- Overview
- Requirements
- Installation
- Q&A: Deployment templates
- Configuring the machines
- Configuring the external objectstore
- Configuring an external Docker registry
- Configuring the load balancer
- Configuring the DNS
- Configuring Microsoft SQL Server
- Configuring the certificates
- Online multi-node HA-ready production installation
- Offline multi-node HA-ready production installation
- Disaster recovery - Installing the secondary cluster
- Downloading the installation packages
- install-uipath.sh parameters
- Enabling Redis High Availability Add-On for the cluster
- Document Understanding configuration file
- Adding a dedicated agent node with GPU support
- Adding a dedicated agent Node for Task Mining
- Connecting Task Mining application
- Adding a Dedicated Agent Node for Automation Suite Robots
- Post-installation
- Cluster administration
- Monitoring and alerting
- Migration and upgrade
- Migration options
- Step 1: Moving the Identity organization data from standalone to Automation Suite
- Step 2: Restoring the standalone product database
- Step 3: Backing up the platform database in Automation Suite
- Step 4: Merging organizations in Automation Suite
- Step 5: Updating the migrated product connection strings
- Step 6: Migrating standalone Insights
- Step 7: Deleting the default tenant
- Performing a single tenant migration
- Product-specific configuration
- Best practices and maintenance
- Troubleshooting
- How to troubleshoot services during installation
- How to uninstall the cluster
- How to clean up offline artifacts to improve disk space
- How to clear Redis data
- How to enable Istio logging
- How to manually clean up logs
- How to clean up old logs stored in the sf-logs bucket
- How to disable streaming logs for AI Center
- How to debug failed Automation Suite installations
- How to delete images from the old installer after upgrade
- How to automatically clean up Longhorn snapshots
- How to disable TX checksum offloading
- How to manually set the ArgoCD log level to Info
- How to generate the encoded pull_secret_value for external registries
- How to address weak ciphers in TLS 1.2
- How to work with certificates
- Unable to run an offline installation on RHEL 8.4 OS
- Error in downloading the bundle
- Offline installation fails because of missing binary
- Certificate issue in offline installation
- First installation fails during Longhorn setup
- SQL connection string validation error
- Prerequisite check for selinux iscsid module fails
- Azure disk not marked as SSD
- Failure after certificate update
- Antivirus causes installation issues
- Automation Suite not working after OS upgrade
- Automation Suite requires backlog_wait_time to be set to 0
- GPU node affected by resource unavailability
- Volume unable to mount due to not being ready for workloads
- Support bundle log collection failure
- Failure to upload or download data in objectstore
- PVC resize does not heal Ceph
- Failure to resize PVC
- Failure to resize objectstore PVC
- Rook Ceph or Looker pod stuck in Init state
- StatefulSet volume attachment error
- Failure to create persistent volumes
- Storage reclamation patch
- Backup failed due to TooManySnapshots error
- All Longhorn replicas are faulted
- Setting a timeout interval for the management portals
- Update the underlying directory connections
- Authentication not working after migration
- Kinit: Cannot find KDC for realm <AD Domain> while getting initial credentials
- Kinit: Keytab contains no suitable keys for *** while getting initial credentials
- GSSAPI operation failed due to invalid status code
- Alarm received for failed Kerberos-tgt-update job
- SSPI provider: Server not found in Kerberos database
- Login failed for AD user due to disabled account
- ArgoCD login failed
- Failure to get the sandbox image
- Pods not showing in ArgoCD UI
- Redis probe failure
- RKE2 server fails to start
- Secret not found in UiPath namespace
- ArgoCD goes into progressing state after first installation
- Issues accessing the ArgoCD read-only account
- MongoDB pods in CrashLoopBackOff or pending PVC provisioning after deletion
- Unhealthy services after cluster restore or rollback
- Pods stuck in Init:0/X
- Prometheus in CrashloopBackoff state with out-of-memory (OOM) error
- Missing Ceph-rook metrics from monitoring dashboards
- Pods cannot communicate with FQDN in a proxy environment
- Failure to configure email alerts post upgrade
- No healthy upstream issue
- Document Understanding not on the left rail of Automation Suite
- Failed status when creating a data labeling session
- Failed status when trying to deploy an ML skill
- Migration job fails in ArgoCD
- Handwriting recognition with intelligent form extractor not working
- Failed ML skill deployment due to token expiry
- Running High Availability with Process Mining
- Process Mining ingestion failed when logged in using Kerberos
- Unable to connect to AutomationSuite_ProcessMining_Warehouse database using a pyodbc format connection string
- Airflow installation fails with sqlalchemy.exc.ArgumentError: Could not parse rfc1738 URL from string ''
- How to add an IP table rule to use SQL Server port 1433
- Using the Automation Suite Diagnostics Tool
- Using the Automation Suite support bundle
- Exploring Logs

Automation Suite on Linux installation guide
Starting and shutting down a node
This page explains the manual and automatic startup and shutdown behavior of Automation Suite.
You must always proceed by shutting down one node, performing the required operation, waiting until the node is healthy, and then taking down the other node to perform the same operation.
The following table describes different scenarios you may experience when shutting down cluster services or nodes. The table provides detailed actions you must take for each situation, alongside guidance on understanding the expected behavior in response to these actions.
Scenario |
Action |
Expected behavior |
---|---|---|
Shutting down cluster services on one node without turning off the node, for maintenance or any other reason. |
|
In an HA scenario, most services will remain up. The node should start up without any issue and any down services should restart. |
Shutting down all cluster services without turning off nodes, for maintenance or any other reason. |
|
Services will become unavailable. Nodes should startup without issue. |
Shutting down all nodes. |
If your hypervisor management portal (such as VMware, AWS) allows for services to graceful shutdown without force terminating the machine, carry out a normal shutdown. By default, systemd subsystem allows a grace period for services to shutdown before they are forcefully terminated. However, if your system overwrites configured shutdown times, it may interfere with a graceful shutdown. For example, on AWS, the platform can force terminate a VM after two minutes. As such, the services must be shut down manually as a node drain can take up to 5 minutes (this is a requirement of a graceful shutdown). |
If the shutdown is graceful, the nodes should start up without issue. |
Shutting down an individual node. |
If your hypervisor management portal (such as VMware, AWS) allows for services to graceful shutdown without force terminating the machine, carry out a normal shutdown. By default, systemd subsystem allows a grace period for services to shutdown before they are forcefully terminated. However, if your system overwrites configured shutdown times, it may interfere with a graceful shutdown.For example, on AWS, the platform can force terminate a VM after two minutes. As such, the services must be shut down manually as a node drain can take up to 5 minutes (this is a requirement of a graceful shutdown). |
If the shutdown process is not forceful, the node should reboot without any issues. |
Forcefully terminating a server node. |
Not applicable. |
In most cases the node will start up, but there may be problems with some services that use persistent data. Although these issues are typically recoverable, setting up backups is strongly recommended. The insights pod will not restart until the original node is back online, in order to prevent potential data loss. If the node is not recoverable, contact the support team. |
rke2-service
starts and is followed by node-drainer
and node-uncordon
. node-drainer
does not do any action at startup, just returns confirmation that the service is up.
node-uncordon
only runs once and starts /opt/node-drain.sh nodestart
, which uncordons the node. As part of the drain procedure that occurs at shutdown, this cordons the node, making it unschedulable.
This state persists when the rke2 service starts. As such, the node must be uncordoned after rke2-service
restarts.
Manual startup
rke2-service
was manually stopped, you must start the service again by running the following commands:
- Start the Kubernetes process running on the server node:
systemctl start rke2-server
systemctl start rke2-server - Start the Kubernetes process running on the server node:
systemctl start rke2-agent
systemctl start rke2-agent - Once the
rke2
service is started, uncordon the node to ensure Kubernetes can now schedule workloads on this node:systemctl restart node-uncordon
systemctl restart node-uncordon - Once the node is started, you must drain the node:
systemctl start node-drain.service
systemctl start node-drain.serviceImportant:Skipping step 4 could cause the Kubelet service to shut down in an unhealthy way if the system is restarted.
systemd
stops the services in the order they were started. Since the node-drain
service has the After=rke2-server.service
or After=rke2-agent.service
directive, it executes its shutdown sequence before the rke2-service
shutdown. This means that, in a properly configured system, simply gracefully shutting down the node is a safe operation.
Manual restart
If you plan to stop the rke2 service and reboot the machine, take the following steps:
-
To ensure that the cluster is healthy while performing node maintenance activity, you must drain the workloads running on that node to other nodes. To drain the node, run the following command:
systemctl stop node-drain.service
systemctl stop node-drain.service - Stop the Kubernetes process running on the server node:
systemctl stop rke2-server
systemctl stop rke2-server - Stop the Kubernetes process running on the agent node:
systemctl stop rke2-agent
systemctl stop rke2-agent -
Kill the rke2 services and containerd and all child processes:
This should already be in the path, but it is located atrke2-killall.sh
rke2-killall.sh/bin/rke2-killall.sh
.
- The following unit files are created during installation:
rke2-server.service
(server only). Starts therke2-server
, which starts the server node.rke2-agent.service
(agent only). Starts therke2-agent
, which starts the agent node.node-drain.service
. Used at shutdown time. Executed before shutting downrke2-agent
orrke2-server
and performs a drain. Has a timeout of 300 seconds.node-uncordon.service
. Used at startup to uncordon a node.var-lib-kubelet.mount
. Autogenerated by fstab generator.var-lib-rancher-rke2-server-db.mount
. Autogenerated by fstab generator.var-lib-rancher.mount
. Autogenerated by fstab generator.
node-drain
and node-uncordon
have the After=rke2-server.service
or After=rke2-agent.service
directive. This means that those services will start after the rke2-service
.