automation-suite
2.2510
false
UiPath logo, featuring letters U and I in white

Automation Suite on Linux installation guide

Last updated Nov 13, 2025

Migrating from in-cluster registry to an external OCI-compliant registry

Note:

This step is required if you want to use an external registry for the Automation Suite artifacts. This is the recommended approach and improves the overall experience of using Automation Suite because of the ease of use, global availability, security and access control, and integration.

#

Step

1.
Update the cluster_config.json file with the external OCI-compliant registry details.

2.
Copy the installer and cluster_config.json to the other machines. See more...

3.

Configure all the nodes to use the external registry. See more...

4.

Configure ArgoCD to use the external registry. See more...

5.

This step depends on your migration scenario:

6.

Uninstall the internal registry. See more...

Copying the installer and cluster_config.json to the other machines

If you configure the external registry during the upgrade, make sure that the installer file and cluster_config.json file are available on the first server and on all the other machines before proceeding.

Files

Location on all the machines

as-installer

/opt/UiPathAutomationSuite/latest/installer

cluster_config.json

/opt/UiPathAutomationSuite/cluster_config.json

Configuring all the nodes to use the external registry

To configure the nodes to use the external registry, take the following steps one by one on all the nodes in the cluster:
  1. Set the PATH variable to use the uipathctl tool, and navigate to the installer folder:
    export PATH=$PATH:/opt/UiPathAutomationSuite/latest/installer/binexport PATH=$PATH:/opt/UiPathAutomationSuite/latest/installer/bin
    cd /opt/UiPathAutomationSuite/latest/installercd /opt/UiPathAutomationSuite/latest/installer
  2. Verify the connectivity to the new registry on all nodes:
    ./bin/uipathctl prereq run --location local --included "Registry_Connectivity" /opt/UiPathAutomationSuite/cluster_config.json --versions versions/helm-charts.json./bin/uipathctl prereq run --location local --included "Registry_Connectivity" /opt/UiPathAutomationSuite/cluster_config.json --versions versions/helm-charts.json
  3. Update the containerd configuration and restart rke2 on all nodes:
    ./bin/uipathctl rke2 generate-registries /opt/UiPathAutomationSuite/cluster_config.json --current-config-path /etc/rancher/rke2/registries.yaml > /etc/rancher/rke2/registries.yaml.tmp

mv -f /etc/rancher/rke2/registries.yaml.tmp /etc/rancher/rke2/registries.yaml

systemctl restart rke2-server || systemctl restart rke2-agent./bin/uipathctl rke2 generate-registries /opt/UiPathAutomationSuite/cluster_config.json --current-config-path /etc/rancher/rke2/registries.yaml > /etc/rancher/rke2/registries.yaml.tmp

mv -f /etc/rancher/rke2/registries.yaml.tmp /etc/rancher/rke2/registries.yaml

systemctl restart rke2-server || systemctl restart rke2-agent
  4. Verify that containerd can pull images after the configuration update on all the server nodes:
    ./bin/uipathctl prereq run --location local --included "Registry_Pull" /opt/UiPathAutomationSuite/cluster_config.json --versions versions/helm-charts.json./bin/uipathctl prereq run --location local --included "Registry_Pull" /opt/UiPathAutomationSuite/cluster_config.json --versions versions/helm-charts.json

Configuring ArgoCD to use the external registry

To configure ArgoCD to use the external registry, take the following steps:

  1. Update the ArgoCD registry configuration on any of the server nodes by running the following commands on any server node:
    export PATH=$PATH:/opt/UiPathAutomationSuite/latest/installer/binexport PATH=$PATH:/opt/UiPathAutomationSuite/latest/installer/bin
    cd /opt/UiPathAutomationSuite/latest/installercd /opt/UiPathAutomationSuite/latest/installer
  2. Back up and update the registry configuration. This is needed to maintain connectivity with the old registry during the migration.
    kubectl get secret helm-credentials -n argocd -o json | \
 jq '.metadata = {name: "old-helm-credentials", namespace: .metadata.namespace, labels: .metadata.labels}' | \
 kubectl apply -f -

./bin/uipathctl config argocd registry update --host <OCI_registry_host> --username <optional_username> --password <optional_password>kubectl get secret helm-credentials -n argocd -o json | \
 jq '.metadata = {name: "old-helm-credentials", namespace: .metadata.namespace, labels: .metadata.labels}' | \
 kubectl apply -f -

./bin/uipathctl config argocd registry update --host <OCI_registry_host> --username <optional_username> --password <optional_password>
  3. Update the trusted CA certificates of the external registry, if needed:
    /bin/uipathctl config argocd ca-certificates update --cacert <external-registry-rootCA.crt>/bin/uipathctl config argocd ca-certificates update --cacert <external-registry-rootCA.crt>
  4. Verify that ArgoCD can create an empty application after the configuration update on any node:
    ./bin/uipathctl health test --versions versions/helm-charts.json --included argocd./bin/uipathctl health test --versions versions/helm-charts.json --included argocd

Was this page helpful?

Support and Services
Get The Help You Need
UiPath Academy
Learning RPA - Automation Courses
UiPath Forum
UiPath Community Forum
Uipath Logo
Trust and Security
Terms of Use
Privacy Policy
Cookies Policy
© 2005-2025 UiPath. All rights reserved.