automation-suite
2023.10
false
Automation Suite in der EKS/AKS-Installationsanleitung
- Überblick
- Anforderungen
- Installation
- Nach der Installation
- Migration und Upgrade
- Aktualisieren der Automation Suite auf EKS/AKS
- Schritt 1: Verschieben der Identitätsorganisationsdaten von einer eigenständigen in die Automation Suite
- Schritt 2: Wiederherstellen der eigenständigen Produktdatenbank
- Schritt 3: Sichern der Plattformdatenbank in der Automation Suite
- Schritt 4: Zusammenführen von Organisationen in der Automation Suite
- Schritt 5: Aktualisieren der migrierten Produktverbindungszeichenfolgen
- Schritt 6: Migrieren des eigenständigen Orchestrators
- Schritt 7: Migrieren von eigenständigen Insights
- Schritt 8: Migrieren des eigenständigen Test Managers
- Schritt 9: Löschen des Standardmandanten
- Durchführen der Migration eines einzelnen Mandanten
- Migrieren von der Automation Suite unter Linux zur Automation Suite unter EKS/AKS
- Überwachung und Warnungen
- Clusterverwaltung
- Produktspezifische Konfiguration
- Konfigurieren von Orchestrator-Parametern
- Orchestrator-appSettings
- Konfigurieren von AppSettings
- Konfigurieren der maximalen Anforderungsgröße
- Überschreiben der Speicherkonfiguration auf Clusterebene
- Konfigurieren von Anmeldeinformationsspeichern
- Konfigurieren der Verwendung von einem Verschlüsselungsschlüssel pro Mandant
- Bereinigen der Orchestrator-Datenbank
- Fehlersuche und ‑behebung
- Das Sicherungssetup funktioniert nicht, da die Verbindung mit Azure Government fehlgeschlagen ist
- Hängende Pods im uipath-Namespace bei Aktivierung von benutzerdefinierten Knoten-Markierungen
- Automation Hub und Apps können mit Proxy-Setup nicht gestartet werden
- Pods können nicht mit FQDN in einer Proxy-Umgebung kommunizieren
- SQL-Verbindungszeichenfolge der Testautomatisierung wird ignoriert
- EKS-Sicherung aufgrund der Velero-Version
- Die Velero-Sicherung schlägt mit dem Fehler „FehlgeschlageneValidierung“ fehl
- Beim Zugriff auf den FQDN wird der Fehler „RBAC-Zugriff verweigert“ zurückgegeben
- Manuelle Schadensbegrenzung bei ArgoCD NetworkPolicy (GHSA-47m3-95c7-g2g8)
Wichtig :
Es kann 1–2 Wochen dauern, bis die Lokalisierung neu veröffentlichter Inhalte verfügbar ist.
Beispiel für AKS input.json
Referenzbeispiel einer input.json-Datei mit allen für die Automation Suite in AKS aktivierten Produkten, einschließlich obligatorischer und optionaler Parameter.
Das folgende Beispiel zeigt eine input.json -Datei, in der alle aktivierten Produkte sind, sowie die obligatorischen und optionalen Konfigurationsparameter für die Automation Suite in AKS. Sie können das Beispiel als Referenz verwenden und Änderungen entsprechend Ihren Umgebungsanforderungen vornehmen.
Beachten Sie, dass für die Mindestauswahl an UiPath®-Produkten die Plattformdienste aktiviert sein müssen. Ersetzen Sie FQDNs, Hostnamen, Benutzernamen und Kennwörter sowie SQL-Verbindungszeichenfolgen durch Ihre eigenen Konfigurationen.
{
"kubernetes_distribution": "aks",
"install_type": "online",
"profile": "ha",
"registries": {
"docker": {
"url": "registry.uipath.com",
"username": "",
"password": ""
},
"helm": {
"url": "registry.uipath.com",
"username": "",
"password": ""
}
},
"fqdn": "automationsuite.mycompany.com",
"admin_username": "admin",
"admin_password": "<your-password>",
"fips_enabled_nodes": false,
"fabric": {
"redis": {
"license": "", // fabric.redis.license must not be specified when fabric.redis.{hostname, password, port} are specified
"ha":false,
"hostname": "redis-cache.mycompany.com",
"password": "<your-password>",
"port": 6380,
"tls": true
}
},
"external_object_storage": {
"enabled": true,
"create_bucket": true,
"storage_type": "azure",
"use_managed_identity": false,
"azure_fqdn_suffix": "core.windows.net",
"account_key": "<your-account-key>",
"use_workload_identity" : "",
"account_name": "as-storage-account",
// storage type s3 specific config:
"fqdn": "",
"port": "",
"region": "us-east-1",
"access_key": "",
"secret_key": "",
"use_instance_profile": true,
"bucket_name_prefix": "",
"bucket_name_suffix": ""
},
"infra": {
"docker_registry": {}
},
"ingress": {
"service_annotations": {
"service.beta.kubernetes.io/azure-load-balancer-internal": "false",
"service.beta.kubernetes.io/azure-load-balancer-ipv4": "<ip>"
},
"gateway_selector": {
"istio": "ingressgateway"
}
},
"istioMinProtocolVersion": "TLSV1_3",
"disable_presigned_url": false,
"tolerations": [],
"exclude_components": [],
"server_certificate": {
"tls_cert_file": "",
"tls_key_file": "",
"ca_cert_file": ""
},
"additional_ca_certs": "",
"registry_ca_cert": "",
"identity_certificate": {
"saml_current_service_cert_file": "",
"saml_current_service_cert_pass": "",
"saml_future_service_cert_file": "",
"saml_future_service_cert_pass": "",
"ldap_cert_authority_file": ""
},
"sql": {
"create_db": false,
"server_url": "",
"port": "",
"username": "",
"password": ""
},
"orchestrator": {
"enabled": true,
"external_object_storage": {
"bucket_name": "uipath-as-orchestrator"
},
"testautomation": {
"enabled": true
},
"updateserver": {
"enabled": true
}
},
"processmining": {
"external_object_storage": {
"bucket_name": "uipath-as-processmining"
},
"enabled": true
},
"integrationservices": {
"enabled": true,
"external_object_storage": {
"bucket_name": "uipath-as-platform"
}
},
"insights": {
"enabled": true,
"enable_realtime_monitoring": false,
"external_object_storage": {
"bucket_name": "uipath-as-platform"
}
},
"automation_hub": {
"enabled": true,
"external_object_storage": {
"bucket_name": "uipath-as-platform"
}
},
"automation_ops": {
"enabled": true,
"external_object_storage": {
"bucket_name": "uipath-as-platform"
}
},
"aicenter": {
"external_object_storage": {
"bucket_name": "uipath-as-platform"
},
"enabled": true
},
"documentunderstanding": {
"external_object_storage": {
"bucket_name": "uipath-as-platform"
},
"enabled": true
},
"test_manager": {
"enabled": true,
"external_object_storage": {
"bucket_name": "uipath-as-platform"
}
},
"action_center": {
"enabled": true,
"external_object_storage": {
"bucket_name": "uipath-as-platform"
}
},
"apps": {
"enabled": true,
"external_object_storage": {
"bucket_name": "uipath-as-platform"
}
},
"asrobots": {
"packagecaching": true,
"packagecachefolder": "/uipath_asrobots_package_cache",
"external_object_storage": {
"bucket_name": "uipath-as-platform"
},
"enabled": true
},
"studioweb": {
"enabled": false
},
"dataservice": {
"enabled": true,
"external_object_storage": {
"bucket_name": "uipath-as-dataservice"
}
},
"storage_class": "managed-premium",
"storage_class_single_replica": "azurefile-csi",
"platform": {
"enabled": true
},
"telemetry_optout": false,
"pod_identity" : {
"enabled": true,
"aks_managed_identity_client_id": <client-id>
},
"proxy": {
"enabled": true,
"http_proxy": "<http://<PROXY-SERVER-IP>:<PROXY-PORT>",
"https_proxy": "<http://<PROXY-SERVER-IP>:<PROXY-PORT>",
"no_proxy": "paste list from Configuring the cluster section"
},
"snapshot": {
"enabled": true,
"aks_infra_resource_group": "MC_ci-asaks4002399_ci-asaks4002399_eastus",
"external_object_storage": {
"storage_type": "azure",
"cloud_name": "AzurePublicCloud",
"resource_group": "ci-asaks4002399",
"auth_mode": "ServicePrincipal",
"subscription_id": "b65b0225-ce9b-4a79-9dd9-c00071d40d64",
"tenant_id": "d8353d2a-b153-4d17-8827-902c51f72357",
"account_name": "storaccid2547865",
"bucket_name": "uipath-backup",
"client_id": "1fbd7d95-5f8c-4f70-90a6-fdf20310d10e",
"client_secret": "----"
}
},
"sql_connection_string_template": "Server=tcp:mssql.mycompany.com,1443;Initial Catalog=DB_NAME_PLACEHOLDER;Persist Security Info=False;User Id=sqladmin;Password='<your-password>';MultipleActiveResultSets=False;Encrypt=True;TrustServerCertificate=True;Connection Timeout=30;Max Pool Size=100;",
"sql_connection_string_template_jdbc": "jdbc:sqlserver://mssql.mycompany.com:1443;database=DB_NAME_PLACEHOLDER;user=sqladmin;password={<your-password>};encrypt=true;trustServerCertificate=true;loginTimeout=30;hostNameInCertificate=mssql.mycompany.com",
"sql_connection_string_template_odbc": "SERVER=mssql.mycompany.com,1443;DATABASE=DB_NAME_PLACEHOLDER;DRIVER={ODBC Driver 17 for SQL Server};UID=sqladmin;PWD={<your-password>};Encrypt=yes;TrustServerCertificate=yes;Connection Timeout=30;hostNameInCertificate=mssql.mycompany.com",
"sql_connection_string_template_sqlalchemy_pyodbc": "mssql+pyodbc://sqladmin:<your-password>@mssql.mycompany.com:1443/DB_NAME_PLACEHOLDER?driver=ODBC+Driver+17+for+SQL+Server",
"postgresql_connection_string_template_sqlalchemy_pyodbc": "postgresql+psycopg2://sa:<password>@135.235.240.165:5432/DB_NAME_PLACEHOLDER"
}
{
"kubernetes_distribution": "aks",
"install_type": "online",
"profile": "ha",
"registries": {
"docker": {
"url": "registry.uipath.com",
"username": "",
"password": ""
},
"helm": {
"url": "registry.uipath.com",
"username": "",
"password": ""
}
},
"fqdn": "automationsuite.mycompany.com",
"admin_username": "admin",
"admin_password": "<your-password>",
"fips_enabled_nodes": false,
"fabric": {
"redis": {
"license": "", // fabric.redis.license must not be specified when fabric.redis.{hostname, password, port} are specified
"ha":false,
"hostname": "redis-cache.mycompany.com",
"password": "<your-password>",
"port": 6380,
"tls": true
}
},
"external_object_storage": {
"enabled": true,
"create_bucket": true,
"storage_type": "azure",
"use_managed_identity": false,
"azure_fqdn_suffix": "core.windows.net",
"account_key": "<your-account-key>",
"use_workload_identity" : "",
"account_name": "as-storage-account",
// storage type s3 specific config:
"fqdn": "",
"port": "",
"region": "us-east-1",
"access_key": "",
"secret_key": "",
"use_instance_profile": true,
"bucket_name_prefix": "",
"bucket_name_suffix": ""
},
"infra": {
"docker_registry": {}
},
"ingress": {
"service_annotations": {
"service.beta.kubernetes.io/azure-load-balancer-internal": "false",
"service.beta.kubernetes.io/azure-load-balancer-ipv4": "<ip>"
},
"gateway_selector": {
"istio": "ingressgateway"
}
},
"istioMinProtocolVersion": "TLSV1_3",
"disable_presigned_url": false,
"tolerations": [],
"exclude_components": [],
"server_certificate": {
"tls_cert_file": "",
"tls_key_file": "",
"ca_cert_file": ""
},
"additional_ca_certs": "",
"registry_ca_cert": "",
"identity_certificate": {
"saml_current_service_cert_file": "",
"saml_current_service_cert_pass": "",
"saml_future_service_cert_file": "",
"saml_future_service_cert_pass": "",
"ldap_cert_authority_file": ""
},
"sql": {
"create_db": false,
"server_url": "",
"port": "",
"username": "",
"password": ""
},
"orchestrator": {
"enabled": true,
"external_object_storage": {
"bucket_name": "uipath-as-orchestrator"
},
"testautomation": {
"enabled": true
},
"updateserver": {
"enabled": true
}
},
"processmining": {
"external_object_storage": {
"bucket_name": "uipath-as-processmining"
},
"enabled": true
},
"integrationservices": {
"enabled": true,
"external_object_storage": {
"bucket_name": "uipath-as-platform"
}
},
"insights": {
"enabled": true,
"enable_realtime_monitoring": false,
"external_object_storage": {
"bucket_name": "uipath-as-platform"
}
},
"automation_hub": {
"enabled": true,
"external_object_storage": {
"bucket_name": "uipath-as-platform"
}
},
"automation_ops": {
"enabled": true,
"external_object_storage": {
"bucket_name": "uipath-as-platform"
}
},
"aicenter": {
"external_object_storage": {
"bucket_name": "uipath-as-platform"
},
"enabled": true
},
"documentunderstanding": {
"external_object_storage": {
"bucket_name": "uipath-as-platform"
},
"enabled": true
},
"test_manager": {
"enabled": true,
"external_object_storage": {
"bucket_name": "uipath-as-platform"
}
},
"action_center": {
"enabled": true,
"external_object_storage": {
"bucket_name": "uipath-as-platform"
}
},
"apps": {
"enabled": true,
"external_object_storage": {
"bucket_name": "uipath-as-platform"
}
},
"asrobots": {
"packagecaching": true,
"packagecachefolder": "/uipath_asrobots_package_cache",
"external_object_storage": {
"bucket_name": "uipath-as-platform"
},
"enabled": true
},
"studioweb": {
"enabled": false
},
"dataservice": {
"enabled": true,
"external_object_storage": {
"bucket_name": "uipath-as-dataservice"
}
},
"storage_class": "managed-premium",
"storage_class_single_replica": "azurefile-csi",
"platform": {
"enabled": true
},
"telemetry_optout": false,
"pod_identity" : {
"enabled": true,
"aks_managed_identity_client_id": <client-id>
},
"proxy": {
"enabled": true,
"http_proxy": "<http://<PROXY-SERVER-IP>:<PROXY-PORT>",
"https_proxy": "<http://<PROXY-SERVER-IP>:<PROXY-PORT>",
"no_proxy": "paste list from Configuring the cluster section"
},
"snapshot": {
"enabled": true,
"aks_infra_resource_group": "MC_ci-asaks4002399_ci-asaks4002399_eastus",
"external_object_storage": {
"storage_type": "azure",
"cloud_name": "AzurePublicCloud",
"resource_group": "ci-asaks4002399",
"auth_mode": "ServicePrincipal",
"subscription_id": "b65b0225-ce9b-4a79-9dd9-c00071d40d64",
"tenant_id": "d8353d2a-b153-4d17-8827-902c51f72357",
"account_name": "storaccid2547865",
"bucket_name": "uipath-backup",
"client_id": "1fbd7d95-5f8c-4f70-90a6-fdf20310d10e",
"client_secret": "----"
}
},
"sql_connection_string_template": "Server=tcp:mssql.mycompany.com,1443;Initial Catalog=DB_NAME_PLACEHOLDER;Persist Security Info=False;User Id=sqladmin;Password='<your-password>';MultipleActiveResultSets=False;Encrypt=True;TrustServerCertificate=True;Connection Timeout=30;Max Pool Size=100;",
"sql_connection_string_template_jdbc": "jdbc:sqlserver://mssql.mycompany.com:1443;database=DB_NAME_PLACEHOLDER;user=sqladmin;password={<your-password>};encrypt=true;trustServerCertificate=true;loginTimeout=30;hostNameInCertificate=mssql.mycompany.com",
"sql_connection_string_template_odbc": "SERVER=mssql.mycompany.com,1443;DATABASE=DB_NAME_PLACEHOLDER;DRIVER={ODBC Driver 17 for SQL Server};UID=sqladmin;PWD={<your-password>};Encrypt=yes;TrustServerCertificate=yes;Connection Timeout=30;hostNameInCertificate=mssql.mycompany.com",
"sql_connection_string_template_sqlalchemy_pyodbc": "mssql+pyodbc://sqladmin:<your-password>@mssql.mycompany.com:1443/DB_NAME_PLACEHOLDER?driver=ODBC+Driver+17+for+SQL+Server",
"postgresql_connection_string_template_sqlalchemy_pyodbc": "postgresql+psycopg2://sa:<password>@135.235.240.165:5432/DB_NAME_PLACEHOLDER"
}