Releases: argoproj/argo-cd
Release list
v3.1.13
Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.1.13/manifests/install.yamlHA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.1.13/manifests/ha/install.yamlRelease Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
- 7a7dd4e: fix(UI): show RollingSync step clearly when labels match no step (cherry-pick #26877 for 3.1) (#26885) (@argo-cd-cherry-pick-bot[bot])
- beb9860: fix: mitigation of grpc-go CVE-2026-33186 for release-3.1 (#26982) (@dudinea)
Dependency updates
Other work
- 12c8d42: chore: use base ref for cherry-pick prs (cherry-pick #26551 for 3.1) (#26555) (@argo-cd-cherry-pick-bot[bot])
Full Changelog: v3.1.12...v3.1.13
Contributors
Assets 13
v3.4.0-rc2
Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.0-rc2/manifests/install.yamlHA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.0-rc2/manifests/ha/install.yamlRelease Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Features
- 3157fb1: feat(helm): support wildcard glob patterns for
valueFiles(cherry-pick #26768 for 3.4) (#26919) (@argo-cd-cherry-pick-bot[bot])
Bug fixes
- 21e13a6: fix(UI): show RollingSync step clearly when labels match no step (cherry-pick #26877 for 3.4) (#26882) (@argo-cd-cherry-pick-bot[bot])
- e70034a: fix(ci): add .gitkeep to images dir (cherry-pick #26892 for 3.4) (#26912) (@argo-cd-cherry-pick-bot[bot])
- 5deef68: fix(ui): include _-prefixed dirs in embedded assets (cherry-pick #26589 for 3.4) (#26909) (@argo-cd-cherry-pick-bot[bot])
- 226178c: fix: stack overflow when processing circular ownerrefs in resource graph (#26783) (cherry-pick #26790 for 3.4) (#26878) (@argo-cd-cherry-pick-bot[bot])
Full Changelog: v3.4.0-rc1...v3.4.0-rc2
v3.4.0-rc1
Important
Following Helm 3.19.0 change in how Helm interprets K8s cluster version, this Argo CD release contains a change that aligns how Argo CD interprets K8s cluster version with Helm behavior.
Impact: Application Sets with Cluster Generators, that fetch clusters based on their Kubernetes version and use argocd.argoproj.io/auto-label-cluster-info on the cluster secret, need to be updated to use argocd.argoproj.io/kubernetes-version with the vMajor.Minor.Patch format instead of the previous Major.Minor format.
More details here: https://argo-cd.readthedocs.io/en/release-3.4/operator-manual/upgrading/3.3-3.4/#cluster-version-format-change
Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.0-rc1/manifests/install.yamlHA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.0-rc1/manifests/ha/install.yamlRelease Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Features
- 05504d6: feat(appset): add Health field to ApplicationSet status (#25753) (@pjiang-dev)
- f83906d: feat(appset): optimize appset controller performance when grabbing cluster secrets (#25624) (#25577) (@rumstead)
- ed6d2c5: feat(controller): Annotation to pause reconciliation for a specific cluster (#26442) (@drewbailey)
- 5072899: feat(hydrator): making configurable authorName/Email used for hydration commit (#22847) (#25746) (@adityaraj178)
- 8ed52b2: feat(notification): add appProject access to notification templates (#26437) (#26470) (@adityaraj178)
- e1aeb79: feat(ui): AppSet Slide Out Summary (#26490) (@pjiang-dev)
- 5ab598e: feat(ui): add annotation filtering support to applications list (#25590) (@zc149)
- 1391e2f: feat(ui): add appset tree-view details page (#26262) (@pjiang-dev)
- 7208578: feat(ui): appset list page and filters (#25837) (@pjiang-dev)
- ff45972: feat(ui): enable hydrator support in app create panel (#26485) (@jwinters01)
- 1214946: feat(ui): support hydrator properties in summary tab (#26152) (@jwinters01)
- b414432: feat: Add application filter for operation status to UI (#25636) (@schlags)
- 408e99e: feat: Allow custom User-Agent headers for Helm repository requests (#25473) (@yugannkt)
- 19b41b9: feat: ApplicationSet watch API (#26409) (@pjiang-dev)
- b442167: feat: Document and expose K8S API client environment variables(#8527) (#25145) (@gosarami)
- 7a3d6f1: feat: Implement nmstate health checks (#26506) (#26507) (@sandert-k8s)
- 5859065: feat: add ApplicationSet listResourceEvents API (#25537) (@pjiang-dev)
- 2793097: feat: add OTEL instrumentation for authentication and handlers (#25296) (@devopsjedi)
- b7e2027: feat: add Prune and Delete as application level sync option (#23370) (@MrFreezeex)
- 73b4d98: feat: add
--no-install-recommendsinargocd-base#25841 (#25852) (@zeraye) - 13bc5ae: feat: add argocd account session-token command (#15277) (#24638) (@alexef)
- d8635ca: feat: add clear-all button to applications list filters (#26007) (@choejwoo)
- c2e594c: feat: disable gRPC service config DNS TXT lookups by default (#26077) (@vstoican)
- 3cb4955: feat: expose notifications controller processors count via cmd params (#26798) (@kirillbilchenko)
- c0a2a57: feat: implement application cache synchronization in appset controller (#26578) (@alexmt)
- ef75a2e: feat: limit max certificates and known hosts in stream parsing (#25777) (@ankit98040)
- f85ad11: feat: remove unused reposFilter from Applications list (#24667) (@choejwoo)
- 6f0de8b: feat: update health checks for Numaflow resources (#25698) (@dpadhiar)
Bug fixes
- ede9229: fix(actions): Use correct annotation for CNPG suspend/resume (#26711) (@rouke-broersma)
- f45ee22: fix(appset): change appset resource status count to 5000 by default (#26249) (@pjiang-dev)
- bb894e8: fix(appset): do not trigger reconciliation on appsets not part of allowed namespaces when updating a cluster secret (#25622) (@OpenGuidou)
- 330077c: fix(appset): fix post-generator selector ignoring labels in GoTemplate mode (#26717) (@thejoeejoee)
- bdc3447: fix(appset): update appset resources after creation (#26511) (@pjiang-dev)
- 59f229b: fix(ci): Add missing git-lfs installer checksum for ppc64le (#26835) (@olivergondza)
- cbc7ecd: fix(ci): Inconsistent use of IMAGE_REGISTRY and IMAGE_NAMESPACE Makefile variables (#25846) (#25860) (@dudinea)
- 2253481: fix(ci): Remove stale label when Issue/PR is updated (#26452) (@Kevinjoeharris)
- 4a5d3a7: fix(ci): add gitops-engine unit tests to CI (#25863) (@pjiang-dev)
- 92c5389: fix(ci): ensure cherry-pick commits include DCO sign-off (#26124) (@anaghaaaaa9)
- aadf2af: fix(ci): fix deleting files on linux in make build-ui (#26134) (#26135) (@dudinea)
- 946a3ab: fix(ci): fix make image DEV_IMAGE=true on non-amd64 architecture (#25897) (#25898) (@dudinea)
- 956a6a1: fix(controller): handle comma-separated hook annotations for PreDelete/PostDelete hooks (#26420) (@linghaoSu)
- af05c56: fix(dashboards): Correct job label for the Controller Telemetry Panel (#26548) (@dacbd)
- 986cdf0: fix(dev): skip Tilt rebuild on test file changes (#26624) (@nitishfy)
- 63698bd: fix(dex): run as user 1001 (#26726) (#26757) (@crenshaw-dev)
- 8a507b7: fix(dex): run as user 1001 (#26726) (#26775) (@crenshaw-dev)
- 3eeebd8: fix(docs): PR title guide from refactor to chore and reformat json (#26450) (@choejwoo)
- d66ad45: fix(docs): update other sections of feature maturity to match feature status in overview (#26411) (@ranakan19)
- 1dc85e5: fix(engine): always preserve sync status for hooks (#25692) (@agaudreault)
- a1d68ca: fix(engine): correctly set prune confirmation message in setRunningPhase (#25915) (@MrFreezeex)
- 95d19f2: fix(engine): improve operation phase messages (#25668) (@agaudreault)
- 8259711: fix(health): app missing health only when all resources are missing (#23995) (#25962) (@agaudreault)
- a22f33d: fix(health): configconnectorcontext and configconnector (#26308) (#26309) (@solidnerd)
- 6eea558: fix(health): use note.drySha when available (#26698) (@crenshaw-dev)
- afdf99f: fix(helm): Improve error message when helm cmd fails (#26159) (@olivergondza)
- 2283784: fix(hooks): always remove finalizers (#23226) (#25916) (@agaudreault)
- 67712c1: fix(hydrator): .gitattributes include deeply nested files (#25870) (#26011) (@crenshaw-dev)
- 3453367: fix(hydrator): Fix compilation error (#26024) (@olivergondza)
- ef40ba8: fix(hydrator): empty links for failed operation (#25025) (#26014) (@crenshaw-dev)
- 6f21978: fix(hydrator): git fetch needs creds (#25727) (#25738) (@crenshaw-dev)
- a439c6c: fix(hydrator): hydrated sha missing on no-ops (#25694) (#25695) (@crenshaw-dev)
- 6994a42: fix(hydrator): pass destination.namespace to manifest rendering (#25478) (#25699) (@seankhliao)
- 0a2ae95: fix(hydrator): race when pushing notes (#25700) (@crenshaw-dev)
- e5e00d3: fix(hydrator): use refresh paths from drySource when source hydration is enabled (#25516) (@FourFifthsCode)
- fe...
Contributors
Assets 13
v3.3.4
Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.4/manifests/install.yamlHA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.4/manifests/ha/install.yamlRelease Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
- 182e4c6: fix(ci): Add missing git-lfs installer checksum for ppc64le (cherry-pick #26835 for 3.3) (#26836) (@argo-cd-cherry-pick-bot[bot])
- 2fcc40a: fix: skip token refresh threshold parsing in unrelated components (cherry-pick 3.3) (#26806) (@gdsoumya)
Documentation
- 01b86e7: docs: clarify cluster version change impact for ClusterGenerator, CMP Plugins and migration (#26851) (@reggie-k)
Other work
- e164f8c: chore: bump otel-sdk (release-3.3) (#26808) (@blakepettersson)
Full Changelog: v3.3.3...v3.3.4
Contributors
Assets 13
v3.3.3
Important
Following Helm 3.19.0 change in how Helm interprets K8s cluster version, Argo CD 3.3.3 release contains a change that aligns how Argo CD interprets K8s cluster version with Helm behavior.
Impact: Application Sets with Cluster Generators, that fetch clusters based on their Kubernetes version and use argocd.argoproj.io/auto-label-cluster-info on the cluster secret, need to be updated to use argocd.argoproj.io/kubernetes-version with the vMajor.Minor.Patch format instead of the previous Major.Minor format.
More details here: https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/3.2-3.3/#cluster-version-format-change
Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.3/manifests/install.yamlHA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.3/manifests/ha/install.yamlRelease Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
- 6224d67: fix(actions): Use correct annotation for CNPG suspend/resume (cherry-pick #26711 for 3.3) (#26727) (@argo-cd-cherry-pick-bot[bot])
- 968c633: fix(controller): handle comma-separated hook annotations for PreDelete/PostDelete hooks (cherry-pick #26420 for 3.3) (#26586) (@argo-cd-cherry-pick-bot[bot])
- 4411801: fix(health): use note.drySha when available (cherry-pick #26698 for 3.3) (#26750) (@argo-cd-cherry-pick-bot[bot])
- 3d3760f: fix(ui): standard resource icons are not displayed properly.#26216 (cherry-pick #26228 for 3.3) (#26380) (@argo-cd-cherry-pick-bot[bot])
- c6df35d: fix: consistency of kubeversion with helm version 3 3 (#26744) (@ppapapetrou76)
- 5e19021: fix: multi-level cross-namespace hierarchy traversal for cluster-scop… (#26640) (@agaudreault)
Other work
- c61c593: chore: use base ref for cherry-pick prs (cherry-pick #26551 for 3.3) (#26553) (@argo-cd-cherry-pick-bot[bot])
Full Changelog: v3.3.2...v3.3.3
Contributors
Assets 13
v3.3.2
Important
Before upgrading all types of Argo CD installations to this release, please read the upgrade guide first:
https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/3.2-3.3/#breaking-changes
Upgrading Argo CD which is managing itself
Users who have an Argo CD Application that manages their Argo CD installation, must enable ServerSideApply=true sync option on this Application in order for the upgrade to succeed.
The issue with failed to perform client-side apply migration that existed on version 3.3.0 and 3.3.1 has been solved in this release: #26279
For users who have previously upgraded to Argo CD 3.3.0or 3.3.1 and applied the temporary remediation of ClientSideApplyMigration=false sync option on the Application that manages their Argo CD, are required to remove this setting to restore the default behavior of performing the migration.
The reason for removing the ClientSideApplyMigration=false sync option is that it may cause conflicts between Argo CD K8s field manager and other field managers at a later point in time.
More details here:
https://argo-cd.readthedocs.io/en/stable/user-guide/sync-options/#client-side-apply-migration
Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.2/manifests/install.yamlHA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.2/manifests/ha/install.yamlRelease Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
- 67c2319: fix: use csapgrade to patch managedFields for client-side apply migration (cherry-pick #26289 for 3.3) (#26516) (@argo-cd-cherry-pick-bot[bot])
Documentation
- 1bf62ae: docs: instruct to enable ClientSideApplyMigration in 3.3.2 (cherry-pick #26547 for 3.3) (#26549) (@argo-cd-cherry-pick-bot[bot])
Full Changelog: v3.3.1...v3.3.2
v3.3.1
Important
Before upgrading all types of Argo CD installations to this release, please read the upgrade guide first:
https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/3.2-3.3/#breaking-changes
Upgrading Argo CD which is managing itself
Users who have an Argo CD Application that manages their Argo CD installation, must enable ServerSideApply=true sync option on this Application in order for the upgrade to succeed.
In some cases, there may be a sync error like Failed to perform client-side apply migration: failed to perform client-side apply migration on manager kubectl-client-side-apply.
We are currently working on a long-term fix to this issue, the progress can be tracked here: #26279
A temporary remediation is to additionally set the ClientSideApplyMigration=false sync option on this Application. This solution is temporary and not recommended for the long run because it may result in conflicts between Argo CD K8s field manager and other field managers at a later point in time, and if you use it, you will need to remove it after the above issue is fixed.
More details here:
https://argo-cd.readthedocs.io/en/stable/user-guide/sync-options/#client-side-apply-migration
Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.1/manifests/install.yamlHA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.1/manifests/ha/install.yamlRelease Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
- 8449d9a: fix(server): OIDC config via secrets fails (#18269) (cherry-pick #26214 for 3.3) (#26423) (@argo-cd-cherry-pick-bot[bot])
- d0b2a6c: fix: Fix excessive ls-remote requests on monorepos with Auto Sync enabled apps (26277) (cherry-pick #26278 for 3.3) (#26372) (@argo-cd-cherry-pick-bot[bot])
- e464f6a: fix: AppProject finalizer should consider apps in all allowed namespaces (#24347) (cherry-pick #26416 for 3.3) (#26480) (@argo-cd-cherry-pick-bot[bot])
- 445916f: fix: compressedLayerExtracterStore+isCompressedLayer - allow tar.gzip suffixes (cherry-pick #26355 for 3.3) (#26376) (@argo-cd-cherry-pick-bot[bot])
Dependency updates
- 6126798: chore(deps): Upgrade Kustomize to 5.8.1 (cherry-pick #26367 for 3.3) (#26369) (@argo-cd-cherry-pick-bot[bot])
Other work
- 92df21c: chore(appset): cherry-pick basic progressive sync e2e tests (#26092) (#26191) (@ranakan19)
- 4b0a2c0: chore: bumps ubuntu base docker image to 25.10 (cherry-pick #25758 for 3.3) (#26436) (@argo-cd-cherry-pick-bot[bot])
- 273683b: chore: placate Sonar by ignoring testdata files (cherry-pick #26371 for 3.3) (#26377) (@argo-cd-cherry-pick-bot[bot])
- 8df5e96: test(e2e): CMP test fails locally on Mac (cherry-pick #25901 for 3.3) (#26340) (@argo-cd-cherry-pick-bot[bot])
- 2449314: test(e2e): add isolation by ensuring unique name (cherry-pick #25724 for 3.3) (#26287) (@ranakan19)
- c4f0cd3: test(e2e): configurable tmp dir locally (#25780) (#26339) (@ranakan19)
- 55d0d09: test(e2e): fix TestDeletionConfirmation flakiness (cherry-pick #25902 for 3.3) (#26284) (@argo-cd-cherry-pick-bot[bot])
- 6f270cc: test(e2e): oras binary not found locally if not installed in path (cherry-pick #25751 for 3.3) (#26337) (@argo-cd-cherry-pick-bot[bot])
- 54f2916: test(e2e): unstable CMP e2e test when running locally (cherry-pick #25752 for 3.3) (#26288) (@argo-cd-cherry-pick-bot[bot])
- 0038fce: test(e2e): update local certs so they are valid on MacOS (cherry-pick #25864 for 3.3) (#26338) (@argo-cd-cherry-pick-bot[bot])
Full Changelog: v3.3.0...v3.3.1
Contributors
Assets 13
v3.2.7
Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.7/manifests/install.yamlHA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.7/manifests/ha/install.yamlRelease Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
- ca08f90: fix(server): OIDC config via secrets fails (#18269) (cherry-pick #26214 for 3.2) (#26389) (@argo-cd-cherry-pick-bot[bot])
- 10c3fd0: fix: Fix excessive ls-remote requests on monorepos with Auto Sync enabled apps (26277) (cherry-pick #26278 for 3.2) (#26502) (@dudinea)
- 9c128e2: fix: compressedLayerExtracterStore+isCompressedLayer - allow tar.gzip suffixes (cherry-pick #26355 for 3.2) (#26375) (@argo-cd-cherry-pick-bot[bot])
Dependency updates
Other work
- 1f03b27: ci: exclude testdata from sonar.exclusions (cherry-pick #26398 and #26371 for 3.2) (#26424) (@argo-cd-cherry-pick-bot[bot])
Full Changelog: v3.2.6...v3.2.7
Contributors
Assets 13
v3.3.0
Important
Before upgrading all types of Argo CD installations to this release, please read the upgrade guide first:
https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/3.2-3.3/#breaking-changes
Upgrading Argo CD which is managing itself
Users who have an Argo CD Application that manages their Argo CD installation, must enable ServerSideApply=true sync option on this Application in order for the upgrade to succeed.
In some cases, there may be a sync error like Failed to perform client-side apply migration: failed to perform client-side apply migration on manager kubectl-client-side-apply.
We are currently working on a long-term fix to this issue, the progress can be tracked here: #26279
A temporary remediation is to additionally set the ClientSideApplyMigration=false sync option on this Application. This solution is temporary and not recommended for the long run because it may result in conflicts between Argo CD K8s field manager and other field managers at a later point in time, and if you use it, you will need to remove it after the above issue is fixed.
More details here:
https://argo-cd.readthedocs.io/en/stable/user-guide/sync-options/#client-side-apply-migration
Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.0/manifests/install.yamlHA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.0/manifests/ha/install.yamlRelease Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Features
- ce2fb70: Revert "feat: Ability to create custom labels for namespaces created … (#455) (@pasha-codefresh)
- e50dd00: feat(actions): Add cloudnativepg reload, restart, promote, suspend and resume actions (#24192) (@rouke-broersma)
- 3ee16c0: feat(actions): PullRequest merge action (#24823) (@crenshaw-dev)
- 0c77f3c: feat(actions): add icons to apps actions (#25343) (#25344) (@rickbrouwer)
- a64933f: feat(actions): add pause action for KEDA ScaledObject and ScaledJob (#25301) (#25302) (@rickbrouwer)
- 97d50a1: feat(appset): add pprof endpoints (#25044) (@rumstead)
- 482440b: feat(appset): use clone instead of replace on sprig templates to reduce function copies (#25576) (@rumstead)
- 64421a7: feat(ci): add run failure link to cherry pick comment (#24838) (@crenshaw-dev)
- 4678361: feat(cli): Add additional examples to
proj listcommand (#25169) (@onasser1) - ac12ab9: feat(cli): Updated CLI to show Plugins during tab completion (#24758) (@christianh814)
- 53c3542: feat(cli): add powershell completion (#25595) (@onasser1)
- f866959: feat(cli): added support for filtering by group in app get-resource CLI command (#25495) (@sabre1041)
- ac1a2f8: feat(health): add grafana-org-operator Health (#25662) (@sathieu)
- 0c6fa28: feat(hydrator): add inline parameter support to Source Hydrator (#24228) (#24277) (@sangyeong01)
- dea7ead: feat(hydrator): avoid unnecessary repo-server calls (#25150) (@pbhatnagar-oss)
- 6cd30d3: feat(hydrator): don't push commits if manifests don't change (#25056) (@pbhatnagar-oss)
- fe02a8f: feat(redis): Secrets credentials via volume mount (#24597) (@Mangaal)
- bbc3e99: feat(repo): add support for github app authentication without installationid (#25339) (#25374) (@pbhatnagar-oss)
- 1ae13b2: feat(ui): conditionally render app view extensions (#25132) (@jwinters01)
- afaf16b: feat(ui): hide sync option 'replace' if sync with replace is disabled in the server (issue no. #22625) (#22647) (@jan-mrm)
- 528482c: feat(ui): implement abstraction layer for appset ui support (#24916) (@pjiang-dev)
- b74c7aa: feat(ui): improve sync warnings (#25524) (@jwinters01)
- 90b3e85: feat(ui): support custom icons (#20864) (@crenshaw-dev)
- a56a803: feat: Ability to create custom labels for namespaces created with syncOptions CreateNamespace (#443) (@pasha-codefresh)
- 9ab0b2e: feat: Add ability to hide certain annotations on secret resources (#577) (@svghadi)
- 9ee5cca: feat: Add health check for Ceph CRD (#24111) (@afarbos)
- 51c9add: feat: Add health checks for ServiceBinding and ServiceInstance (#25007) (@dzahariev)
- 8c890d4: feat: Add impersonation support for App finalizer deletion (#24524) (@ccjette-logmein)
- ed537d5: feat: Add path flag to ArgoCD CLI app list (#24834) (@onasser1)
- 1c4ef33: feat: Add server-side apply manager config (#418) (@leoluz)
- 7493226: feat: Add support for HPA v2 (autoscaling/v2) (#411) (@EppO)
- 1a6973a: feat: Add the ability to not autogenerate external URLs from ingress object (#13705) (#25383) (@rkevin-arch)
- ed7c77a: feat: Apply out of sync option only (#533) (@pasha-codefresh)
- d65e9d9: feat: Enable SkipDryRunOnMissingResource sync option on Application level (#712) (@pasha-codefresh)
- aba3819: feat: Implement Server-Side Diffs (#522) (@leoluz)
- 6b2984e: feat: More optimal IterateHierarchyV2 and iterateChildrenV2 [#600] (#601) (@andrii-korotkov-verkada)
- 4eb3ca3: feat: Namespace/CRD creation should happen before PreSync phase (#159) ( <>)
- 3bf3d8a: feat: PreDelete hooks support (Issue #13975) (#22288) (@pedro-cs-ribeiro)
- 5fd9f44: feat: Prune resources in reverse of sync wave order (#538) (@svghadi)
- e360551: feat: Support for retries when building up cluster cache (#374) (@jannfis)
- e56739c: feat: add CreateResource to kubectl (#12174 and #4116) (#516) (@reggie-k)
- 0b4199b: feat: add FindResources method that allows to find any resource in cache (#204) ( <>)
- f9456de: feat: add GvkParser in cluster cache (#404) (@leoluz)
- 1b08fd1: feat: add ability to use shallow clone for repositories (#24931) (@alexmt)
- d8b1a12: feat: add basic support for server-side apply (#363) (@sathieu)
- bfac3f5: feat: add creation timestamp (#87) (@taisho6339)
- 9664cf8: feat: add profile feature for agent, and fix logr's panic (#444) (@alswl)
- f6f1a42: feat: add status.resourcesCount field to appset and change limit default (#24698) (@alexmt)
- c7bab2e: feat: add support split yaml that return actual yamls (#346) (@pasha-codefresh)
- ed70eac: feat: add sync delete option (#507) (@gdsoumya)
- aae8ded: feat: added cascade option to DeleteResource - argo-cd #5368 (#220) (@ishitasequeira)
- 0000f05: feat: adds various OCI metrics (#25493) (@ppapapetrou76)
- e77acec: feat: allow limiting clusterResourceWhitelist by resource name (#12208) (#24674) (@crenshaw-dev)
- 09e5225: feat: application resource deletion protection (#630) (@alexmt)
- 69dfa70: feat: auto migrate kubectl-client-side-apply fields for SSA (#727) (@pjiang-dev)
- 187312f: feat: auto respect rbac for discovery/sync (#532) (@gdsoumya)
- bc9ce57: feat: better error message for sync operations (#336) (@pasha-codefresh)
- 9163758: feat: cluster cache should expose synchronization error (#32) ( <>)
- ae94ad9: feat: configurable watch resync timeout. ability to disable cluster resync (#353) (@jessesuen)
- 3c54508: feat: create namespace (#94) (@mayzhang2000)
- ddce93c: feat: cross namespace hierarchy traversal from cluster-scoped parent...
Contributors
Assets 13
v3.3.0-rc4
Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.0-rc4/manifests/install.yamlHA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.0-rc4/manifests/ha/install.yamlRelease Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
- 15568cb: fix(appset): do not trigger reconciliation on appsets not part of allowed namespaces when updating a cluster secret (cherry-pick #25622 for 3.3) (#25909) (@argo-cd-cherry-pick-bot[bot])
- b52a075: fix(hydrator): .gitattributes include deeply nested files (#25870) (cherry-pick #26011 for 3.3) (#26013) (@argo-cd-cherry-pick-bot[bot])
- 48a9dcc: fix(hydrator): empty links for failed operation (#25025) (cherry-pick #26014 for 3.3) (#26018) (@argo-cd-cherry-pick-bot[bot])
- 0fa47b1: fix(hydrator): pass destination.namespace to manifest rendering (#25478) (cherry-pick #25699 for 3.3) (#26019) (@argo-cd-cherry-pick-bot[bot])
- 32c32a6: fix: Only show please update resource specification message when spec… (cherry-pick #25066 for 3.3) (#25894) (@argo-cd-cherry-pick-bot[bot])
- 74de77a: fix: Toggle
automated.enabledto disable auto-sync for rollbacks (cherry-pick #25719 for 3.3) (#25943) (@argo-cd-cherry-pick-bot[bot]) - a6472c8: fix: allow docker dhi helm charts to be used (cherry-pick #25835 for 3.3) (#25964) (@argo-cd-cherry-pick-bot[bot])
- cd6a9aa: fix: cherry pick #25516 to release-3.3 (#26114) (@FourFifthsCode)
- 8fbb44c: fix: close response body on error paths to prevent connection leak (cherry-pick #25824 for 3.3) (#26005) (@argo-cd-cherry-pick-bot[bot])
- 3d64c21: fix: invalid error message on health check failure (#26040) (cherry-pick #26039 for 3.3) (#26063) (@argo-cd-cherry-pick-bot[bot])
- 28e8472: fix: nil and empty ignoredifferences (cherry-pick #25980 for 3.3) (#26000) (@argo-cd-cherry-pick-bot[bot])
Documentation
Dependency updates
- ac071b5: chore(deps): update notifications-engine to fix GitHub PR comments nil panic (cherry-pick #26065 for 3.3) (#26075) (@soutar)
- 369fb75: chore(deps): update notifications-engine to v0.5.1-0.20251223091026-8c0c96d8d530 (cherry-pick #25785 for 3.3) (#25853) (@argo-cd-cherry-pick-bot[bot])
- 5de1e64: chore(deps): update to helm 3.19.4 due to cve : https://github.com/helm/helm/releases/tag/v3.19.4 (cherry-pick #25769 for 3.3) (#25774) (@argo-cd-cherry-pick-bot[bot])
Other work
- 675f8cf: chore(cherry-pick-3.3): bump expr to
v1.17.7(#25888) (@nitishfy) - efca5b9: chore: bumps golang version everywhere to the latest 1.25.5 (cherry-pick #25716 for 3.3) (#25808) (@argo-cd-cherry-pick-bot[bot])
- 9ae26e4: ci: test against k8s 1.34.2 (cherry-pick #25856 for 3.3) (#25858) (@argo-cd-cherry-pick-bot[bot])
Full Changelog: v3.3.0-rc3...v3.3.0-rc4