Update dependency argoproj/argo-cd to v2.3.2
This MR contains the following updates:
Package | Type | Update | Change |
---|---|---|---|
argoproj/argo-cd | Kustomization | patch |
v2.3.1 -> v2.3.2
|
Release Notes
argoproj/argo-cd
v2.3.2
Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.3.2/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.3.2/manifests/ha/install.yaml
Special notes
This release contains the fix for a security issue with critical severity. We recommend users on the 2.3 release branch to update to this release as soon as possible.
More information can be found in the related security advisory.
Changes
As part of the security fix, the Argo CD UI no longer automatically presents child resources of allow-listed resources unless the child resources are also allow-listed. For example, Pods are not going to show up if only Deployment is added to the allow-list.
If you have projects configured with allow-lists, make sure the allow-lists include all the resources you want users to be able to view/manage through the UI. For example, if your project allows Deployments
, you would add ReplicaSets
and Pods
.
Bug Fixes
- fix: application resource APIs must enforce project restrictions
Configuration
-
If you want to rebase/retry this MR, click this checkbox.
This MR has been generated by Renovate Bot.