Release Notes

2.0.3

Warning

If you encounter the error “Windows Defender SmartScreen prevented an unrecognized app from starting” when running the RADKit 2.0 Windows installers, please refer to Defender/SmartScreen error.

Features:

  • RK-88: LLM: make authentication to MCP server mandatory

  • RK-90: Service: can expose itself as a device for remote management

Fixes:

  • RAD-2463: Service: fixed PortRanges validator

  • RAD-2776: Common: allow only ASCII in HTTP headers

  • RAD-2789: Service/UI: align URL generation buttons

  • RAD-2790: Service/UI: adjust header items scaling for narrower screens

  • RAD-2798: Client: ExecResponse.success returns False for successful execs

  • RK-91: Service: HTTP API returns 401 on CUCM request call

  • RK-95: Client: “unauthorized use of script” when running within pytest

  • RK-96: Service: fix Group field handling in systemd unit files

  • RK-97: Client: honor cert/key/ca path argument in certificate_login

  • RK-102: Client: TypeError when starting SSH proxy

  • RK-104: Service: fix superadmin-password file migration for systemd service

  • RK-106: Common: fix reading proxy PAC

  • RK-115: Control: user update fails with “name activate is not defined”

2.0.2

Fixes:

  • RAD-2793: Service: Internal Server Error downloading device list CSV

  • RK-80: Service: Windows Service crash on startup

2.0.1

Release summary:

  • Major WebUI rework and improvements

  • System-level installation integrating with TPM2.0 (Windows, Linux)

  • Multi-region cloud and Cisco IQ integration (EXPERIMENTAL)

  • Streaming exec responses

  • Improved prompt detection (multiple strategies, per-command support)

  • Performance and scalability improvements

  • Customizable TLS root store extensions

  • MCP server (separate radkit-llm wheel) (EXPERIMENTAL)

  • OIDC integration for Service WebUI

  • TACACS+ RBAC for administrators and remote users

  • New setting for prefix-less admin login using external source

  • SR Follow (deactivate label and/or remote user when TAC SR is closed)

  • New device types: Intersight, ACI Switch, Cisco IQ, CCGM (alias to Catalyst Center)

  • New helper class for FMC and FTD

  • Improved CSV import/export (labels and templates by name, BOM support)

  • Added support for Python 3.14, switched from 3.11 to 3.14 in installers and containers

  • Hardened distroless container images for Client and Service (EXPERIMENTAL)

Notable changes:

  • New prefix-less TACACS+ admin login:

    • the new service.admin_password_source setting selects which authentication source ("local" or the name of a TACACS+ external source) is used for admin logins by default, so that admins no longer need to type <source>#<username> for the configured default source

    • the <source>#<username> form is still supported, and the reserved prefix local# always routes to the local password database for recovery (e.g., local#superadmin)

    • when admin_password_source is set to anything other than "local", all prefix-less admin logins (not only superadmin) are routed to the configured source

    • locally-defined admins (including superadmin) must log in as local#<username> when the password source setting is set to TACACS+

    • operators upgrading a deployment that previously relied on the implicit “local DB first, then external” behavior should keep admin_password_source = "local" (the default) unless they explicitly want all admin authentication routed via TACACS+

  • Customizable truststore extensions:

    • trusted roots used for TLS server certificate validation can now be customized

    • enables full TLS certificate validation for devices enrolled with an enterprise CA

    • makes it possible to allow TLS intercept for connections to RADKit Cloud (use with caution)

    • changes in settings (see “Breaking changes” below)

  • New columns in CSV import/export:

    • deviceTemplateRef.deviceTemplateName(mandatory)

    • deviceTemplateRef.deviceTemplateVariables(mandatory)

  • New settings to create a support package every X seconds / after exceeding a certain memory usage:

    • service.periodic_diagnostics.enabled

    • service.periodic_diagnostics.interval_seconds

    • service.periodic_diagnostics.directory

    • service.periodic_diagnostics.min_memory_usage

  • New setting to control password auto-completion in Service WebUI:

    • service.ui.password_autocomplete, defaults to False

    • only applies to the login, bootstrap and password-change pages

    • password auto-completion is disabled everywhere else in the WebUI

  • New helper class for FMC and FTD:

    • expert terminal, interactive and exec

    • root terminal, interactive and exec

    • upload to FMC/FTD using SCP

    • download from FMC/FTD using SCP

  • New streaming RPC protocol for exec:

    • should reduce latency for exec on bigger commands and reduce memory usage on the Service

    • will be used automatically when available on both ends

    • for big commands, the characters_received property of the SingleExecResponse in RADKit Client will increase while the output is loading

    • to consume in Client scripts: for chunk in device.stream_exec([cmd1, cmd2]): ...

  • Simplified prompt detection API:

    • users can pass strategy model instances directly to device.exec(), DeviceDict.exec(), ExecSequence.exec(), ExecSequence.readuntil_prompt(), and Command – no wrapper object needed

Breaking changes:

  • External sources:

    • the external source name local is now reserved (it identifies the built-in local password database)

    • existing deployments that have an external source named local must rename it before upgrading (the database migration will fail with a clear error message otherwise)

  • Truststore settings:

    • the truststore.cisco_root_store setting has changed semantics (it now refers to a built-in bundle name)

    • the truststore.public_root_store setting has been removed

    • for details, see: Truststores and Certificate Bundles

  • Multi-region support:

    • the default domain is now IQ_CLOUD (expands to IQ regional leaf domains) instead of PROD

    • the STAGE domain was renamed to RADKIT_CLOUD_STAGE and the STAGE_DNAC domain was deleted

    • in the settings, client.default_domain and service.connectivity.default_domain are replaced by cloud_client.connect_domains and cloud_client.accept_domains (list of strings)

    • in the Client API, set_default_domain(), get_default_domain() and the default_domain parameter to Client.create() are all removed

  • Netconf support dropped temporarily for IOS-XR and NX-OS (the feature needs a redesign)

    • service.rbac.device_access_control now defaults to True (previously False):

    • remote users without labels assigned will no longer see any devices

    • to restore open access, set device_access_control = false in [service.rbac]

  • OCSP now defaults to fail-closed instead of fail-open:

    • cloud_client.ocsp.methods changed from (STAPLER, PASS) to (STAPLER,)

    • service.devices.ocsp.methods changed from (STAPLER, PASS) to (DIRECT_HTTPS, STAPLER)

  • Breaking changes in TACACS+ authentication/authorization:

    • an explicit role is now required for Service admins (previously basic-admin was assumed)

    • for remote users, the TACACS server is now expected to respond with service=radkit-user (changed from service=radkit)

    • remote user capabilities are now set with connection=cloud,direct,direct-sso (changed from role=radkit-remote-user, role=radkit-direct-connect, etc.)

    • server responses bigger than 1KB are rejected

  • Option --domain removed from the Linux installer:

    • the option was removed in favor of using the settings TOML file

    • the --domain parameter is no longer included in the systemd service definition

  • Breaking changes in the Service HTTP API:

    • this API is consumed by Control and Service WebUI and exposed over Swagger

    • it has been made consistent in consuming and returning camelCase

    • /admins/change_password changed to /admins/change-password

    • /admins/generate_password changed to /admins/generate-password

    • /change_password changed to /change-password

    • /cloud/identity_certificate changed to /cloud/identity-certificate

    • /cloud/identity-certificate: IdentityCertificate: all fields with underscore changed to camelCase

    • /cloud/enroll_sso changed to /cloud/enroll-sso

    • /cloud/enroll_sso: redirect_url changed to redirectUrl

    • /cloud/enroll_sso/continue changed to /cloud/enroll-sso/continue

    • /connectivity/cloud/enroll: one_time_password changed to oneTimePassword

    • /system/stopUnauthenticated changed to /system/stop-unauthenticated

    • /system/resetService changed to /system/reset-service

    • /system/license_text changed to /system/license-text

    • /system/license_html changed to /system/license-html

    • /system/resetService changed to /system/reset-service

    • /system/resetService: should_revoke_certificate changed to shouldRevokeCertificate

    • BulkResult: success_count and error_count changed to successCount and errorCount

Features:

  • RAD-233: Service/Client: support streaming RPC for exec

  • RAD-1411: Service: CSV import/export labels by name

  • RAD-2002: Service: protect superadmin password using TPM2 on Linux systemd and Windows service

  • RAD-2110: Service: new device type: Intersight

  • RAD-2177: Console: show SSO URL even when opened in browser

  • RAD-2179: Service: improved lockfile management on Windows

  • RAD-2202: Client: allow overriding of HTTP headers that were generated from the data/files/json attributes

  • RAD-2217: Client: suppress radkit-interactive logging

  • RAD-2227: LLM: new RADKit LLM wheels for MCP server integration

  • RAD-2246: Client: filter DeviceDict by internal and external attributes

  • RAD-2263: Service: new device type: CCGM (alias to CATALYST_CENTER)

  • RAD-2265: Service: disable labels and remote users upon TAC SR completion

  • RAD-2290: Service: improved database performance

  • RAD-2291: Client: API helper CLI for Nexus Dashboard

  • RAD-2308: Service: new device type: ACI Switch

  • RAD-2322: Service: admin RBAC using TACACS+

  • RAD-2335: Service: new prompt detection strategies (regex, timeout, idle)

  • RAD-2340, RAD-2626: Service: support authentication to latest Catalyst Center releases

  • RAD-2370: Service: new device type: Cisco IQ

  • RAD-2377: Service: default source setting for admin login

  • RAD-2378: Client/Service: context labels for filtering Service inventory on Client side

  • RAD-2393: Client/Service: hardened distroless container images (EXPERIMENTAL)

  • RAD-2400: Client: performance improvements when dealing with huge inventories

  • RAD-2402: Service: new hosting-admin role to manage remote users and assign labels

  • RAD-2428: Client/Service: improved RPC logging

  • RAD-2436: Service: enable RBAC by default (BREAKING)

  • RAD-2443: Common: support for Python 3.14

  • RAD-2447: Service: integration with OIDC for admin login

  • RAD-2462: Service: TACACS+ role no longer defaults to basic-admin (BREAKING)

  • RAD-2493: Service: internal identity for RADKit Service to import devices from controller using credentials mapping

  • RAD-2495: Packaging: switch to Python 3.14 in installers and containers

  • RAD-2524: Client: helper class for FMC and FTD

  • RAD-2530: Service: API endpoint to bulk delete devices by name

  • RAD-2534: Service: write periodic diagnostics to disk

  • RAD-2548: Client: add helper class for ISE

  • RAD-2550: Service: CSV import/export device templates by name

  • RAD-2591: Common: updated OCSP methods from fail-open to fail-closed

  • RAD-2603: Common: new domain definitions for Cisco IQ (EXPERIMENTAL)

  • RAD-2615: Service: new h2_max_concurrent_streams setting for Webserver

  • RAD-2618: Service/Control: unify API endpoints to consume and return camelCase (BREAKING)

  • RAD-2643: Client/Service: allow specifying prompt_detection_strategy per command

  • RAD-2649: Service: prompt detection performance improvements

  • RAD-2658: LLM: add system level instructions

  • RAD-2687: Service: optimized concurrent creation of labels

  • RAD-2696: Client: new Device.stream_exec method

  • RAD-2698: Client/UI: use streaming ASGI transport in Client HTTP server

  • RAD-2708: Client: support-package endpoint added to Client API

  • RAD-2710: Client: give direct DB access to integrated Service

  • RAD-2712: Client: keepalive settings for SSH forwarder

  • RAD-2720: Client/Service: customizable truststore extensions

  • RAD-2725: Client: default to INFO logging level if stdout is not a tty

  • RAD-2752: Console: improved support for Catalyst Center

  • RAD-2778: Service: improved API input validators

  • RK-58: Service: add log entry for tracing parallel SSH sessions

Frontend improvements:

  • RAD-338: Service/UI: user-configurable Device view columns

  • RAD-499: Service/UI: new searchable and selectable dropdowns

  • RAD-520: Service/UI: added pagination to the details popup after updating devices

  • RAD-1227: Service/UI: reflect database limits from the backend

  • RAD-1579: Service/UI: bulk error notifications while doing an inventory import

  • RAD-1590: Service/UI: display device UUID in Edit Device page

  • RAD-2048: Service/UI: more consistent handling of session ID

  • RAD-2260: Service/UI: added extended Quick Settings to the Connectivity tab

  • RAD-2267: Service/UI: added metadata key length validation constraint

  • RAD-2268: Service/UI: added clear AMP checkboxes

  • RAD-2323: Service/UI: added pagination for external sources, settings and device templates

  • RAD-2347: Service/UI: new two-level sidebar menu structure

  • RAD-2357: Service/UI: filter inventory by labels

  • RAD-2369: Service/UI: increased paginator color contrast in Dark Mode

  • RAD-2371: Service/UI: improved UX when validating or adding/editing device templates

  • RAD-2379: Service/UI: notification visual structure improved

  • RAD-2383: Service/UI: added default sorting of Claims and Roles by name

  • RAD-2390: Service/UI: improved admins activity page

  • RAD-2417: Service/UI: add a more visible caret to inputs focus mode

  • RAD-2424: Service/UI: setting to enable/disable password autocompletion

  • RAD-2546: Service/UI: added “copy password” button in the password reset modal

  • RAD-2553: Service/UI: show progress bar during deletion

  • RAD-2555: Service/UI: improved keyboard navigation

  • RAD-2593: Service/UI: added metadata column to the devices table

  • RAD-2605: Service/UI: promote metadata fields as columns in Devices table

  • RAD-2619: Service/UI: reflect metadata limits from the backend

  • RAD-2650: Service/UI: changed RBAC deactivation suggestions

  • RAD-2662: Service/UI: unneeded indicator DB limits complexity deleted

  • RAD-2745: Service/UI: URL generator to share with Remote Users

Documentation:

  • RAD-1463: Docs: better wording and documentation for uninstall process

  • RAD-1562, RAD-2274: Docs: RADKit Access public API reference

  • RAD-2382: Docs: updated pip installation docs

  • RAD-2418: Docs: improvements to Access public API docs

  • RAD-2583: Docs: hardening guide for RADKit Service

  • RAD-2624: Docs: add notice about shared sandbox for MCP sessions

  • RAD-2686: Docs: multiple documentation updates for RADKit 2.0

  • RAD-2695: Docs: hardened Docker images

  • RAD-2408: Docs: updated docs for Device Templates and External Sources

Fixes:

  • RAD-1416: Service/UI: lack of client-side validation for reuse_password_changes setting

  • RAD-2044: Service: handle session_log_file_size_limit_bytes as text + support logging level by name

  • RAD-2087: Service: Telnet authentication failure in some scenarios

  • RAD-2090: Service/UI: admins should be able to view their own role

  • RAD-2117: Service/UI: provisioning variant should be reset when device type is changed

  • RAD-2122: Service/UI: fix notifications for bulk update and bulk delete

  • RAD-2138: Service: connection timeout when using WLC as a jumphost

  • RAD-2160: Console: double backslashes in some paths on Windows

  • RAD-2167: Service/UI: import modal spinner is not closing

  • RAD-2181: Service: Windows installer version resolution does not order beta builds correctly

  • RAD-2204: Service: support CSV files containing Byte Order Mark (BOM) preamble

  • RAD-2205: Service: exception in CSV inventory download

  • RAD-2210: Service: ISE pager is not getting disabled

  • RAD-2215: Service: exception in radkit-service versions command

  • RAD-2228: Service/UI: change type indicators for “Remote User” field in the “External Sources” modal

  • RAD-2237: Service/UI: notification tray clears on page refresh

  • RAD-2243: Service/UI: External Sources toast message are broken

  • RAD-2245: Service: Device Template names may not be empty

  • RAD-2250: Service: label name validation should reject whitespace

  • RAD-2254: Service/UI: crash in device duplication notification

  • RAD-2257: Service: backend rejects numeric keys for variables in Device Templates

  • RAD-2293: Service/UI: fix JavaScript warnings

  • RAD-2304: Service/UI: fix device type display on Device Import page

  • RAD-2306: Service: PermissionError raised for temporary files on Windows

  • RAD-2309: Service: improve error messages when renaming database objects

  • RAD-2310: Console: crash on update-inventory with big inventory

  • RAD-2333, RAD-2412: SNMP requests fail with “cannot modify read-only memory”

  • RAD-2365: Service/UI: add missing summary toast to Roles and Device Templates

  • RAD-2407: Service: make certificate renewal process start explicit

  • RAD-2423: Common: silence spurious deprecation warning in cryptography

  • RAD-2434: Service/UI: styling errors for input prompts and Bulk dropdown button state reversed

  • RAD-2441, RAD-2445: Service: various vt100 parser issues in prompt detection

  • RAD-2448, RAD-2608: Common: token contents are displayed in some cases

  • RAD-2461: Service: memory leak when updating/deleting devices

  • RAD-2473: Service: wrong proxy setting applied to Swagger requests

  • RAD-2496: Service/IU: darker Dark Mode and more readable Import modals

  • RAD-2504: Service/UI: too much margin between password fields in Change Password modal

  • RAD-2528: Service: fails to refresh from WLC and APIC

  • RAD-2540: Control: fix ControlAPI Content-Type for compatibility with recent FastAPI

  • RAD-2558: Service: fails to import from WLC

  • RAD-2560: Service: invalid response while importing devices from CSPC

  • RAD-2571: Service: mandate setting password when users switch from SSO to non-SSO

  • RAD-2572: Service/UI: do not show “no devices available” right before loading

  • RAD-2595: Common: do not lowercase proxy environment variable values

  • RAD-2597: Service: traceback when canceling SSO enrollment from UI

  • RAD-2623: Service: handle exception when interrupting superadmin password prompt

  • RAD-2632: Service: prompt detection fixes for IOS-XE show platform integrity

  • RAD-2637: Service: admin names validation mismatch between API and DB

  • RAD-2639: Common: log URL in Access client when a request fails

  • RAD-2641: Service: external source does not work when used in !combine tag

  • RAD-2672: Service: enforce “read devices” admin permission when connected via Client

  • RAD-2676: Packaging: remove --domain option from Linux installer

  • RAD-2689: Service: finish db write transaction before sending HTTP response from API

  • RAD-2718: Client: close terminal connection when SSH session terminates in SSH proxy

  • RAD-2721: Client/Service: RuntimeError with newest FastAPI

  • RAD-2722: Common: improved RPC performance

  • RAD-2726: Service: crash when changing some settings through WebUI

  • RAD-2734: Packaging: replace mktemp with mkstemp in installer

  • RAD-2735: Service: reduced bottlenecks in vt100 parsing

  • RAD-2736: Client/Service: fix platform linux <name> su for Ubuntu 25+

  • RAD-2738: Service: should not know what other services are assigned to an SR Follow event

  • RAD-2740: Client: client.reauthenticate is broken

  • RAD-2761: Client/Service: CXD upload fails with traceback

  • RAD-2765: Service: RBAC bug allowing expired remote users RPC access

  • RAD-2768: Service: remove hardcoded domain in Linux service definition

1.9.11

Fixes:

  • RAD-2778: Service: API may raise TypeError when creating a new admin

  • RK-99: Service: cannot import database after exporting it to JSON

1.9.10

Features:

  • RAD-2596: Client: proxy forwarder fixes and improvements

  • RAD-2615: Client: add h2_max_concurrent_streams setting

  • RAD-2626: Service: support new authentication flow in Catalyst Center 3.1.6 and above

  • RAD-2752: Client: improved support for Catalyst Center

Documentation:

  • RAD-2669: Docs: add warning about SmartScreen error on Windows

Fixes:

  • RAD-2595: Common: do not lowercase proxy environment variable values

  • RAD-2623: Service: handle exception when interrupting superadmin password prompt

  • RAD-2641: Service: external source does not work when used in !combine tag

  • RAD-2721: Client/Service: RuntimeError with newest FastAPI

  • RAD-2736: Client/Service: fix platform linux <name> su for Ubuntu 25+

  • RAD-2761: Client/Service: CXD upload fails with traceback

1.9.9

Features:

  • RAD-2530: Service: added “bulk delete devices by name” API endpoint

  • RAD-2534: Service: new settings to enable periodic diagnostics

Fixes:

  • RAD-2528: Service: fix refresh of seed WLC and APIC devices

  • RAD-2540: Control: content type incompatibility with recent FastAPI

  • RAD-2558: Service: error during WLC import

  • RAD-2560: Service: invalid response while importing devices from CSPC

1.9.8

Features:

  • Uptick of multiple internal components

  • RAD-2400: Client: performance improvements for very large inventories

Fixes:

  • RAD-2333, RAD-2412: Service: error in SNMP: TypeError: cannot modify read-only memory

  • RAD-2441, RAD-2445: Service: potential crashes in prompt detection

  • RAD-2461: Service: memory leak when updating/deleting devices

  • RAD-2473: Service: Swagger requests failing

1.9.6

Documentation:

  • RAD-2382: Docs: improvements to the pip installation guide

Fixes:

  • RAD-2394: Common: cancellation issue and race condition in async processing

1.9.5

Documentation:

  • RAD-2352: Docs: update installation guide after relocation from pypi.org

1.9.4

Fixes:

  • RAD-2340: Service: authentication issues with Catalyst Center

  • RAD-2341: Service/UI: error in bulk device operations notification

  • RAD-2342: Service/UI: JS console error when creating label via picker

1.9.3

Fixes:

  • RAD-2300: Service/UI: Terminal View broken

  • RAD-2304: Service/UI: device type displayed as “undefined” in select/import

  • RAD-2305: Console: crash on inventory update timeout

  • RAD-2306: Service: Windows PermissionError for temporary files

1.9.2

Features:

  • RAD-2110: Service: new device type: Intersight

Documentation:

  • RAD-1562: Docs: public API for RADKit Access

Fixes:

  • RAD-2044: Service: support units in session_log_file_size_limit_bytes

  • RAD-2078: Service: fix database migration from older RADKit versions

  • RAD-2087: Service: Telnet authentication error causes traceback when enable is set

  • RAD-2196: Service/UI: undefined JavaScript variable successDevices

  • RAD-2204: Service: error when importing CSV file containing a BOM

  • RAD-2210: Service: fix disabling of pager on ISE

  • RAD-2217: Client: suppress radkit-interactive logging

  • RAD-2220: Service/UI: fix console error when clicking notification details

1.9.1

Notable or breaking changes:

  • The service.ui.remote_user_external_auth_enabled setting has been removed.

Fixes:

  • RAD-2115: Service: remove remote_user_external_auth_enabled setting

  • RAD-2122: Service/UI: fix notifications for bulk update and bulk delete

  • RAD-2134: Service/UI: auto disconnect monitoring websocket connection on permission revocation

  • RAD-2134: Service/UI: incorrect redirection when admin lacks permissions to view monitoring

  • RAD-2136: Service/UI: once a jumphost is set for a device, it cannot be unset

  • RAD-2149: Service: Websocket: split large messages and fix closing connections

  • RAD-2153: Service/UI: successDeviceNames is undefined

  • RAD-2160: Console: fix double backslash in some paths on Windows

  • RAD-2179: Service: fix lockfile management preventing startup on Windows

  • RAD-2181: Packaging: Windows installer prevents installation on top of 1.9 beta

  • RAD-2191: Service/UI: restore loading of device metadata

  • RAD-2200: Service/UI: superadmin cannot browse monitoring section

1.9.0

Release summary:

  • Performance improvements for parallel queries

  • UI performance improvements for large inventories

  • Role-based administrative control

  • User mapping (device credentials depending on remote user)

  • Improved YAML device template editor

  • Anonymization of IPv4, IPv6 and email addresses (experimental, restricted to exec)

  • CSV import improvements (jumphost, labels by name)

  • Support for CyberArk CCP as an external source

  • New Linux installer for the ARM architecture

  • Added support for Python 3.13

Notable or breaking changes:

  • Dropped support for Python 3.9

  • RADKit Genie improvements:

    • The parse() function now returns the parsed data using the same datatype as Device.exec().

    • This allows the use of filters or transformers on the result (please refer to “Indexing and filtering a response object” for more information).

    • RADKit Client has a new parse_genie pipe operation: devices.exec('show version').wait() | parse_genie

  • Setting size_limit_megabytes under client.logging and service.logging was renamed to file_size_limit_bytes.

Features:

  • RAD-311: Service: basic local admin RBAC settings

  • RAD-609: Service: jumphost support in CSV import

  • RAD-1291: Service: new external source integration: CyberArk CCP

  • RAD-1331: Service/UI: redesigned Users modal

  • RAD-1418: Client/Console: provide a way to disable history or provide absolute path

  • RAD-1460: Genie: align radkit_genie.parse() result with exec() result

  • RAD-1520: Service: data anonymization for exec (experimental)

  • RAD-1528: Service: improved lockfile and process detection algorithm

  • RAD-1557: Service: external sources and device templates expressivity enhancements

  • RAD-1569: Service/UI: add bulk operations to Admins screen

  • RAD-1661: Service: add support for Syslog logging

  • RAD-1678: Service: size-based rotation model for Service and session logs

  • RAD-1685: Service/UI: added sorting to devices inventory

  • RAD-1700: Service: static remote user to local user mapping

  • RAD-1703: Service: new device integration: Secure Network Analytics

  • RAD-1776: Console: network-console should have a logging level CLI

  • RAD-1780: Packaging: new --service-account option for Linux installation

  • RAD-1792: Service: roles for admin RBAC

  • RAD-1794: Service/UI: external source static credentials improved validation and new drag and drop menu

  • RAD-1801: Service: performance improvements for label deletion

  • RAD-1813: Service: add write-defaults option to radkit-service settings CLI

  • RAD-1814: Service: performance improvements for bulk updates

  • RAD-1841: Service/UI: add dark mode view transition

  • RAD-1865: Service: device templates editor

  • RAD-1870: Common: setting to enable detailed cryptographic session establishment logging

  • RAD-1883: Control: improve the error message when users pass incorrect CSV input

  • RAD-1907: Service: disable pager in exec on vManage and cEdge devices

  • RAD-1938: Service: database speed improvement on very large inventories

  • RAD-1979: Genie: added parse_genie pipe operation

  • RAD-2025: Service: add upgrade-insecure-requests to CSP HTTP header

  • RAD-2061: Client: new setting client.proxy_forwarder.h2_max_concurrent_streams

  • RAD-2074: Service: performance improvement for 50k devices inventory

  • RAD-2077: Client: new request_remember_rpc_messages setting for debugging

Documentation:

  • RAD-853: Docs: extraneous Compatibility Matrix page can be found in search/index

  • RAD-1848: Docs: ActivateMinutes import is not mentioned anywhere in the docs

  • RAD-1864: Docs: document “Terminal Capabilities”

  • RAD-2099: Docs: corrected example in Control API doc about updating a device

Fixes:

  • RAD-1160: Service/UI: dark mode triggers by browser preference setting

  • RAD-1568: Client: fix incorrect startup message about integrated Service

  • RAD-1648: Service/UI: fix search bugs in devices and devices inventory

  • RAD-1652: Console: crashes when malformed Service ID follows service command

  • RAD-1713: Console: using python-repl breaks the app

  • RAD-1717: Service: predefined variables not passed to external source under certain conditions

  • RAD-1727: Service: database migration 0052 fails when table doesn’t exist

  • RAD-1752: Service: validation of keyboard interactive external source fails when providing private key

  • RAD-1758: Service/GUI: _tkinter.TclError: couldn’t open /clipboard-sm.png: no such file or directory

  • RAD-1791: Service/UI: allow to save an empty device template

  • RAD-1798: Service: internal external sources should not be cached

  • RAD-1857: Client/UI: display mode switches initial state broken in new sessions; changed to buttons

  • RAD-1921: Packaging: “ImportError: DLL load failed” on Windows in some configurations

  • RAD-1934: Service/UI: error in CSV upload

  • RAD-1936: Service/UI: “copy to clipboard” buttons in Devices table does not work

  • RAD-1941: Service/UI: device name validator should not allow trailing dash

  • RAD-1944: Client/UI: fix length of “no data” info banner

  • RAD-1949: Service/UI: improved performance with many devices

  • RAD-1973: Service: FMC connector does not correctly support pagination

  • RAD-1982: Service: OSError in RPC server transport

  • RAD-2000: Service/Client: some requests to UCS Manager fail

  • RAD-2017: Service: process hangs after triggering shutdown

  • RAD-2022: Service/UI: credentials reset when creating device and changing device type

  • RAD-2041: Service/UI: console error when changing RBAC or proxy server

  • RAD-2043: Service/UI: console error when choosing cEdge

  • RAD-2045: Service/UI: don’t leak external source info during login

  • RAD-2049: Service/UI: device sorting order is incorrect

  • RAD-2053: Service/UI: error in CSV template request

  • RAD-2056: Service: improved WebSocket handling

  • RAD-2082: Client/Service: fix memory leak

  • RAD-2092: Service: fail device template validation if external source does not exist

  • RAD-2098: Console: python-repl does not correctly propagate service

  • RAD-2106: Service: better validation for service.ui.listen_addresses setting

  • RAD-2130: Console: do not reject TAC SR numbers starting with 7

1.8.10

Fixes:

  • RAD-2130: Console: do not reject TAC SR numbers starting with 7

1.8.9

Dependency upticks and performance improvements.

Fixes:

  • RAD-1921: Packaging: “ImportError: DLL load failed” on Windows in some configurations

1.8.8

Fixes:

  • RAD-1795: Service: device update sometimes resets device template reference

  • RAD-1802: Control: ControlAPI breaks when sending a request with content bigger than 32kB

  • RAD-1843: Client: TypeError when running admin_terminal() using CatC helper

1.8.7

This release features faster installers and a lower installation footprint.

Features:

  • RAD-1757: Packaging: add --service-only CLI option to Linux installer

Documentation:

  • RAD-1645: Docs: minor fixes post-1.8.5

  • RAD-1651: Docs: cannot import oauth_connect_only from radkit_client.sync

  • RAD-1754: Docs: updated Ansible Collection doc for Ansible Galaxy release

Fixes:

  • RAD-166: Control: it is possible to enroll the Service when Cloud is disabled

  • RAD-232: Client: HTTPUploadParameters disregards the verb parameter

  • RAD-1669: Service: some settings saved to TOML but not applied until reload

  • RAD-1670: Service/UI: missing details about Service certificate

  • RAD-1674: Client: HTTP proxy incompatible with some Catalyst Center RSA versions

  • RAD-1693: Service/GUI: traceback instead of GUI message on GUI start

  • RAD-1707: Genie: parses all entries in a result instead of filtered results

  • RAD-1712: Console: remove 1.7.x intro text

  • RAD-1714: Console: fails to recover from AuthenticationFailedError when discovering a Service

  • RAD-1767: Console: previous SR context still in use after switching to a new Service ID

  • RAD-1772: Service: CUCM extract postprocessor does not handle binary files properly

  • RAD-1775: Service/GUI: [Errno 13] Permission denied when starting GUI on Windows

1.8.5

Starting with this release, RADKit is now available on PyPI.org (see pip installation for details).

Features:

  • RAD-1619: Service/UI: shorten Device Type display names and show full names on hover

Fixes:

  • RAD-1594: Service/UI: cannot control http2_enabled setting in WebUI

  • RAD-1630, RAD-1634: Packaging: missing stubs in radkit_common

  • RAD-1635: Service: remove dependency on id.cisco.com

  • RAD-1642: Packaging: incorrect platform tag for musllinux_1_1_aarch64 wheels

1.8.3

Features:

  • RAD-1435: Client/UI: add device description to proxy inventory page

  • RAD-1534: Client: dynamically create and manage an integrated Service

  • RAD-1556: Service: stop RADKit Windows Service automatically when upgrading

Documentation:

  • RAD-1595: Docs: most entries in the Compatibility support matrix are cropped

  • RAD-1610: Docs: verification scripts are missing from the Code Signing page

Fixes:

  • RAD-1465: Console: remove deprecated commands with underscore from CLI completion

  • RAD-1508: Service/UI: minimum generated password length constraint is not shown

  • RAD-1518: Service/UI: External Sources are not visible in Remote User modals

  • RAD-1527: Service/UI: make YAML textarea auto-fill vertical screen space

  • RAD-1567: Service/UI: bulk activate/deactivate breaks after first use

  • RAD-1573: Service/GUI: not working when started as Windows Service

  • RAD-1575: Service/UI: checkbox misbehaving after select & import from Catalyst Center

  • RAD-1576: Packaging: Windows installer fails to close if user aborts installation

  • RAD-1585: Service/GUI: fails to start with “Settings have already been loaded”

  • RAD-1587: Service/UI: Apply is broken in Settings

  • RAD-1592: Client: wheel is missing asyncssh dependency

  • RAD-1598: Client: fix TLS connection error in CatalystCenter helper class

1.8.1

Features:

  • RAD-310: Client: SSH proxy multiplexer

  • RAD-315: Service/Client: enforce password exclusion list

  • RAD-381: Service: backup restore functionality

  • RAD-1267: Client: exec now creates one independent RPC call per device

  • RAD-1366: Service/UI: device search query language

  • RAD-1424: Service: allow explicit usernames in device template YAML

  • RAD-1455: Client: allow adding custom endpoints to the Client proxy webserver

  • RAD-1471: Client: .map() function added to ExecResponse

  • RAD-1474: Service: dbshell now allows to specify a script file

  • RAD-1475: Client: encrypt and decrypt now also work as functions

  • RAD-1477: General: preliminary support for Python 3.13 (no official support yet)

  • RAD-1478: Service: new setting to disable HTTP2 when connecting to the device

  • RAD-1497: Client: success and show_progress added to ExecResponse

  • RAD-1504: Service: passwordless HTTP support for NSO RestConf API

Fixes:

  • RAD-673: Service: log messages cleanup

  • RAD-1338: Client: add CSPC credentials warning in HTTP proxy

  • RAD-1385: Service/UI: UI reloads on network errors

  • RAD-1390: Service/UI: long names cause notification text overflow

  • RAD-1410: Service: does not recover after loss of Cloud connectivity

  • RAD-1422: Service: missing parts of proxied inventory page on Catalyst Center 2.3.7.6

  • RAD-1425: Service/UI: Select All doesn’t produce a confirmation toast in External Sources

  • RAD-1433: Service/UI: on Safari, SSO enrollment fails to redirect to RADKit Cloud Access

  • RAD-1434: Service: cannot import devices from vManage

  • RAD-1456: Service/UI: show helpful message on TLS verify error when importing inventory

  • RAD-1457: Service/UI: Safari doesn’t let navigate off the WebUI

  • RAD-1458: Service/GUI: GUI app broken on Windows

  • RAD-1485: Service/UI: wrong time slice calculation when creating remote user

  • RAD-1487: Service/UI: alignment issues on high DPI resolution

  • RAD-1490: Service/UI: remove Service width limit

  • RAD-1510: Service/UI: “clear form” button in remote users tab produces validation error

  • RAD-1511: Service: ModuleNotFoundError: No module named 'python_multipart'

  • RAD-1514: Service: crash while retrieving OpenID configuration

  • RAD-1515: Service: enrollment procedure stops due to “token not yet valid”

  • RAD-1536: Service: “import might be incomplete” when importing devices from CSPC

  • RAD-1544: Service: database truncation results in data loss and database corruption

Earlier releases