chore(deps): update dependency argoproj/argo-cd to v2.8.2
This MR contains the following updates:
Package | Type | Update | Change |
---|---|---|---|
argoproj/argo-cd | Kustomization | minor |
v2.7.6 -> v2.8.2
|
Release Notes
argoproj/argo-cd
v2.8.2
Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.8.2/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.8.2/manifests/ha/install.yaml
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
What's Changed
- fix(14912): Fix helm valuesObject with ApplicationSet (cherry-pick #14920) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15175
- fix: stop creating new otel interceptor to avoid memory leak (cherry-pick #15174) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15178
- fix(ui): switch podgroup notification to tooltip message (cherry-pick #14821) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15224
- fix: spec.executor.instances is Optional, Support a flexible number of executors (cherry-pick #11877) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15200
- fix(appset): bitbucket server scm provider EOF on empty repo (cherry-pick #14411) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15203
- fix(appset): requeue ApplicationSet if there are validation errors (#14184) (cherry-pick #14429) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15206
- docs: add example jq path expression (cherry-pick #15130) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15209
- docs: document sourceNamespaces field (cherry-pick #15195) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15212
- fix(ui): Update default and max count for maxCookieNumber (cherry-pick #14979) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15230
- Bump version to 2.8.2 on release-2.8 branch by @github-actions in https://github.com/argoproj/argo-cd/pull/15232
Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.8.1...v2.8.2
v2.8.1
Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.8.1/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.8.1/manifests/ha/install.yaml
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Security (1)
- MODERATE: Web terminal session doesn't expire (https://github.com/argoproj/argo-cd/security/advisories/GHSA-c8xw-vjgf-94hr)
What's Changed
- docs: update Generators-Git.md (cherry-pick #14921) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/14934
- docs: Update helm.md - add missing syntax highlighting for YAML and Dockerfile blocks (cherry-pick #14911) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/14937
- fix(ui): COPY JSON for ArgoCD version should include trailing newline (#5117) (cherry-pick #14917) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/14938
- fix(cmp): send sigterm to cmp commands before sigkill to allow for potential cleanup (#9180) (cherry-pick #14955) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/14958
- fix(actions): add test for action on CronWorkflow without labels (#14962) (cherry-pick #14974) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/14982
- chore(deps): upgrade nhooyr.io/websocket dependency (#15000) by @jmeridth in https://github.com/argoproj/argo-cd/pull/15008
- fix: bump ubuntu base image. resolves #15020 (cherry-pick #15021) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15023
- docs: document permitOnlyProjectScopedClusters field (cherry-pick #15076) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15082
- docs: fix link for
argocd-repo-creds.yaml
sample (cherry-pick #15091) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15097 - docs: kubectl to synchronize argocd apps (cherry-pick #14881) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15085
- docs: add docs for various annotations and labels (cherry-pick #14020) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15112
- docs: fix typo (cherry-pick #15083) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15090
- docs: fix configmap name for certificates (cherry-pick #9596) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15131
- docs(progressive syncs): specify which ConfigMap to use (cherry-pick #15119) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15133
- Bump version to 2.8.1 on release-2.8 branch by @github-actions in https://github.com/argoproj/argo-cd/pull/15139
- fix: windows build (cherry-pick #15154) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15156
- fix(ui): code lint (cherry-pick #15150) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15160
Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.8.0...v2.8.1
v2.8.0
Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.8.0/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.8.0/manifests/ha/install.yaml
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.8.0/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.8.0/manifests/ha/install.yaml
Release signatures
All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changes
This release includes 342 contributions from 124 contributors (95 of them new) with 46 features and 69 bug fixes.
Features (46)
- feat: Adding kubelogin capability to argocd-k8s-auth (#9460) (#10700) (#14866)
- feat(appset): Restrict scm provider urls (#14286) (#14779)
- feat(deep-links): sprig support (#14660) (#14676)
- feat(appset): Add support for self-signed TLS / Certificates for Gitlab Scm Provider (#14348) (#14462)
- feat: upgrade dexIDP from 2.36.0 -> 2.37.0 (#14305) (#14310) (#14312)
- feat(appset): ApplicationSet in any namespace (#12378)
- feat(appset): add Merge Request Generator for Azure DevOps Repos (#13367)
- feat(appset): Added Bitbucket Cloud support for pull request generator (#11273) (#11275)
- feat(helm): helm values can be either a string or a map (#2936) (#11538)
- feat: add
ignoreResourceUpdates
to reduce controller CPU usage (#13534) (#13912) - feat: Create job action (#12174 and #4116) (#12925)
- feat(action): support refresh of ExternalSecret (#13951)
- feat(health): Add custom health check for KServe Inference Service resources (#14177)
- feat: upgrade notification engine (#14175)
- feat(appset): Policies create-only, create-update, sync per ApplicationSet (#11462)
- feat(ui): enable gzip for UI assets by default (#13944)
- feat: add health-checks for snapshot volume (#13979)
- feat(appset): Implement Plugin Generator (#13017)
- feat: RBAC csv policy can be composed by multiple configmap keys (#12511)
- feat(appset): add support for missingkey=error in ApplicationSets (#13731) (#13733)
- feat(appset): Support AWS CodeCommit in ApplicationSet controller (Alpha) (#13579)
- feat(health): Add Health Checks for IngressController resources (#12776)
- feat(appset): Add argocd.argoproj.io/application-set-name to rendered appset applications (#13456)
- feat: specify listen address from env / command line (#11846)
- feat(appset): Implement additional values and their interpolation for Git and SCM generators (#10751) (#10754)
- feat(appset): Add target branch support pullrequestgenerator (#13535)
- feat(health): support for external-secrets.io cluster resources (#12957)
- feat: support referencing secret in any field of oidc config (#13475)
- feat: Add controllerNamespace to .status of an application (#13081)
- feat: allow argocd-notifications-controller env variables (#13605)
- feat: Added healthcheck for ArgoEvents EventBus CRD. #12395 (#12401)
- feat: Support insecure flag for OCI pull command and upgrade helm version to 3.12.0 (#13608)
- feat: add monaco-kubernetes for editing IntelliSense (#12778)
- feat: Page header and toolbar in system extensions (#13451)
- feat: use oras-go library to enable more complex OCI Helm authentication (#12554)
- feat(appset): add configurable max reconciliations to appset (#13381)
- feat: support health check on ClusterIssuer (#12000)
- feat: add MariaDB CRD health checks (#13143)
- feat: enable gzip compression in Redis by default (#13458) (#13459)
- feat(appset): applicationset controller use repo server (#10952) (#12714)
- feat(UI): Tree view groups node by heath status (#12089)
- feat: better repo path sanitization (#12974)
- feat: Expose Helm Chart metadata in Argo CD UI (#11352) (#11575)
- feat: add
short_sha_7
to AppSet generators (#11976) (#13199) - feat: Making the moment lib global in ArgoCD project to minimize the tar ball of metrics extension (#13075)
- feat: Container statuses on summary tab of pod and detailed info in tooltip for pod on resource tree (#11513)
Bug fixes (69)
- fix(appset): typo in ARGOCD_APPLICATIONSET_CONTROLLER_ALLOWED_SCM_MROVIDERS (#14902) (#14913) (#14931)
- fix: Change underscore (_) back to plus (+) to get valid SemVer when when reading tags from OCI registry (#14537) (#14908)
- fix(ui): Fixes health icon positioning (#14708) (#14852) (#14901)
- fix: Repo URL link for unsupported sources links to https:///null/path/to/chart (#14861) (#14873)
- fix(ui): no hyphen for "create job" action + nice icon (#14776) (#14777) (#14802)
- fix(controller): cache deadlock on delete and re-add cluster (#14780) (#14798)
- fix: bad merge (#14759)
- fix(ui): display valuesobject if set (#14257) (#14755)
- fix: manifest generation error with null annotations (#14336) (#14680) (#14735)
- fix: ApplicationSet Controller crashes when tag is not closed; panic: Cannot find end tag="}}"(#14227) (#14651) (#14656)
- fix(ui): The default pod group filter should be removed if fewer than 15 pods (#14590) (#14671)
- fix(ui): Drop ready from Completed container status (#14434) (#14629) (#14646)
- fix(api): return 404 when the app is not found if a project is specified (#13393) (#13394) (#14600)
- fix(cli): argocd CLI RBAC validation doesn't work on actions (#13911) (#14578) (#14581)
- fix: Remove executable bit from default file mode (#14497) (#14576)
- fix(server): not need send application if it is not under enabled namespaces (#14479) (#14575)
- fix(controller): populate ignoreDifferences in sync status (#14542) (#14557)
- fix(security): don't allow app enumeration via RevisionChartDetails (#14512) (#14517)
- fix(cli): fix tracking annotation diff for non-namespaced resources (#13924) (#14473)
- fix: trigger refresh on changed ignoreDifferences (#12607) (#14403)
- fix(action): copy metadata on create-job action (#14232) (#14233) (#14453)
- fix: adds WebSocket ping to interactive terminal (#14191) (cherry-pick #14192) (#14399)
- fix(sharding): recurring info logs to debug (#14383) (#14385)
- fix: Change disallowed application destination message (#14284) (#14307) (#14326)
- fix: deadlock in controller (#14304) (#14306)
- fix: Correctly verify signatures when targetRevision is a branch name (#14214) (#14235)
- fix: add gitlab.SystemHookEvents to support Gitlab system events (#12547)
- fix: fix permanent vertical scroll and left marging on project details page (#14181)
- fix(appset): Apply nested matrix and merge generator's generator selectors (#11984)
- fix: fix broken tooltip component (#14178)
- fix: added
optional: true
field to ARGOCD_APPLICATIONSET_CONTROLLER_POLICY env var (#14160) - fix: retain count and order of revisions for multi source apps (#14108) (#14113)
- fix(gitpod): changed permission of gocache folder (#14122)
- fix(ui): use react link to route to relative deep-link path (#13529)
- fix(cmp): discover plugins relative to app path (#13940) (#13946)
- fix(ui): soften readiness gate failure message (#13972) (#14076)
- fix: remove extra comma (#13969)
- fix(ui): rename variable component to Component (#13983)
- fix: Fixes sharding placement algorithm and allows development of alternative algorithms (#13018)
- fix: creds.CAPath passed helm in PullOCI (#13726) (#13871)
- fix: set readOnlyRootFilesystem to true for redis and ha-proxy (#13316)
- fix: remove rolebinding for missing role (#7510)
- fix(ui): set arrow into negative space in pod-terminal-viewer (#13060)
- fix(appset): return error on invalid annotations (#13743)
- fix(rbac): handle malformed rbac policy (#11964)
- fix(ui): Display error msg when live state is empty (#13031)
- fix: add optional safer Git file generator globbing (#13313) (#13314)
- fix: health-checks for Elasticsearch (#13322)
- fix(ui): Updated text in refresh dialog (#13583)
- fix: allow sync when multiple allow windows are present (#12706)
- fix: implement filtering on cluster
List
API endpoint (#13363) - fix(repo-server): completely clean up Git working directory (#3683) (#13001)
- fix(ui): Stop using the deprecated url format for gitlab instances (#13687)
- fix(appset): allow cluster urls to be matched (#13715)
- fix(appset): Post selector with Go templates in ApplicationSet (#13584)
- fix: Disable keep alives for helm https connections (#13695)
- fix: surface source not permitted errors (#12255)
- fix: CVE-2023-1732 (#13748)
- fix: ui dark theme transition (#12068)
- fix: typo in manifest (#13677)
- fix: update managed namespace metadata (#13074)
- fix: fix broken helm repo alias/name support (#13647)
- fix: rewrite Host header in dex round tripper (#13500)
- fix: UI should show error if repo/creds disconnect attempt fails (#13498)
- fix: CMPv2 does not allow symlinks to adjacent files in same git repo. Fixes #13342 (#13360)
- fix: broken Git file generator caching (fixes #13440) (#13452)
- fix: Avoid Docker volume creating empty directory if
dex.yaml
could not be generated, improve error message (#10332) - fix: append elementsYaml in order to keep fields order (#13335)
- fix(ui): Object options menu truncated when selected in ApplicationListView. (#11695)
Documentation (37)
- docs: Update helm.md - add missing syntax highlighting for YAML and Dockerfile blocks (#14911) (#14937)
- docs: Update Generators-Git.md (#14921) (#14934)
- docs: Update Controlling-Resource-Modification.md (#14751) (#14812)
- docs: improve ignoreResourceUpdates docs (cherry-pick #14475) (#14504)
- docs: fix typo (#14412) (#14413)
- docs: Added information about scopes (#2782) (#14354) (#14380)
- docs: change to the correct property for the dex server value (#14279) (#14291)
- docs: update documentation to reflect the procedure on current keycloak (#12505)
- docs: list tested Kubernetes versions (#12276) (#14180)
- docs: add CRD specification example files to docs (#14021)
- docs: fix code highlighting (#14022)
- docs: Fix example domain typo (#13896)
- docs: Clarify ingress-nginx ssl termination example (#13913)
- docs: add pre-release to helm tracking strategies (#13923)
- docs: proposal/dynamic rebalancing of clusters across shards (#13221)
- docs: fix typo (#13967)
- docs: document matchExpressions field for post-selectors (#13646)
- docs: add GHSA to vulnerability reporting methods (#13510)
- docs: added command to add environmental PATH (#13240)
- docs: update USERS.md with the addition of seek.com.au (#13297)
- docs: Add Mono Repo Usage (#9556)
- docs: Update health documentation (#12996)
- docs: fix url in kustomize installation example (#13581)
- docs: Custom Style Class name update (#13392)
- docs: Remove old annotations (#12168)
- docs: add scalability benchmarking proposal (#12662)
- docs: Simplify the release document (#13563)
- docs(users): add StreamNative to the list of users (#13499)
- docs: Add Hostinger to USERS.md (#13304)
- docs: nginx passthrough secret as argocd-server-tls (#12921)
- docs: Add Argo CD components architecture doc (#13194)
- docs: Add link to kustomization example for installing argocd (#13268)
- docs: Update RBAC example to include permissions for projects (#12773)
- docs: Add Argo CD Core documentation (#13225)
- docs: add KelkooGroup to users list (#13095)
- docs: recommend users build test-tools-image locally (#13082)
- docs: update private-repositories.md (#12332)
Other (174)
- fix(ui): COPY JSON for ArgoCD version should include trailing newline (#5117) (#14917) (#14938)
- chore: fix non-deterministic test (#14905) (#14906)
- chore: wrap ComparisonError messages (#14886) (#14890)
- chore: revert #12255 (#14858) (#14863)
- chore: add more tests in proxy extension headers (#14842) (#14853)
- chore: Add header support for proxy extension requests (#14800) (#14841)
- docs: Change Generator docs for List Generator to note any key/value pairs can be used (#14825) (#14832)
- chore: Upgrade semver to avoid cve (#14710) (#14713)
- chore: Generate SLSA provenance for SBOM (#14438) (cherry-pick #14507) (#14559)
- chore: improve ignoreResourceUpdates logging (#14476) (#14500)
- chore(deps): bump library/golang from 1.20.5 to 1.20.6 (#14480) (#14484)
- Unified option format (#11259)
- chore(deps): bump google.golang.org/protobuf from 1.30.0 to 1.31.0 (#14212)
- chore(deps): upgrade go-grpc to v0.15.0 (#13872)
- chore(deps): bump bitnami/kubectl from 1.26 to 1.27 in /test/container (#13270)
- build: Use full-qualified image slugs instead of short names (#14198)
- chore(deps): bump sigstore/cosign-installer from 3.0.5 to 3.1.0 (#14202)
- chore(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 (#14203)
- chore: add 1.27 k3s version to ci-build.yaml (#14207)
- relogin cmd tests (#14186)
- chore(deps): bump github.com/aws/aws-sdk-go from 1.44.288 to 1.44.289 (#14188)
- chore(deps): bump Helm to 3.12.1 and Kustomize to 5.1.0 (#14173)
- chore(deps): upgrade node to 20.3.1 (#14174)
- chore(deps): bump github.com/aws/aws-sdk-go from 1.44.287 to 1.44.288 (#14176)
- chore(deps): bump github.com/xanzy/go-gitlab from 0.85.0 to 0.86.0 (#14165)
- chore(deps): bump github.com/aws/aws-sdk-go from 1.44.286 to 1.44.287 (#14164)
- chore(deps): bump google.golang.org/grpc from 1.56.0 to 1.56.1 (#14163)
- build: Consistently default to linux/amd64 (#14146)
- chore(deps): bump github.com/aws/aws-sdk-go from 1.44.285 to 1.44.286 (#14153)
- chore: remove argocd-cm plugin support (#13755)
- chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.59 to 0.9.60 (#14118)
- chore(deps): bump github.com/aws/aws-sdk-go from 1.44.283 to 1.44.285 (#14126)
- chore: parse from env (#14116)
- chore: add build-args for git-commit etc (#14114)
- chore(deps): bump github.com/casbin/casbin/v2 from 2.71.0 to 2.71.1 (#14120)
- Revert "feat: add monaco-kubernetes for editing IntelliSense (#12778)" (#14000)
- chore: remove references to ARGOCD_REDIS (#13434)
- chore(deps): bump github.com/casbin/casbin/v2 from 2.70.0 to 2.71.0 (#14095)
- chore: add ZDF to USERS.md (#14099)
- chore(deps): bump github.com/prometheus/client_golang (#14092)
- chore(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.0 (#14093)
- chore(deps): bump github.com/aws/aws-sdk-go from 1.44.282 to 1.44.283 (#14094)
- chore(deps): bump golang.org/x/sync from 0.2.0 to 0.3.0 (#14069)
- Add the default resource exclusions (#13897)
- chore(deps): upgrade go to 1.20.5 (#13941)
- chore(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.9.0 (#14031)
- chore(deps): bump docker/build-push-action from 4.1.0 to 4.1.1 (#14033)
- chore(deps): bump github.com/aws/aws-sdk-go from 1.44.281 to 1.44.282 (#14028)
- chore(deps): bump golang.org/x/crypto from 0.9.0 to 0.10.0 (#14029)
- chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.58 to 0.9.59 (#14030)
- chore(deps): bump peter-evans/create-pull-request from 5.0.1 to 5.0.2 (#14032)
- chore(deps): bump docker/setup-buildx-action from 2.6.0 to 2.7.0 (#14034)
- chore: add MeilleursAgents to USERS.md (#14007)
- chore(deps): bump goreleaser/goreleaser-action from 4.2.0 to 4.3.0 (#14014)
- chore(deps): bump golangci/golangci-lint-action from 3.5.0 to 3.6.0 (#14013)
- chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 (#14011)
- chore(deps): bump github.com/aws/aws-sdk-go from 1.44.280 to 1.44.281 (#14010)
- chore(deps): bump github.com/aws/aws-sdk-go from 1.44.279 to 1.44.280 (#13991)
- chore(deps): bump actions/checkout from 3.5.2 to 3.5.3 (#13993)
- chore(deps): bump github.com/xanzy/go-gitlab from 0.84.0 to 0.85.0 (#13992)
- chore(deps): bump docker/build-push-action from 4.0.0 to 4.1.0 (#13994)
- chore(deps): bump library/busybox in /test/e2e/multiarch-container (#13998)
- chore(deps): bump github.com/aws/aws-sdk-go from 1.44.278 to 1.44.279 (#13974)
- chore(deps): bump thehanimo/pr-title-checker from 1.3.7 to 1.4.0 (#13903)
- chore(deps): bump golangci/golangci-lint-action from 3.4.0 to 3.5.0 (#13904)
- chore(deps): bump docker/setup-qemu-action from 2.1.0 to 2.2.0 (#13962)
- chore(deps): bump docker/login-action from 2.1.0 to 2.2.0 (#13961)
- chore(deps): bump slsa-framework/slsa-github-generator (#13960)
- chore(deps): bump docker/setup-buildx-action from 2.5.0 to 2.6.0 (#13959)
- chore(deps): bump github.com/aws/aws-sdk-go from 1.44.277 to 1.44.278 (#13957)
- chore(deps): bump github.com/casbin/casbin/v2 from 2.69.1 to 2.70.0 (#13958)
- chore: Code format (#12400)
- chore(deps): bump github.com/hashicorp/go-retryablehttp (#13933)
- chore(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 (#13932)
- chore(deps): bump github.com/aws/aws-sdk-go from 1.44.275 to 1.44.277 (#13931)
- chore(deps): bump github.com/Masterminds/semver/v3 from 3.2.0 to 3.2.1 (#13930)
- chore(deps): bump github.com/alicebob/miniredis/v2 from 2.23.1 to 2.30.3 (#13917)
- chore(deps): bump github.com/prometheus/client_golang (#13919)
- chore(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 (#13918)
- chore(deps): bump github.com/grpc-ecosystem/go-grpc-middleware (#13920)
- chore(deps): bump github.com/yuin/gopher-lua (#13916)
- chore(deps): bump github.com/itchyny/gojq from 0.12.12 to 0.12.13 (#13902)
- chore(deps): bump github.com/aws/aws-sdk-go from 1.44.274 to 1.44.275 (#13901)
- chore(deps): bump github.com/redis/go-redis/v9 from 9.0.2 to 9.0.5 (#13900)
- chore(deps): bump github.com/go-git/go-git/v5 from 5.6.1 to 5.7.0 (#13899)
- chore: bump argo-ui version (#13836)
- chore(deps): bump github.com/aws/aws-sdk-go from 1.44.272 to 1.44.274 (#13880)
- chore(deps): bump oras.land/oras-go/v2 from 2.1.0 to 2.2.0 (#13881)
- chore(deps): bump github.com/imdario/mergo from 0.3.13 to 0.3.16 (#13883)
- chore(deps): bump github.com/xanzy/go-gitlab from 0.83.0 to 0.84.0 (#13884)
- chore: remove unused variables in GenerateManifests (#13887)
- chore: Clean up repeated package import (#13821)
- chore(deps): bump github.com/casbin/casbin/v2 from 2.60.0 to 2.69.1 (#13861)
- chore(deps): bump github.com/dustin/go-humanize from 1.0.0 to 1.0.1 (#13864)
- chore(deps): bump github.com/google/go-jsonnet from 0.19.1 to 0.20.0 (#13863)
- chore(deps): bump golang.org/x/sync from 0.1.0 to 0.2.0 (#13862)
- chore(deps): bump github.com/antonmedv/expr from 1.9.0 to 1.12.5 (#13860)
- chore(deps): bump github.com/aws/aws-sdk-go from 1.44.271 to 1.44.272 (#13842)
- chore(deps): bump github.com/coreos/go-oidc/v3 from 3.4.0 to 3.6.0 (#13844)
- chore(deps): bump github.com/go-openapi/runtime from 0.25.0 to 0.26.0 (#13845)
- chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.55 to 0.9.58 (#13843)
- chore: bump otel dependencies (#13798)
- chore: upgrade node to 20.2.0 (#13800)
- chore: upgrade go to 1.20.4 (#13801)
- chore(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 (#13829)
- chore(deps): bump github.com/itchyny/gojq from 0.12.10 to 0.12.12 (#13816)
- chore(deps): bump github.com/gorilla/websocket from 1.4.2 to 1.5.0 (#13817)
- chore(deps): bump github.com/whilp/git-urls (#13814)
- chore(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.19 (#13818)
- chore(deps): bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 (#12109)
- chore(deps): bump github.com/xanzy/go-gitlab from 0.60.0 to 0.83.0 (#13269)
- chore(deps): bump codecov/codecov-action from 3.1.1 to 3.1.4 (#13602)
- chore(deps): bump sigstore/cosign-installer from 3.0.1 to 3.0.5 (#13639)
- chore(deps): bump foundation-sites from 6.7.4 to 6.7.5 in /ui (#13806)
- fix(appset): ArgoCD admin cmd: handle applicationsets RBAC (#11997)
- chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 (#13804)
- chore(deps): bump golang.org/x/crypto from 0.6.0 to 0.9.0 (#13803)
- chore(deps): bump github.com/aws/aws-sdk-go from 1.44.164 to 1.44.271 (#13805)
- chore(deps-dev): bump webpack from 5.70.0 to 5.84.1 in /ui (#13750)
- Implement Proclaim CRD health checks. (#12930)
- chore: set explicit package.json deps (#13483)
- chore: add GoTo Financial ArgoCD user (#13317)
- feat: add health-checks for Percona XtraDB cluster (#13093)
- chore(deps): bump slsa-framework/slsa-github-generator (#13656)
- chore: Clean up repeated package import (#13685)
- test: add tests to validate helm ranges (#4047) (#13662)
- chore: code clean for hack known_types.go (#12304)
- chore(deps): bump peter-evans/create-pull-request from 4.2.4 to 5.0.1 (#13408)
- chore: add chainnodes to users (#13754)
- chore: Add Veepee into USERS (#13301)
- chore(deps): bump actions/setup-go from 3.5.0 to 4.0.1 (#13601)
- chore: Clean up repeated package import (#13543)
- chore(deps): bump github.com/docker/distribution (#13554)
- chore: update VERSION on rc1 release (#13558)
- Update kustomize resource to correct path (#13196)
- consume cluster cache deadlock fix in gitops-engine (#13611)
- chore: Add Procore as a user of Argo CD (#13515)
- Add candis.io to USERS.md (#13504)
- chore(deps): bump actions/checkout from 3.4.0 to 3.5.2 (#13228)
- chore: Add Cloudogu to USERS.md (#13412)
- chore: replace
github.com/ghodss/yaml
withsigs.k8s.io/yaml
(#13292) - chore: add Puzzle to the users list (#13288)
- chore: Add ScaleFactory to USERS.md (#13303)
- Add DaoCloud in users (#13300)
- chore: Bumped version to the next release version 2.8.0 (#13368)
- chore(deps): bump library/golang from 1.19.6 to 1.19.7 (#12859)
- chore: adding test coverage for the notification_controller (#13339)
- chore: Add additional field to set Extra Build Information while building argo-cd by vendors (#13324)
- add last sync field to application tiles (#13184)
- chore: Add Previder BV to USERS.md (#13273)
- chore: Add Albert Heijn to the users.md (#13280)
- chore: add SLSA badge (#13282)
- chore: Clean up repeated package import (#13134)
- chore: better error handling for nestedGeneratorHasClusterGenerator (#13195)
- Added filterSuggestions to project dropdown list (#13109)
- chore: Add Lucid Motors to USERS.md (#13117)
- chore: Add missionlane.com to USERS.md (#13094)
- ci: OSV scanner override (#13099)
- chore: fix MR title config (#13091)
- chore: MR title, uses less permissive permissions (#13084)
- chore(deps): bump ossf/scorecard-action from 2.1.2 to 2.1.3 (#13049)
- chore: use build-and-publish digest output (#13083)
- chore: fix needs context for image workflow (#13072)
- chore: use ghcr for latest tag attestations (#13058)
- chore: remove invalid err check (#13040)
- chore: updated error message to include context (#11066)
- chore: remove deprecated apiversion for deployment (#11830)
- chore: identify pluginName with quotes (#12040) (#12046)
- chore: Comment format (#12399)
- chore: Update example-plugin-helm version and the latest yg version (#11840)
- chore: change cmp server help message (#12049)
- chore: delete unused code for admin-settings-rbac (#12312)
- chore: remove duplicate message field (#12477)
- Add wildcard filtering to the name search field (#13022)
v2.7.13
Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.7.13/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.7.13/manifests/ha/install.yaml
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
-
5a1f5c6
: fix(health): spec.executor.instances is Optional, Support a flexible number of executors (#11877) (#15201) (@gcp-cherry-pick-bot[bot]) -
514ff2c
: fix(appset): bitbucket server scm provider EOF on empty repo (#14411) (#15204) (@gcp-cherry-pick-bot[bot]) -
ece9d1b
: fix: Disable keep alives for helm https connections (#13849) (@mkekeberg) -
0044e79
: fix: requeue ApplicationSet if there are validation errors (#14429) (#15207) (@gcp-cherry-pick-bot[bot])
Documentation
-
a44a121
: docs: document sourceNamespaces field (#15195) (#15213) (@gcp-cherry-pick-bot[bot])
Other work
-
ed6186b
: chore: add example jq path expression (#15130) (#15210) (@gcp-cherry-pick-bot[bot])
Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.7.12...v2.7.13
v2.7.12
Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.7.12/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.7.12/manifests/ha/install.yaml
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Security (1)
- MODERATE: Web terminal session doesn't expire (https://github.com/argoproj/argo-cd/security/advisories/GHSA-c8xw-vjgf-94hr)
Changelog
Bug fixes
-
fcdaf9b
: fix(ui): COPY JSON for ArgoCD version should include trailing newline (#5117) (#14917) (#14939) (@gcp-cherry-pick-bot[bot]) -
2d483a4
: fix(cmp): send sigterm to cmp commands before sigkill to allow for potential cleanup (#9180) (#14955) (#14959) (@gcp-cherry-pick-bot[bot]) -
2333b04
: fix(ui): code lint (#15150) (#15161) (@gcp-cherry-pick-bot[bot]) -
849b5a6
: fix: bump ubuntu base image (#15020) (#15021) (#15024) (@gcp-cherry-pick-bot[bot]) -
685040c
: fix: upgrade slsa-github-generator (#15173) (@34fathombelow) -
7a353a5
: fix: windows build (#15154) (#15157) (@gcp-cherry-pick-bot[bot])
Documentation
-
990ab0e
: docs: Update Generators-Git.md (#14921) (#14935) (@gcp-cherry-pick-bot[bot]) -
693ea66
: docs: add docs for various annotations and labels (#14020) (#15113) (@gcp-cherry-pick-bot[bot]) -
af202bc
: docs: document permitOnlyProjectScopedClusters field (#15076) (#15081) (@gcp-cherry-pick-bot[bot]) -
6e6d6e0
: docs: fix typo (#15083) (#15089) (@gcp-cherry-pick-bot[bot]) -
2ff6e51
: docs: kubectl to synchronize argocd apps (#14881) (#15086) (@gcp-cherry-pick-bot[bot]) -
580966c
: docs:✏ ️ fix typo on configmap name for private certs (#9596) (#15132) (@gcp-cherry-pick-bot[bot])
Other work
-
003d6d1
: Merge pull request from GHSA-c8xw-vjgf-94hr (@pasha-codefresh) -
7e3572f
: docs(progressive syncs): specify which ConfigMap to use (#15119) (#15134) (@gcp-cherry-pick-bot[bot])
Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.7.11...v2.7.12
v2.7.11
Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.7.11/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.7.11/manifests/ha/install.yaml
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
-
9b6892c
: fix: Correct brokenforever
option in pod logs viewer. Fixes #14762 (#14763) (#14804) (@gcp-cherry-pick-bot[bot]) -
c56d7e7
: fix: ManagedResources API should not return diff for hooks (#14816) (#14829) (@gcp-cherry-pick-bot[bot])
Documentation
-
89c30d8
: docs: Change Generator docs for List Generator to note any key/value pairs can be used (#14825) (#14833) (@gcp-cherry-pick-bot[bot]) -
97ddc4b
: docs: Update application.yaml (#14742) (#14810) (@gcp-cherry-pick-bot[bot]) -
743334e
: docs: add ignoreDifferences name and namespace fields (#14741) (#14806) (@gcp-cherry-pick-bot[bot])
Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.7.10...v2.7.11
v2.7.10
Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.7.10/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.7.10/manifests/ha/install.yaml
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
-
ad00644
: fix(controller): cache deadlock on delete and re-add cluster (#14780) (#14794) (@gcp-cherry-pick-bot[bot]) -
316be4e
: fix(controller): log failed attempts to update operation state (#14273) (#14729) (@gcp-cherry-pick-bot[bot]) -
84e2f77
: fix(server): handle PATCH in http/s server (#2677) (#14530) (#14732) (@gcp-cherry-pick-bot[bot]) -
3e65ad2
: fix(sso): Set redirectURI for gitea, google, oauth Dex connectors (#11237) (#14737) (@gcp-cherry-pick-bot[bot]) -
fbe7f8f
: fix: ApplicationSet Controller crashes when tag is not closed; panic: Cannot find end tag="}}"(#14227) ( #14227) (#14689) (@schakrad) -
284c16f
: fix: OCI dependency url can't contain part of repository (#14699) (#14757) (@gcp-cherry-pick-bot[bot])
Documentation
-
1960da7
: docs: Add missing value (#14538) (#14775) (@gcp-cherry-pick-bot[bot]) -
057a39d
: docs: Clarify that security policy covers last 3 versions (#14786) (#14792) (@gcp-cherry-pick-bot[bot])
Other work
-
0157f41
: chore: Print in-cluster svr addr disabled warning when server starts (#14685) (@terrytangyuan)
Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.7.9...v2.7.10
v2.7.9
Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.7.9/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.7.9/manifests/ha/install.yaml
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
-
f1bfa8c
: fix(ui): Fix Destination Cluster URL/Name Drop down not updating destination field (#13813) (#14216) (#14627) (@gcp-cherry-pick-bot[bot]) -
53eeed0
: fix(ui): correctly align status column in application resource list (#14618) (@aslafy-z) -
ba44ddb
: fix: webhook handler fails to refresh when alternate application namespaces are configured (#13976) (#14653) (@gcp-cherry-pick-bot[bot])
Documentation
-
0d24330
: docs: Skipexport
keyword in notification docs (#14633) (#14643) (@gcp-cherry-pick-bot[bot])
Other work
-
8249edd
: docs(deep-links): Fix link to pkg.go.dev to not return 404 (#14595) (#14640) (@gcp-cherry-pick-bot[bot])
Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.7.8...v2.7.9
v2.7.8
Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.7.8/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.7.8/manifests/ha/install.yaml
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
-
697f2d4
: fix(appset): normalize app spec before applying (#14481) (#14555) (@gcp-cherry-pick-bot[bot]) -
c45665f
: fix(cli): allow argocd cli app command for multi source apps (#14256) (#14587) (@gcp-cherry-pick-bot[bot]) -
62e9973
: fix(cli): argocd CLI RBAC validation doesn't work on actions (#13911) (#14578) (#14582) (@gcp-cherry-pick-bot[bot]) -
fe4ba23
: fix(cli): fix tracking annotation diff for non-namespaced resources (#14508) (@maxbrunet) -
687323f
: fix: 'argocd-server-tls' Secret should be loaded from informer (#14522) (#14547) (@gcp-cherry-pick-bot[bot]) -
4f1d876
: fix: Correct pod log viewer to support short log lines. Fixes #14402 (#14543) (#14562) (@gcp-cherry-pick-bot[bot]) -
2b326dc
: fix: Fix pod log viewer scrollbars (#14199) (#14419) (@gcp-cherry-pick-bot[bot]) -
85e5b0b
: fix: Update bitbucket.org rsa ssh key (#14392) (#14397) (@gcp-cherry-pick-bot[bot]) -
7d67b4d
: fix: warn instead of error on failure to get plugin app details (#14430) (@crenshaw-dev)
Documentation
-
da5dab7
: docs: Correct example ClusterRole to allow Events in any namespace (#14544) (#14551) (@gcp-cherry-pick-bot[bot]) -
63c45b3
: docs: Update SLSA verification commands (#14437) (#14455) (@gcp-cherry-pick-bot[bot]) -
cb06d7d
: docs: managedFieldsManagers example in docs needs double-quotes (#14324) (#14372) (@gcp-cherry-pick-bot[bot]) -
d9dfdae
: docs: typofix (#14344) (#14356) (@gcp-cherry-pick-bot[bot])
Other work
-
490fb79
: Cherry[2.7] Helm repository might affect manifest generation of not related helm charts (#14528) (@alexmt)
Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.7.7...v2.7.8
v2.7.7
Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.7.7/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.7.7/manifests/ha/install.yaml
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Features
-
0a368c2
: feat: upgrade dexIDP from 2.36.0 -> 2.37.0 (#14305) (#14310) (#14322) (@venkatamutyala)
Bug fixes
-
3424fa4
: fix(appset): handles a race condition where RollingSync does not properly detect a successful sync (#13926) (#14200) (@gcp-cherry-pick-bot[bot]) -
26a40aa
: fix(ui): Add newlines to copy and paste of logs (#14019) (#14103) (#14144) (@gcp-cherry-pick-bot[bot]) -
93b2228
: fix(ui): Polish pod logs viewer (#14050) (#14107) (#14193) (@gcp-cherry-pick-bot[bot]) -
dd70d97
: fix: Correctly verify signatures when targetRevision is a branch name (cherry-pick #14214) (#14236) (@jannfis)
Documentation
-
e48496c
: docs: Add documentation on background cascading deletion (#12229) (#14149) (@gcp-cherry-pick-bot[bot]) -
6bd5bd0
: docs: Adding explanation for CMP yaml/json generation (must be K8S object) (#9471) (#14295) (#14302) (@gcp-cherry-pick-bot[bot]) -
5868627
: docs: Clarify "SSH known host public keys" text (#13537) (#14298) (@gcp-cherry-pick-bot[bot]) -
ba2982e
: docs: explicit that ArgoCD hooks replaces the Helm ones (#14283) (#14288) (@gcp-cherry-pick-bot[bot]) -
1611ca5
: docs: howto configure clusters with iam (#14187) (#14190) (@gcp-cherry-pick-bot[bot])
Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.7.6...v2.7.7
Configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot.