience
- Introducing side-by-side upgrades
- In-place upgrades enhancements
- Migration from Automation Suite on Linux to Automation Suite on EKS/AKS
- Stabilization and quality enhancement through Longhorn removal
- Introducing uipathctl
- Objectstore access without pre-signed URLs
- Enhanced features for external Docker registry
- Split offline bundle for customers with restricted network access
- New RHEL version supported
- SELinux support
- IMDSv2 support
- Deprecation of ArgoCD UI documentation
- Changes to Kerberos auth configuration
- Licensing news
- Introducing the Citizen Developers user group
- Custom attribute mapping for AAD
- End of life for the Deployment Assistant
- Improvements
- Improved troubleshooting experience
- Improved SSO authentication
- Bug fixes
- Admin bug fixes
- Known issues
- Test Automation SQL connection string is ignored
- Installation fails while populating node labels
- Cannot upgrade due to failed jobs in system-upgrade namespace
- Pods cannot communicate with FQDN in a proxy environment
- Weak ciphers in TLS 1.2
- Support bundle log collection failure
- Unnecessary ListBucket API prerequisite check fails for external objectstore
- Cannot enable SSO for ArgoCD
- snapshot-controller-crds pod in CrashLoopBackOff state after upgrade
- Migration from in-cluster objectstore to external objectstore fails
- Components fail when using external object storage with proxy environment
- Support bundle generated with incorrect FQDN for AKS on Azure Government
- Network policies in Airflow may cause improper functioning of DNS
- Single-node upgrade fails at the fabric stage
- Issues related to CephMgrIsAbsent alerts
- Error message while uninstalling rook-ceph post migrating to a S3 object-store
- Issues affecting Ceph metrics and alerts
- Collation differences between SQL server and SQL database not supported
- Upgrade fails due to MongoDB to SQL Server migration
- Installation failure when adding new products to existing Automation Suite
- Issues affecting log forwarding to government cloud storage
- Zombie processes after performing an offline installation
- After Disaster Recovery Dapr is not working properly for Process Mining and Task Mining
- Document Understanding Out of the Box Packages versions missing
- Character not allowed when setting connection string for Document Understanding
- AI Center provisioning failure after upgrading to 2023.10
- Deprecation timeline
- Bundling details
- Product versions
- Internal component versions
- Migration tool version
