---
schema_version: "1"
id: 793b6bfd53b99b11c340b36ab6410e03ae459b730de007d61d6007be70a809f8
title: Anypoint Runtime Fabric Command-Line Tool (rtfctl) BYOK Release Notes
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/release-notes/runtime-fabric/runtime-fabric-command-line-tool-release-notes.md
canonical_url: https://docs.mulesoft.com/release-notes/runtime-fabric/runtime-fabric-command-line-tool-release-notes
source_site: docs.mulesoft.com
content_type: documentation
content_hash: b4657f3234ffbdf48fe68b08eb017078f1ae5334dcdf1831c33fb3b78efd2c06
description: MuleSoft Documentation Site
latest: true
---
---
product: Release Notes
version: master
keywords: release notes, runtime fabric, runtimefabric, fabric, rtf, rtfctl
---

# Anypoint Runtime Fabric Command-Line Tool (rtfctl) BYOK Release Notes

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

The following release notes are for Runtime Fabric Command Line Tool (`rtfctl`) BYOK (Bring your own
Kubernetes) version: The Runtime Fabric CLI is the installation and management utility tool for your
Runtime Fabric running on Kubernetes.

To download and install `rtfctl`, refer to
[Install the Runtime Fabric Command Line Tool](https://docs.mulesoft.com/runtime-fabric/latest/install-rtfctl).

## 1.0.150

**July 30, 2026**

### What’s New

- `rtfctl` 1.0.150 introduces a new `rtfctl agent-truststore` command group. Inspect, back up,
  merge, and update the certificate authority (CA) certificates that the Runtime Fabric agent uses
  for mutually authenticated TLS (mTLS) connections to the Anypoint Platform control plane. This
  simplifies CA rotation, such as during a CA compromise or planned infrastructure change, without
  requiring additional tooling.

  For more information, refer to
  [Managing the Agent Truststore with RTFCTL](https://docs.mulesoft.com/runtime-fabric/latest/manage-agent-truststore-rtfctl)
  and
  [Agent Truststore Commands](https://docs.mulesoft.com/runtime-fabric/latest/manage-agent-truststore-rtfctl#commands).

## 1.0.118

**March 11, 2026**

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p><code>rtfctl apply</code> and <code>rtfctl delete</code> commands failed to manage secure properties if the property names contained certain suffixes or were malformed (for example, names containing literal strings like --value). The <code>rtfctl</code> utility is now updated with improved command-line argument parsing to correctly identify and process properties regardless of their name structure, ensuring that updates and deletions execute successfully</p></div></div></td><td><div><div><p>W-20497173</p></div></div></td></tr></tbody></table>

## 1.0.113

**December 8, 2025**

### What’s New

- Anypoint Runtime Fabric Command-Line Tool (rtfctl) now supports the backup and restore of the Mule
  Application Custom Resource Definition (CRD).

  > [!IMPORTANT] Mule Application Custom Resources (CRs) aren’t supported for backup and restore.
  > You must plan your recovery strategy using your source control repository as the single source
  > of truth for all application configurations. After a Runtime Fabric cluster restore, you must
  > re-apply your Mule Application CRs from your repository.

## 1.0.107

**September 03, 2025**

### What’s New

- The `--core-software-only` flag in the rtfctl `restore` command enables you to restore only the
  core Runtime Fabric software components without triggering Mule app synchronization from the
  control plane. For details, refer to the
  [restore](https://docs.mulesoft.com/runtime-fabric/latest/rtfctl-reference#restore) command.

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>The <code>--core-software-only</code> flag is now available in the rtfctl <code>restore</code> command.</p></div></div></td><td><div><div><p>W-19087426</p></div></div></td></tr></tbody></table>

## 1.0.98

**July 31, 2025**

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>The clarity of ctl messages for rtctl <code>validate</code> and <code>restore</code> commands is now enhanced.</p></div></div></td><td><div><div><p>W-18181576, W-18109029</p></div></div></td></tr><tr><td><div><div><p>The validation prompt before restore in the case namespace no longer matches the backup.</p></div></div></td><td><div><div><p>W-12227576</p></div></div></td></tr><tr><td><div><div><p>This release includes security fixes.</p></div></div></td><td><div><div><p>W-18493468</p></div></div></td></tr></tbody></table>

## 1.0.92

**March 25, 2025**

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p><code>rtfctl</code> commands no longer fail by missing Custom Resource Definitions (CRDs).</p></div></div></td><td><div><div><p>W-18024871</p></div></div></td></tr></tbody></table>

## 1.0.89

**March 10, 2025**

### What’s New

- Anypoint Runtime Fabric Command-Line Tool now supports backup and restore of HTTP Route-Template
  CRD and CR.

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>The <code>--cluster-ops image</code> flag taken from the local registry that is used to install the Runtime Fabric agent is now correctly configured.</p></div></div></td><td><div><div><p>W-16224293</p></div></div></td></tr><tr><td><div><div><p><code>rtfctl backup</code> for OpenShift fabrics now considers the secrets required for the ingress resources.</p></div></div></td><td><div><div><p>W-17283597</p></div></div></td></tr><tr><td><div><div><p>The value for <code>crds.install</code> during helm migration is no longer explicitly set to false .</p></div></div></td><td><div><div><p>W-16452863</p></div></div></td></tr><tr><td><div><div><p>Informational output from Anypoint CLI now goes through stdout as in older versions.</p></div></div></td><td><div><div><p>W-16701108</p></div></div></td></tr><tr><td><div><div><p>Validation of the Anypoint user and bearer tokens is now run before initiating the backup phase in the <code>rtfctl</code> migrate flow.</p></div></div></td><td><div><div><p>W-16596517</p></div></div></td></tr></tbody></table>

## 1.0.79

**August 15, 2024**

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>The <code>rtfctl validate</code> command no longer fails with a container unready error message when running jobs.</p></div></div></td><td><div><div><p>W-15895512</p></div></div></td></tr></tbody></table>

## 1.0.70

**June 7, 2024**

### What’s New

- Starting with `rtfctl` version 1.0.70, if you use an rtf-agent version higher and equal to 2.6.52,
  the `rtfctl` backup bundle doesn’t contain the Mule app deployments. The deployments are synched
  from the Runtime Manager UI at the time of restoration. Refer to
  [Backing up and restoring Runtime Fabric](https://docs.mulesoft.com/runtime-fabric/latest/manage-backup-restore).

- The new `rtfctl renew-expired-client-cert` command renews an expired client certificate using a
  pre-downloaded package. Refer to
  [Commands for Configuring Runtime Fabric](https://docs.mulesoft.com/runtime-fabric/latest/install-rtfctl#configure-rtfctl).

- The `rtfctl report` command has a new flag, `--release-name`, that specifies the name of the helm
  release to support installations using custom release names. Refer to
  [Report](https://docs.mulesoft.com/runtime-fabric/latest/install-rtfctl#report) command documentation.

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>The <code>rtfctl report</code> command now creates unique temporary directories for each process, eliminating conflicts from shared directory usage. Additionally, the command avoids overwriting existing reports unless you specify the <code>--overwrite</code> flag. For two concurrent reports to work, they need to have different report file names, for example:<br></p></div><div><div><pre><code>./rtfctl report --debug --file report1.tgz --namespace rtf-test
./rtfctl report --file report2.tgz --namespace rtf-test</code></pre></div></div></div></td><td><div><div><p>W-15618561</p></div></div></td></tr></tbody></table>

## 1.0.55

**May 13, 2024**

### What’s New

- The `rtfctl report` command collects data on a best-effort basis. The command generates the report
  even if sub-tasks fails.

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>The <code>rtfctl report</code> command collects data on a best-effort basis. The command generates the report even if sub-tasks fails.</p></div></div></td><td><div><div><p>W-15696698</p></div></div></td></tr></tbody></table>

## 1.0.47

**April 12, 2024**

### What’s New

- The `rtfctl report` command is updated for OTel sidecar.

## 1.0.44

**March 7, 2024**

### What’s New

- The `rtfctl report` command now outputs an additional JSON formatted file for resources in agent
  versions v2.6.0 and above.

- The `rtfctl report`, `backup`, and `restore` commands now extends the support to
  `kubernetestemplate` resources used to customize your app deployments.

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>The <code>rtfctl test</code> command now fails sooner when there are terminal errors and does not require you to wait until the operation times out.</p></div></div></td><td><div><div><p>W-14992372</p></div></div></td></tr><tr><td><div><div><p>For Helm based agent installations, <code>rtfctl apply mule-license</code> command now detects and provides a Helm command for you to execute.</p></div></div></td><td><div><div><p>W-14278334</p></div></div></td></tr></tbody></table>

## 1.0.29

**November 14, 2023**

### What’s New

- Review new [RTFCTL Kubernetes permissions](https://docs.mulesoft.com/runtime-fabric/latest/rtfctl-permissions)
  documentation.

- Review new [Auditing rtfctl Operations](https://docs.mulesoft.com/runtime-fabric/latest/install-rtfctl#auditing)
  documentation.

## 1.0.20

**September 25, 2023**

### What’s New

- The `rtfctl report` command now includes the Anypoint monitoring data of Mule deployments with the
  option `--include-mule-monitoring-data`.

- The `rtfctl validate` command now supports `--image-pull-registry` and `--image-pull-secret` flags
  for validating against a local registry.

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>The <code>apply proxy</code> command no longer returns an invalid warning message.</p></div></div></td><td><div><div><p>W-13032322</p></div></div></td></tr><tr><td><div><div><p>The <strong>restore</strong> operation now restores custom resources correctly.</p></div></div></td><td><div><div><p>W-13974770</p></div></div></td></tr></tbody></table>

## 1.0.12

**August 4, 2023**

### What’s New

- Runtime Fabric now supports `rtfctl backup` and `rtfctl restore` commands for OpenShift clusters,
  refer to
  [Backing up and Restoring Runtime Fabric](https://docs.mulesoft.com/runtime-fabric/latest/manage-backup-restore)
  documentation.

- You can now migrate to helm native Runtime Fabrics from `rtfctl`, refer to the
  [Migrating to Helm Managed Runtime Fabric](https://docs.mulesoft.com/runtime-fabric/latest/migrate-helm)
  documentation.

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>The <code>rftctl backup</code> and <code>rtfctl restore</code> commands now work correctly with custom resources.</p></div></div></td><td><div><div><p>W-13285192</p></div></div></td></tr><tr><td><div><div><p>Applying an HTTP proxy setting configuration to the app namespace no longer applies the proxy setting in the Runtime Fabric namespace.</p></div></div></td><td><div><div><p>W-12981038</p></div></div></td></tr></tbody></table>

## 0.4.22

**May 9, 2023**

### What’s New

- The `rtfctl report` command now generates a fast compression file archive by using the new flag
  `use-fast-compression`.

- The `rtfctl report` command now executes tasks in parallel worker pools by using the new `workers`
  flag.

- The `rtfctl report` command now lets you choose which application namespaces to report using
  `app-namespaces` flag.

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>When running the <code>rtfctl uninstall</code> command, the system namespace now waits for deletion of all relevant namespaces.</p></div></div></td><td><div><div><p>W-13100550</p></div></div></td></tr><tr><td><div><div><p>Runtime Fabric now uses the correct reference to cluster-ops during installation.</p></div></div></td><td><div><div><p>W-13074624</p></div></div></td></tr><tr><td><div><div><p>Runtime Fabric now unblocks CPC deployments correctly.</p></div></div></td><td><div><div><p>W-13097851</p></div></div></td></tr><tr><td><div><div><p>Reported security vulnerabilities are fixed.</p></div></div></td><td><div><div><p>W-12692341</p></div></div></td></tr><tr><td><div><div><p>Runtime Fabric now exposes an endpoint that takes version as input and responds with a pre-signed URL to download the given version.</p></div></div></td><td><div><div><p>W-13075535</p></div></div></td></tr></tbody></table>

## 0.4.1

**April 11, 2023**

### What’s New

- Runtime Fabric now supports multiple instances on a single cluster. Refer to the
  [Installing Multiple Instances of Runtime Fabric on a Single Cluster](https://docs.mulesoft.com/runtime-fabric/latest/install-multiple-instances)
  documentation.

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>An issue with a transport layer check no longer occurs when an application firewall blocks AMQP traffic while allowing HTTP/Websockets. Now the test attempts to validate the accessibility of the transport layer endpoint by sending actual AMQP frames over Websockets.</p></div></div></td><td><div><div><p>W-11958442</p></div></div></td></tr><tr><td><div><div><p>The <code>rtfctl test outbound-network</code> now works correctly for appliance-based clusters.</p></div></div></td><td><div><div><p>W-12499930</p></div></div></td></tr><tr><td><div><div><p>Backups of multiple instances created with <code>rtfctl backup</code> command can now be restored.</p></div></div></td><td><div><div><p>W-12742772</p></div></div></td></tr></tbody></table>

## 0.3.198

**January 23, 2023**

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>The <code>backup</code> and <code>restore</code> commands now work correctly with persistence gateway resources.</p></div></div></td><td><div><div><p>W-11987155</p></div></div></td></tr><tr><td><div><div><p>The <code>report</code> command no longer reports non-RTF related namespaces.</p></div></div></td><td><div><div><p>W-12197726</p></div></div></td></tr><tr><td><div><div><p>The <code>package</code> command no longer fails when used with the <code>-heap-dump</code> flag.</p></div></div></td><td><div><div><p>W-11235954</p></div></div></td></tr></tbody></table>

### Known Issues

<table><colgroup><col> <col> <col></colgroup><thead><tr><th>Known Issue</th><th>Workaround</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p><code>rtfctl restore</code> command fails with segmentation fault.</p></div></div></td><td><div><div><p>Upgrade to the latest rtfctl version.</p></div></div></td><td><div><div><p>W-11987155</p></div></div></td></tr></tbody></table>

## 0.3.191

**December 15, 2022**

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>Fixed security vulnerabilities.</p></div></div></td><td><div><div><p>W-12049033</p></div></div></td></tr></tbody></table>

## 0.3.179

**November 17, 2022**

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>This release improves help messages on the command line.</p></div></div></td><td><div><div><p>W-11955726</p></div></div></td></tr></tbody></table>

## 0.3.175

**November 8, 2022**

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>This release improves message formatting.</p></div></div></td><td><div><div><p>W-11174874, W-11942966</p></div></div></td></tr><tr><td><div><div><p>The <code>rtfctl backup</code> command now supports concurrent user execution and deletes the <code>tmp/backup</code> directory when the backup completes.</p></div></div></td><td><div><div><p>W-11063729</p></div></div></td></tr><tr><td><div><div><p>Clusters in the EU control plane are properly connected to the Anypoint Platform control plane after upgrading.</p></div></div></td><td><div><div><p>W-11227117</p></div></div></td></tr></tbody></table>

## 0.3.168

**May 24, 2022**

### What’s New

- This release improves the example of how to use the `renew-expired-client-cert` command.

- The `package` command now requires a mandatory argument for the path to the directory where the
  file will be created.

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Description</th><th>Issue</th></tr></thead><tbody><tr><td><div><div><p>The <code>apply system-configuration</code> command no longer fails because of a permission issue.</p></div></div></td><td><div><div><p>W-10993223</p></div></div></td></tr><tr><td><div><div><p>The <code>package</code> command no longer fails with an incorrect directory path error on Windows.</p></div></div></td><td><div><div><p>W-10810849</p></div></div></td></tr></tbody></table>

## 0.3.160

**April 5, 2022**

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Description</th><th>Issue</th></tr></thead><tbody><tr><td><div><div><p>This release includes improvements to support multiple authentication providers.</p></div></div></td><td><div><div><p>SE-24124</p></div></div></td></tr><tr><td><div><div><p><code>rtfctl</code> now allows a custom <code>pull-secret-name</code> for local registries.</p></div></div></td><td><div><div><p>N/A</p></div></div></td></tr><tr><td><div><div><p>This release improves <code>rtfctl</code> documentation examples.</p></div></div></td><td><div><div><p>W-10647420</p></div></div></td></tr></tbody></table>

## 0.3.157

**February 22, 2022**

### What’s New

- To support local registries in Runtime Fabric on Self-Managed Kubernetes version 1.12.0 and later,
  the `rtfctl` utility now includes the `get registry-credentials` command.

  Additionally, the `rtfctl install` command now includes the following flags:

- `--image-pull-registry`

- `--image-pull-secret`

## 0.3.145

**November 1, 2021**

### What’s New

- You can now run the `rtfctl test outbound-network` command on all nodes or on a specific node.

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Description</th><th>Issue</th></tr></thead><tbody><tr><td><div><div><p>The <code>rtfctl test outbound-network</code> command allows network checks on all nodes or on specific nodes per the node selector.</p></div></div></td><td><div><div><p>SE-22084</p></div></div></td></tr></tbody></table>

## 0.3.139

**October 12, 2021**

### What’s New

- The `rtfctl report` command now captures any previous container logs in a separate file.

- The `rtfctl backup` and `rtfctl restore` commands are now compatible with Kubernetes 1.20.

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Description</th><th>Issue</th></tr></thead><tbody><tr><td><div><div><p>The rtfctl utility now reads both <code>NO_PROXY</code> and <code>no_proxy</code> settings from the environment.</p></div></div></td><td><div><div><p>SE-22108</p></div></div></td></tr><tr><td><div><div><p>The <code>rtfctl proxy</code> command throws an error if the RTF namespace is not present when the command applies proxy settings.</p></div></div></td><td><div><div><p>RTF-2933</p></div></div></td></tr></tbody></table>

## 0.3.135

**August 12, 2021**

### What’s New

- The `rtfctl apply ingress-configmap` command is deprecated. If you attempt to apply an ingress
  ConfigMap with `rtfctl` against Runtime Fabric 1.10 or later, Runtime Fabric rejects the request.

- The latest version of `rtfctl` includes backup and restore support for ingress resource templates.

  Use `rtfctl report` to see details about the ingress resource templates you applied.

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue</th><th>Number</th></tr></thead><tbody><tr><td><div><div><p>The <code>rtfctl apply secure-property</code> command now allows <code>=</code> for single-line values.</p></div></div></td><td><div><div><p>SE-22118</p></div></div></td></tr><tr><td><div><div><p>The <code>rtfctl report</code> no longer fails due to old pull secret references on old Runtime Fabric clusters.</p></div></div></td><td><div><div><p>SE-21254</p></div></div></td></tr></tbody></table>

## Jun 24, 2021 (0.3.128)

This release includes the following enhancements and bug fixes:

- Added: The `rtfctl apply secure-property` command now handles special characters in a value.

- Fixed: The `rtfctl get secure-properties` command no longer fails when retrieving values that have
  a '\\n' character.

- Fixed: The `rtfctl report` command now captures all container logs.

## Apr 22, 2021 (0.3.122)

This release includes the following enhancements and bug-fixes:

- Added: Improvement to the `rtfctl report` command to include information about persistent gateway
  deployment.

- Added: Enhancement to the `rtfctl backup` and `rtfctl restore` commands to handle persistent
  gateway configuration and deployment.

- Fixed: Issue where `rtfctl uninstall` may fail on gravity clusters.

- Fixed: Issue where the state file for binary upgrade check was not created in the user’s home
  directory.

## Mar 18, 2021 (0.3.103)

This release includes the following major enhancement(s):

- Added: The `rtfctl report` command includes runtime fabric helm history information.

- Added: Enhancements to the `rtfctl status` command to fetch information from inside the runtime
  fabric cluster (Self-Managed Kubernetes only).

- Added: Outbound Network tests now include both legacy and new Anypoint Monitoring endpoint(s).

## Feb 10, 2021 (0.3.102)

This release includes the following major enhancement(s):

- Added: Improvements to capture logs from previous container restarts in the debug report.

- Added: Enhancement to backup and restore any gravity custom resources created for smtp and
  log-forwarder.

- Fixed: Issue where `rtfctl restore` command would throw an error while restoring on the same
  Self-Managed Kubernetes cluster where the backup was taken.

## Dec 16, 2020 (0.3.94)

This release includes the following major enhancement(s):

- Added: `rtfctl status dns-check` command to test DNS health (Self-Managed Kubernetes only).

- Added: `rtfctl delete secure-properties` command to remove secure properties.

- Fixed: `rtfctl validate` command shows overall validation status message (Self-Managed Kubernetes
  only).

- Fixed: `rtfctl` commands `help` and `version` now works without having Kubernetes context.

## Nov 23, 2020 (0.3.87)

This release includes the following major enhancement(s):

- Added: `rtfctl validate` command to validate the Kubernetes environment prior to installing
  Runtime Fabric (Self-Managed Kubernetes only).

- Added: `rtfctl apply ingress-configmap` command to apply ingress configuration on Runtime Fabric
  (Self-Managed Kubernetes only).

- Added: `rtfctl uninstall` command to uninstall Runtime Fabric.

- Fixed: bug fixes and improvements.

## See Also

- [Troubleshooting Runtime Fabric with RTFCTL](https://docs.mulesoft.com/runtime-fabric/latest/troubleshoot-rtf-rtfctl)

- [Known Issues](https://help.salesforce.com/s/issues)