-
Notifications
You must be signed in to change notification settings - Fork 8
argocd: update quay.io/argoproj/argocd Docker tag to v3.2.1 #377
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
renovate
wants to merge
1
commit into
master
Choose a base branch
from
renovate/quay.io-argoproj-argocd-3.x
base: master
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Infro diff for 564de00
time="2025-11-30T14:10:45Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2025-11-30T14:10:59Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
===== apps/Deployment argocd/argocd-applicationset-controller ======
--- /tmp/argocd-diff645076277/argocd-applicationset-controller-live.yaml
+++ /tmp/argocd-diff645076277/argocd-applicationset-controller
@@ -555,7 +555,7 @@
key: applicationsetcontroller.requeue.after
name: argocd-cmd-params-cm
optional: true
- image: quay.io/argoproj/argocd:v2.14.15@sha256:3be6babe6a3248cf35f2c7816c0fcbbbdba592320d93494016ef7123031339cb
+ image: quay.io/argoproj/argocd:v3.2.1@sha256:a8532a23ed5f6e65afaf2a082b65fc74614549e54774f6b25fe3c993faa7bea3
imagePullPolicy: Always
name: argocd-applicationset-controller
ports:
===== apps/Deployment argocd/argocd-dex-server ======
--- /tmp/argocd-diff833416635/argocd-dex-server-live.yaml
+++ /tmp/argocd-diff833416635/argocd-dex-server
@@ -359,7 +359,7 @@
- -n
- /usr/local/bin/argocd
- /shared/argocd-dex
- image: quay.io/argoproj/argocd:v2.14.15@sha256:3be6babe6a3248cf35f2c7816c0fcbbbdba592320d93494016ef7123031339cb
+ image: quay.io/argoproj/argocd:v3.2.1@sha256:a8532a23ed5f6e65afaf2a082b65fc74614549e54774f6b25fe3c993faa7bea3
imagePullPolicy: Always
name: copyutil
resources: {}
===== apps/Deployment argocd/argocd-notifications-controller ======
--- /tmp/argocd-diff277014404/argocd-notifications-controller-live.yaml
+++ /tmp/argocd-diff277014404/argocd-notifications-controller
@@ -277,7 +277,7 @@
key: notificationscontroller.repo.server.plaintext
name: argocd-cmd-params-cm
optional: true
- image: quay.io/argoproj/argocd:v2.14.15@sha256:3be6babe6a3248cf35f2c7816c0fcbbbdba592320d93494016ef7123031339cb
+ image: quay.io/argoproj/argocd:v3.2.1@sha256:a8532a23ed5f6e65afaf2a082b65fc74614549e54774f6b25fe3c993faa7bea3
imagePullPolicy: Always
livenessProbe:
failureThreshold: 3
===== apps/Deployment argocd/argocd-redis ======
--- /tmp/argocd-diff3963759670/argocd-redis-live.yaml
+++ /tmp/argocd-diff3963759670/argocd-redis
@@ -261,7 +261,7 @@
- argocd
- admin
- redis-initial-password
- image: quay.io/argoproj/argocd:v2.14.15@sha256:3be6babe6a3248cf35f2c7816c0fcbbbdba592320d93494016ef7123031339cb
+ image: quay.io/argoproj/argocd:v3.2.1@sha256:a8532a23ed5f6e65afaf2a082b65fc74614549e54774f6b25fe3c993faa7bea3
imagePullPolicy: IfNotPresent
name: secret-init
resources: {}
===== apps/Deployment argocd/argocd-repo-server ======
--- /tmp/argocd-diff3803469733/argocd-repo-server-live.yaml
+++ /tmp/argocd-diff3803469733/argocd-repo-server
@@ -871,7 +871,7 @@
value: /helm-working-dir
- name: HELM_DATA_HOME
value: /helm-working-dir
- image: quay.io/argoproj/argocd:v2.14.15@sha256:3be6babe6a3248cf35f2c7816c0fcbbbdba592320d93494016ef7123031339cb
+ image: quay.io/argoproj/argocd:v3.2.1@sha256:a8532a23ed5f6e65afaf2a082b65fc74614549e54774f6b25fe3c993faa7bea3
imagePullPolicy: Always
livenessProbe:
failureThreshold: 3
@@ -944,7 +944,7 @@
env:
- name: GNUPGHOME
value: /gnupg-home/.gnupg
- image: quay.io/argoproj/argocd:v2.14.15@sha256:3be6babe6a3248cf35f2c7816c0fcbbbdba592320d93494016ef7123031339cb
+ image: quay.io/argoproj/argocd:v3.2.1@sha256:a8532a23ed5f6e65afaf2a082b65fc74614549e54774f6b25fe3c993faa7bea3
imagePullPolicy: IfNotPresent
name: import-gpg-key
resources: {}
@@ -975,7 +975,7 @@
- -n
- /usr/local/bin/argocd
- /var/run/argocd/argocd-cmp-server
- image: quay.io/argoproj/argocd:v2.14.15@sha256:3be6babe6a3248cf35f2c7816c0fcbbbdba592320d93494016ef7123031339cb
+ image: quay.io/argoproj/argocd:v3.2.1@sha256:a8532a23ed5f6e65afaf2a082b65fc74614549e54774f6b25fe3c993faa7bea3
imagePullPolicy: IfNotPresent
name: copyutil
resources: {}
===== apps/Deployment argocd/argocd-server ======
--- /tmp/argocd-diff1677013402/argocd-server-live.yaml
+++ /tmp/argocd-diff1677013402/argocd-server
@@ -904,7 +904,7 @@
key: server.sync.replace.allowed
name: argocd-cmd-params-cm
optional: true
- image: quay.io/argoproj/argocd:v2.14.15@sha256:3be6babe6a3248cf35f2c7816c0fcbbbdba592320d93494016ef7123031339cb
+ image: quay.io/argoproj/argocd:v3.2.1@sha256:a8532a23ed5f6e65afaf2a082b65fc74614549e54774f6b25fe3c993faa7bea3
imagePullPolicy: Always
livenessProbe:
failureThreshold: 3
===== apps/StatefulSet argocd/argocd-application-controller ======
--- /tmp/argocd-diff33578268/argocd-application-controller-live.yaml
+++ /tmp/argocd-diff33578268/argocd-application-controller
@@ -757,7 +757,7 @@
optional: true
- name: KUBECACHEDIR
value: /tmp/kubecache
- image: quay.io/argoproj/argocd:v2.14.15@sha256:3be6babe6a3248cf35f2c7816c0fcbbbdba592320d93494016ef7123031339cb
+ image: quay.io/argoproj/argocd:v3.2.1@sha256:a8532a23ed5f6e65afaf2a082b65fc74614549e54774f6b25fe3c993faa7bea3
imagePullPolicy: Always
name: argocd-application-controller
ports:
time="2025-11-30T14:11:18Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2025-11-30T14:11:22Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
===== /Service external-dns/external-dns ======
--- /tmp/argocd-diff2741603350/external-dns-live.yaml
+++ /tmp/argocd-diff2741603350/external-dns
@@ -2,9 +2,11 @@
kind: Service
metadata:
annotations:
+ argocd.argoproj.io/tracking-id: external-dns:/Service:external-dns/external-dns
kubectl.kubernetes.io/last-applied-configuration: |
{"apiVersion":"v1","kind":"Service","metadata":{"annotations":{},"labels":{"app.kubernetes.io/name":"external-dns"},"name":"external-dns","namespace":"external-dns"},"spec":{"ports":[{"name":"metrics","port":7979,"targetPort":7979}],"selector":{"app.kubernetes.io/name":"external-dns"}}}
labels:
+ app.kubernetes.io/instance: external-dns
app.kubernetes.io/name: external-dns
name: external-dns
namespace: external-dns
===== /ServiceAccount external-dns/external-dns ======
--- /tmp/argocd-diff373104932/external-dns-live.yaml
+++ /tmp/argocd-diff373104932/external-dns
@@ -2,9 +2,11 @@
kind: ServiceAccount
metadata:
annotations:
+ argocd.argoproj.io/tracking-id: external-dns:/ServiceAccount:external-dns/external-dns
kubectl.kubernetes.io/last-applied-configuration: |
{"apiVersion":"v1","kind":"ServiceAccount","metadata":{"annotations":{},"labels":{"app.kubernetes.io/name":"external-dns"},"name":"external-dns","namespace":"external-dns"}}
labels:
+ app.kubernetes.io/instance: external-dns
app.kubernetes.io/name: external-dns
name: external-dns
namespace: external-dns
===== apps/Deployment external-dns/external-dns ======
--- /tmp/argocd-diff926314760/external-dns-live.yaml
+++ /tmp/argocd-diff926314760/external-dns
@@ -2,11 +2,13 @@
kind: Deployment
metadata:
annotations:
+ argocd.argoproj.io/tracking-id: external-dns:apps/Deployment:external-dns/external-dns
deployment.kubernetes.io/revision: "11"
kubectl.kubernetes.io/last-applied-configuration: |
{"apiVersion":"apps/v1","kind":"Deployment","metadata":{"annotations":{},"labels":{"app.kubernetes.io/name":"external-dns"},"name":"external-dns","namespace":"external-dns"},"spec":{"selector":{"matchLabels":{"app.kubernetes.io/name":"external-dns"}},"strategy":{"type":"Recreate"},"template":{"metadata":{"labels":{"app.kubernetes.io/name":"external-dns"}},"spec":{"containers":[{"args":["--source=service","--source=ingress","--registry=txt","--provider=aws","--txt-owner-id=digitalocean-hashbang","--txt-prefix=_owner.","--source=crd","--domain-filter=hashbang.sh","--managed-record-types=A","--managed-record-types=CNAME","--managed-record-types=TXT"],"env":[{"name":"AWS_REGION","value":"us-west-2"},{"name":"AWS_ACCESS_KEY_ID","value":"AKIAR7CEWFK35SZX5S66"},{"name":"AWS_SECRET_ACCESS_KEY","valueFrom":{"secretKeyRef":{"key":"key","name":"external-dns-iam"}}}],"image":"registry.k8s.io/external-dns/external-dns:v0.16.1@sha256:37d3a7a05c4638b8177382b80a627c223bd84a53c1a91be137245bd3cfdf9986","name":"external-dns","ports":[{"containerPort":7979,"name":"metrics"}]}],"securityContext":{"fsGroup":65534},"serviceAccountName":"external-dns"}}}}
generation: 11
labels:
+ app.kubernetes.io/instance: external-dns
app.kubernetes.io/name: external-dns
managedFields:
- apiVersion: apps/v1
@@ -150,11 +152,6 @@
- --provider=aws
- --txt-owner-id=digitalocean-hashbang
- --txt-prefix=_owner.
- - --source=crd
- - --domain-filter=hashbang.sh
- - --managed-record-types=A
- - --managed-record-types=CNAME
- - --managed-record-types=TXT
env:
- name: AWS_REGION
value: us-west-2
===== cilium.io/CiliumNetworkPolicy external-dns/external-dns ======
--- /tmp/argocd-diff2405615660/external-dns-live.yaml
+++ /tmp/argocd-diff2405615660/external-dns
@@ -2,10 +2,12 @@
kind: CiliumNetworkPolicy
metadata:
annotations:
+ argocd.argoproj.io/tracking-id: external-dns:cilium.io/CiliumNetworkPolicy:external-dns/external-dns
kubectl.kubernetes.io/last-applied-configuration: |
{"apiVersion":"cilium.io/v2","kind":"CiliumNetworkPolicy","metadata":{"annotations":{},"labels":{"app.kubernetes.io/name":"external-dns"},"name":"external-dns","namespace":"external-dns"},"spec":{"egress":[{"toEntities":["cluster"]},{"toEntities":["cluster"],"toPorts":[{"ports":[{"port":"53","protocol":"ANY"}],"rules":{"dns":[{"matchPattern":"*.amazonaws.com"}]}}]},{"toEntities":["world"],"toPorts":[{"ports":[{"port":"443","protocol":"TCP"}]}]}],"endpointSelector":{"matchLabels":{"k8s:app":"external-dns"}},"ingress":[{"fromEntities":["cluster"],"toPorts":[{"ports":[{"port":"7979","protocol":"TCP"}],"rules":{"http":[{"method":"GET","path":"/metrics"}]}}]}]}}
generation: 32
labels:
+ app.kubernetes.io/instance: external-dns
app.kubernetes.io/name: external-dns
name: external-dns
namespace: external-dns
===== monitoring.coreos.com/ServiceMonitor external-dns/external-dns-server-metrics ======
--- /tmp/argocd-diff3859151447/external-dns-server-metrics-live.yaml
+++ /tmp/argocd-diff3859151447/external-dns-server-metrics
@@ -3,10 +3,12 @@
metadata:
annotations:
argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+ argocd.argoproj.io/tracking-id: external-dns:monitoring.coreos.com/ServiceMonitor:external-dns/external-dns-server-metrics
kubectl.kubernetes.io/last-applied-configuration: |
{"apiVersion":"monitoring.coreos.com/v1","kind":"ServiceMonitor","metadata":{"annotations":{"argocd.argoproj.io/sync-options":"SkipDryRunOnMissingResource=true"},"labels":{"app.kubernetes.io/name":"external-dns","prometheusInstance":"default"},"name":"external-dns-server-metrics","namespace":"external-dns"},"spec":{"endpoints":[{"port":"metrics"}],"selector":{"matchLabels":{"app.kubernetes.io/name":"external-dns"}}}}
generation: 1
labels:
+ app.kubernetes.io/instance: external-dns
app.kubernetes.io/name: external-dns
prometheusInstance: default
managedFields:
===== rbac.authorization.k8s.io/ClusterRole /external-dns ======
--- /tmp/argocd-diff574352758/external-dns-live.yaml
+++ /tmp/argocd-diff574352758/external-dns
@@ -2,9 +2,11 @@
kind: ClusterRole
metadata:
annotations:
+ argocd.argoproj.io/tracking-id: external-dns:rbac.authorization.k8s.io/ClusterRole:external-dns/external-dns
kubectl.kubernetes.io/last-applied-configuration: |
{"apiVersion":"rbac.authorization.k8s.io/v1","kind":"ClusterRole","metadata":{"annotations":{},"labels":{"app.kubernetes.io/name":"external-dns"},"name":"external-dns"},"rules":[{"apiGroups":[""],"resources":["endpoints","pods","services"],"verbs":["get","watch","list"]},{"apiGroups":["extensions"],"resources":["ingresses"],"verbs":["get","watch","list"]},{"apiGroups":["networking.k8s.io"],"resources":["ingresses"],"verbs":["get","watch","list"]},{"apiGroups":[""],"resources":["nodes"],"verbs":["watch","list"]},{"apiGroups":["externaldns.k8s.io"],"resources":["dnsendpoints"],"verbs":["get","watch","list"]},{"apiGroups":["externaldns.k8s.io"],"resources":["dnsendpoints/status"],"verbs":["*"]}]}
labels:
+ app.kubernetes.io/instance: external-dns
app.kubernetes.io/name: external-dns
name: external-dns
resourceVersion: "710536737"
@@ -43,17 +45,3 @@
verbs:
- watch
- list
-- apiGroups:
- - externaldns.k8s.io
- resources:
- - dnsendpoints
- verbs:
- - get
- - watch
- - list
-- apiGroups:
- - externaldns.k8s.io
- resources:
- - dnsendpoints/status
- verbs:
- - '*'
===== rbac.authorization.k8s.io/ClusterRoleBinding /external-dns-viewer ======
--- /tmp/argocd-diff1711803760/external-dns-viewer-live.yaml
+++ /tmp/argocd-diff1711803760/external-dns-viewer
@@ -2,9 +2,11 @@
kind: ClusterRoleBinding
metadata:
annotations:
+ argocd.argoproj.io/tracking-id: external-dns:rbac.authorization.k8s.io/ClusterRoleBinding:external-dns/external-dns-viewer
kubectl.kubernetes.io/last-applied-configuration: |
{"apiVersion":"rbac.authorization.k8s.io/v1","kind":"ClusterRoleBinding","metadata":{"annotations":{},"labels":{"app.kubernetes.io/name":"external-dns"},"name":"external-dns-viewer"},"roleRef":{"apiGroup":"rbac.authorization.k8s.io","kind":"ClusterRole","name":"external-dns"},"subjects":[{"kind":"ServiceAccount","name":"external-dns","namespace":"external-dns"}]}
labels:
+ app.kubernetes.io/instance: external-dns
app.kubernetes.io/name: external-dns
name: external-dns-viewer
resourceVersion: "710536742"
time="2025-11-30T14:11:23Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2025-11-30T14:11:27Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
===== apps/Deployment ingress-nginx/ingress-nginx-controller ======
--- /tmp/argocd-diff2302718097/ingress-nginx-controller-live.yaml
+++ /tmp/argocd-diff2302718097/ingress-nginx-controller
@@ -280,7 +280,7 @@
fieldPath: metadata.namespace
- name: LD_PRELOAD
value: /usr/local/lib/libmimalloc.so
- image: registry.k8s.io/ingress-nginx/controller:v1.12.3@sha256:ac444cd9515af325ba577b596fe4f27a34be1aa330538e8b317ad9d6c8fb94ee
+ image: registry.k8s.io/ingress-nginx/controller:v1.13.1@sha256:37e489b22ac77576576e52e474941cd7754238438847c1ee795ad6d59c02b12a
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
time="2025-11-30T14:11:29Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2025-11-30T14:11:33Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
===== apps/Deployment ircd/irc-deployment ======
--- /tmp/argocd-diff3475985804/irc-deployment-live.yaml
+++ /tmp/argocd-diff3475985804/irc-deployment
@@ -30,7 +30,7 @@
app: irc
spec:
containers:
- - image: ghcr.io/ergochat/ergo:v2.14.0@sha256:ef4040d18044a53c8c995defb3159018cf2e83030e5db068c3976d9343c826a5
+ - image: ghcr.io/ergochat/ergo:v2.15.0@sha256:135cd42c6300d957e0045ee53fbe886e43e1c04bb621391ed7b8940c174d68f3
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 3
@@ -78,7 +78,7 @@
echo "Exiting.";
command:
- /bin/sh
- image: ghcr.io/ergochat/ergo:v2.14.0@sha256:ef4040d18044a53c8c995defb3159018cf2e83030e5db068c3976d9343c826a5
+ image: ghcr.io/ergochat/ergo:v2.15.0@sha256:135cd42c6300d957e0045ee53fbe886e43e1c04bb621391ed7b8940c174d68f3
imagePullPolicy: IfNotPresent
name: config-reloader
resources: {}
time="2025-11-30T14:12:04Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2025-11-30T14:12:08Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
===== apps/Deployment userdb-api/userdb-api-deployment ======
--- /tmp/argocd-diff2518084738/userdb-api-deployment-live.yaml
+++ /tmp/argocd-diff2518084738/userdb-api-deployment
@@ -45,7 +45,7 @@
secretKeyRef:
key: db-uri
name: postgrest-secrets
- image: postgrest/postgrest:v12.2.12@sha256:5f4ce744539bbba786b4e24dbbd95bdb2a956dcf568c5374995a0ff4a68f5bd2
+ image: postgrest/postgrest:v13.0.4@sha256:a312f4b2e48530a01fc26f5310d547d6c26d087858360e164522e415723a7732
imagePullPolicy: IfNotPresent
name: postgrest
ports:
time="2025-11-30T14:12:14Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2025-11-30T14:12:20Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
===== apps/Deployment wkd/wkd ======
--- /tmp/argocd-diff435649146/wkd-live.yaml
+++ /tmp/argocd-diff435649146/wkd
@@ -233,7 +233,7 @@
value: enroll
- name: FOLDER
value: /tmp/keys
- image: kiwigrid/k8s-sidecar:1.30.8@sha256:494ac9c00e699cda00fc10008a88b9ee24055f284d200390857cc49d1f456730
+ image: kiwigrid/k8s-sidecar:1.30.9@sha256:8c06e1ba643a4625de14b2db65c356f5db6b1482a25fce4754380a2936207338
imagePullPolicy: IfNotPresent
name: watcher
resources: {} |
6953f62 to
6606195
Compare
6606195 to
c42ebd6
Compare
c42ebd6 to
8d1a3bd
Compare
8d1a3bd to
31e445f
Compare
31e445f to
c8bf113
Compare
c8bf113 to
17b9964
Compare
17b9964 to
64ca191
Compare
64ca191 to
d2d2391
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v3.1.0->v3.2.1Release Notes
argoproj/argo-cd (quay.io/argoproj/argocd)
v3.2.1Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
6dd5e7a: fix(ui): add null-safe handling for assignedWindows in status panel (cherry-pick #25128 for 3.2) (#25180) (@argo-cd-cherry-pick-bot[bot])dabdf39: fix(ui): overlapping UI elements and add resource units to tooltips (cherry-pick #24717 for 3.2) (#25225) (@choejwoo)cd8df17: fix: Allow the ISVC to be healthy when the Stopped Condition is False (cherry-pick #25312 for 3.2) (#25318) (@argo-cd-cherry-pick-bot[bot])27c5065: fix: revert #24197 (cherry-pick #25294 for 3.2) (#25314) (@argo-cd-cherry-pick-bot[bot])29f869c: fix: the concurrency issue with git detached processing in Repo Server (#25101) (cherry-pick #25127 for 3.2) (#25448) (@dudinea)7bd02d7: fix:(ui) don't render ApplicationSelector unless the panel is showing (cherry-pick #25201 for 3.2) (#25208) (@argo-cd-cherry-pick-bot[bot])Documentation
c11e67d: docs: Document usage of ?. in notifications triggers and fix examples (#25352) (cherry-pick #25418 for 3.2) (#25421) (@argo-cd-cherry-pick-bot[bot])a0a1843: docs: Improve switch to annotation tracking docs, clarifying that a new Git commit may be needed to avoid orphan resources - (cherry-pick #25309 for 3.2) (#25338) (@reggie-k)86c9994: docs: update user content for deleting applications (cherry-pick #25124 for 3.2) (#25174) (@argo-cd-cherry-pick-bot[bot])Other work
1545390: fix(cherry-pick): bump gitops-engine ssd regression (#25226) (@pjiang-dev)Full Changelog: argoproj/argo-cd@v3.2.0...v3.2.1
v3.2.0Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Features
be8e79e: feat(appset): add pprof endpoints (cherry-pick #25044 for 3.2) (#25051) (@rumstead)79f152c: feat(appset): deleting applications in order when Progressive sync enabled on applicationSet (#23465) (@ranakan19)b1a9fab: feat(appset): enhance ApplicationSet status debugging logs (#23869) (@somln)a5c6898: feat(appset): increase concurrent reconcile maximum to max int64 (#23721) (@rumstead)6a20776: feat(cli): Support Server-Side Diff CLI (#23978) (@pjiang-dev)69f7d39: feat(cli): add 'get-resource' command (#23196) (#23609) (@cjcocokrisp)853b8dd: feat(cli): support password prompt input when --password is not provided in bcrypt cli (#23906) (@gyu-young-park)5a8b427: feat(controller): Permit using newer revision when retrying failed sync (#11494) (#23038) (@olivergondza)5c9a5ef: feat(health): Add healthCheck for CRD DatadogMetric (#23464) (@Nicolas-Richard)d3de443: feat(health): CronJob health and suspend, resume and terminate Job actions (#23991) (@agaudreault)36f1a59: feat(health): add health checks for GitOps Promoter (#23663) (@crenshaw-dev)99fea7c: feat(helm): upgrade to 3.18.3 (#23618) (@crenshaw-dev)e8e39a9: feat(helm): upgrading helm to 3.18.4 (#23724) (@mubarak-j)6f6c39d: feat(hydrator): Commit message templating (#23679) (#24204) (@pbhatnagar-oss)e85e353: feat(hydrator): Credential template to source hydrator (#23999) (@pbhatnagar-oss)562194b: feat(hydrator): add .gitattributes file to hydrated repo root (#23678) (#23725) (@FourFifthsCode)8b2799c: feat(hydrator): parallelize repo-server calls (#24451) (#24436) (@crenshaw-dev)a6a78ef: feat(kustomize): upgrade to 5.7.0 (#23619) (@crenshaw-dev)d954789: feat(server): 3scale health checks (#24327) (#24326) (@ammachado)5b8e4b5: feat(server): pass authenticated userId as header to extensions (#24356) (@agaudreault)2229f9d: feat(ui): Add hydration in status to dashboard application tiles (#24319) (@adityaraj178)13c47ee: feat(ui): Added repo connection state message (#24175) (@surajyadav1108)72d054d: feat(ui): Requests info for Cpu and Mem added to Pod details (#20637) (@surajyadav1108)762114c: feat(ui): Sort by application-sync-order in the list page (#23521) (#24191) (@downfa11)97af89a: feat(ui): add prune option to application rollback (#23861) (#23932) (@anthisfan)8d018bb: feat(ui): add sortable columns to application list (#24213) (#24535) (@downfa11)6212ea2: feat(ui): adjust line-height and spacing for multi-line text in details row (#24173) (@jiwlee97)26b970b: feat: Add gRPC health check in argocd-server (#24276) (@krapie)dcf1965: feat: Add health checks for Coralogix (#23853) (@daniel-leinov)4e63bc7: feat: Adding ExtensionService health-check (#23576) (@solomon-kibret)be042c4: feat: AppSet PR generator return 0 results upon repo not found instead of failing (#23447) (@reggie-k)3401d3b: feat: Export metrics to track number of users (#20801) (#23343) (@sathiya06)c447628: feat: Implement Altinity clickhouse-operator CRD health checks (#24017) (@acze)6028dea: feat: add OpenTelemetry trace context propagation for HTTP requests (#23029) (@yafeiaa)3af3a05: feat: add sso-host flag for OAuth2 login configuration (#22738) (#22784) (@PaleHazy)feab307: feat: add status.resourcesCount field to appset and change limit default (#24698) (#24711) (@alexmt)29df864: feat: add title matching filter for Pull Request Generator (#23569) (@nitishfy)fca42e3: feat: log a warning instead of debug when repository webhook does not match an application (#23939) (@fernandocarletti)7ae14c8: feat: preserve non-hydrated files during hydration (#24129) (@nitishfy)c012702: feat: read argocd password from stdin (#23520) (@nitishfy)07bd5e0: feat: show operation state UI (#23589) (@Aaron-9900)14a22ad: feat: update unpause action for Numaproj CRDs (#24036) (@dpadhiar)Bug fixes
48a7030: fix(UI): Add missing icon colors to auto-sync (#23962) (@surajyadav1108)aff3ae3: fix(api):app create --upsertshould not error on invalid current destination (#23922) (@agaudreault)fb94cad: fix(applications): update application navigation URLs (#22671) (#23285) (@Ruby-rc)460111f: fix(applicationset): Git generator: Don't append default object to literal empty json array (#23500) (#23513) (@ChristianCiach)ac4ae17: fix(appset): When Appset is deleted, the controller should reconcile applicationset #23723 (#23823) (@sangdammad)31e0f42: fix(appset): add applicationset leader election to roles and clean up (#14369) (#23976) (@rumstead)d269e6f: fix(appset): add applicationsets to the built-in readonly role (#24190) (#24318) (@crenshaw-dev)6ec1aa1: fix(appset): do not remove progressive sync conditions (#23506) (@agaudreault)03ac864: fix(cli): avoid panic in configure command when no local config exists (#23085) (#23967) (@krapie)7f5ef5c: fix(cli): correct typo in bcrypt error message (#23849) (@gyu-young-park)70c8f46: fix(cli): honor ALL_PROXY and other proxy environment variables (#24177) (@SinnoLn)f13aa46: fix(cli): respect refresh type when running with specified revision (#22463) (#22462) (@thejoeejoee)c4d99bb: fix(controller): expose ARGOCD_SYNC_WAVE_DELAY as configurable parameter (#24536) (@u-kai)e981167: fix(controller): get commit server url from env (#23536) (@nobbs)83d553c: fix(controller): impersonation with destination name (#23309) (#23504) (@crenshaw-dev)e0f4b00: fix(darwin): remove the need for cgo when building a darwin binary on linux (#23507) (@rumstead)d7364b4: fix(dashboard): Allow quantile label as float and integer (#24087) (@adberger)b20fd43: fix(discovery): add missing lua syntax and return to discovery (fixes #24257) (#24262) (@jan-mrm)614c85c: fix(docs): fix applicationsetcontroller.enable.github.api.metrics to false in docs cm (#23516) (@reggie-k)4501ebb: fix(docs): include v3.1 upgrade docs (#23529) (@mubarak-j)786b24e: fix(health): CRD health check message (#23690) (#23691) (@crenshaw-dev)f4c4c66: fix(health): add logic for disabled policies (#21347) (@dhaiducek)91b8bba: fix(health): custom resource health for flux helm repository of type oci (#24294) (@adberger)35e3897: fix(health): incorrect reason in PullRequest script (cherry-pick #24826 for 3.2) (#24828) (@argo-cd-cherry-pick-bot[bot])8fa3e47: fix(health): remove CronJob progressing/suspended status (#24430) (@agaudreault)4821d71: fix(health): typo in PromotionStrategy health.lua (cherry-pick #24726 for 3.2) (#24760) (@argo-cd-cherry-pick-bot[bot])c68ec27: fix(health): undeclared var used in ChangeTransferPolicy check (#23912) (@crenshaw-dev)d1251f4: fix(health): use promotion resource Ready condition regardless of reason (cherry-pick #24971 for 3.2) (#24973) (@argo-cd-cherry-pick-bot[bot])56320a7: fix(hydrator): handle empty path (#24349) (@crenshaw-dev)4d16fdc: fix(hydrator): normalize repo URL when grouping (#23564) (#23565) (@crenshaw-dev)c60a727: fix(hydrator): omit Argocd- trailers from hydrator.metadata (#23463) (@crenshaw-dev)02de363: fix(metrics): grpc prometheus stats missing (#23877) (#23838) (@pbhatnagar-oss)50531e6: fix(oci): loosen up layer restrictions (cherry-pick #24640 for 3.2) (#24648) (@argo-cd-cherry-pick-bot[bot])b96401b: fix(project): Do not block project update when a cluster referenced in an App doesn't exist (#23659) (@OpenGuidou)e8f8610: fix(security): repository.GetDetailedProject exposes repo secrets (#24387) (@crenshaw-dev)796f72c: fix(server): Send Azure DevOps token via git extra headers (#23478) (#23631) (@mikebordon)1ba3929: fix(server): ensure resource health status is inferred on application retrieval (#24832) (cherry-pick #24851 for 3.2) (#24865) (@argo-cd-cherry-pick-bot[bot])f420cce: fix(server): make parameterized resource actions backwards-compatible (#23695) (@crenshaw-dev)0a1572b: fix(server): preserve webhook secret references on server restart (#22588) (#23905) (@somln)8c8902b: fix(server): validate new project on update (#23970) (#23973) (@agaudreault)1fbd63d: fix(sync): auto-sync loop when FailOnSharedResource (#23357) (#23641) (@agaudreault)65a082b: fix(sync): do not retry when sync timeout has elapsed (#24020) (@agaudreault)9dfa9db: fix(sync): operations in errors without status cause infinite auto-sync loop (#23356) (@agaudreault)3349949: fix(test): TestFailKustomizeBuildPatches fails on MacOS dev. env (#23737) (@dudinea)965c83e: fix(test): Test_SSHCreds_Environ_TempFileCleanupOnInvalidProxyURL fails on Macos dev. env. (#23755) (@dudinea)c880373: fix(tests): race condition creating the sync id (#23460) (@agaudreault)8884b27: fix(ui): Improve Delete Dialog Behaviour when deleting child apps in the app-of-app pattern (cherry-pick #24802 for 3.2) (#25123) (@argo-cd-cherry-pick-bot[bot])d54c8af: fix(ui): Made App name font bolder in applications-list rows (#24256) (@surajyadav1108)1bc9adb: fix(ui): account detail page crashes for accounts with empty capabilities (#23787) (@hanxiaop)04d1ca4: fix(ui): catch AbortError during data fetch cancellation (#24054) (@youhonglian)24b0ecc: fix(ui): convert GroupWrapper to a functional component (#23796) (@jiwlee97)564e507: fix(ui): convert PolicyWrapper component to functional component (#23809) (@jiwlee97)dd1547f: fix(ui): convert RevisionFormField components to functional components (#23813) (@chansuke)d6ecc66: fix(ui): enable natural sort ordering for resources, add autocomplete attributes to login form #22853 (#23599) (@sea-gull-diana)3e6f11e: fix(ui): fix filter header label wrap (#23560) (@linghaoSu)aa5d139: fix(ui): fix misleading pointer cursor and animation click-block issue (#23688) (@choejwoo)88a32d6: fix(ui): handle missing resources on UI (#24355) (@pjiang-dev)b18ea68: fix(ui): prevent undefined values in filter state causing checkbox corruption (#23733) (@choejwoo)e24d8d4: fix(ui): resolve duplicate sync-policy (#24233) (@downfa11)f3dbc6f: fix(ui): wrap log lines are wrapped to the next line (#23946) (@xfrnk2)a8cae97: fix(util): Fix default key exchange algorthims used for SSH connection to be FIPS compliant (#24086) (@anandf)1b3ced9: fix: "admin cluster generate-spec" fails on missing "argocd-cm" (#10429) (#24088) (@ATGardner)001bfda: fix: #24781 update crossplane healthchecks to V2 version (cherry-pick #24782 for 3.2) (#24784) (@argo-cd-cherry-pick-bot[bot])5ee35ad: fix: Address shellcheck detected shell warnings (#22686) (@olivergondza)58b0116: fix: Allow metrics ingress for redis-ha-proxy (#23926) (#23928) (@JulesTriomphe)4e5b201: fix: ArgoCD CLI diff shows installationID annotations (#22409) (#22567) (@muma378)0793efb: fix: Badge display revision for multiple-sources application #17986 (#22547) (@fpetr)ef8ac49: fix: Clear ApplicationSet applicationStatus when ProgressiveSync is disabled (cherry-pick #24587 for 3.2 (#24716) (@aali309)bb56b9e: fix: Ensure application sets in custom namespace can be upserted (#23860) (@onematchfox)df324c0: fix: Ensure that symlink targets are not made absolute on extracting a tar (#24145) (#24146) (@leh-ppi)c94874f: fix: HTTPProxy health-check update (#23575) (@solomon-kibret)6aa9c20: fix: Health status for HTTPRoute with multiple generations (#24958) (cherry-pick #24959 for 3.2) (#25039) (@lindeskar)7129a2c: fix: High Application Controller CPU Usage - Reduce calls to db.GetSettings (#24235) (@FourFifthsCode)87faf58: fix: Hydrator wipes out entire branch when multiple Applications hydrate to the same branch with different path (fixes #24179) (#24185) (@adityaraj178)b8ac5ef: fix: OCI client, avoid calling tags/list if revision is not a constraint #23580 (#23581) (@erdody)1453367: fix: Progress Sync Unknown in UI (cherry-pick #24202 for 3.2) (#24641) (@argo-cd-cherry-pick-bot[bot])12d3f5d: fix: RunResourceAction: error getting Lua resource action: built-in script does not exist #24490 (#24491) (@FourFifthsCode)1c9bb47: fix: Selecting repoType in dropdown doesn't do anything (#23747) (#23750) (@keithchong)8d47727: fix: UI error with ApplicationSet in any namespace (#23601) (@jaqxues)45a7a18: fix:kustomize edit add componentcheck (#24100) (@blakepettersson)4c92911: fix:syncPolicy.automated.enabled=falsedoes not disable automated sync (#24254) (@downfa11)2e4af5f: fix: autosync would not trigger for different sources (#23615) (#23655) (@agaudreault)1c5d7f1: fix: cache external TLS cert to avoidLoading TLS configlog spam (#17277) (#23965) (#24080) (@mtbennett-godaddy)a1df57d: fix: capture stderr in executil RunWithExecRunOpts (cherry-pick #25139 for 3.2) (#25140) (@argo-cd-cherry-pick-bot[bot])670d383: fix: change the appset namespace to server namespace when generating appset (#23900) (@nitishfy)3eb442e: fix: correct misleading log and linter directive (#23824) (@augustkang)ed752cb: fix: correct post-delete finalizer removal when cluster not found (#24415) (@aborilov)22c652c: fix: correct typo in applicationset/utils/utils.go (#24352) (@augustkang)51fa4e8: fix: do not change CronJob to progressing (#24269) (@agaudreault)b227ef1: fix: don't show error about missing appset (cherry-pick #24995 for 3.2) (#24997) (@argo-cd-cherry-pick-bot[bot])7168674: fix: downgrade go-git (#24288) (@blakepettersson)42d4cfb: fix: existingWindows to treat all fields of the window instead of a small subset of them (#20712) (#23636) (@itaispiegel)9895f55: fix: helm GetTags cache writing (#23865) (@mclarke47)a1f4248: fix: hydration errors not set on applications (#24755) (#24809) (@agaudreault)ba38778: fix: improve CMP logging and error messages (#24022) (@korECM)8ed3a24: fix: improves message for diff-exit-code configuration option (#24039) (@ppapapetrou76)a90c545: fix: improves the ui message when an operation is terminated due to controller sync timeout (#23657) (@ppapapetrou76)5c2b13f: fix: incorrect source used in CompareAppState (#23630) (@agaudreault)e37c3db: fix: kustomize components + monorepos (#23486) (@blakepettersson)873c2fc: fix: labels field is nil in values interpolation (#24501) (#24502) (@tonychg)f3c8e1d: fix: limit number of resources in appset status (#24690) (#24697) (@alexmt)3db95b1: fix: make webhook payload handlers recover from panics (cherry-pick #24862 for 3.2) (#24912) (@argo-cd-cherry-pick-bot[bot])b1b1570: fix: prevent idle connection buildup by cloning http.DefaultTransport in Bitbucket SCM/PR generator #24209 (#24210) ([@