Argo CD - v2.8.0-rc1

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.8.0-rc1/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.8.0-rc1/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

Be sure to read the upgrading documentation.

Changes

This release includes 285 contributions from 121 contributors (94 of them new) with 41 features and 43 bug fixes.

Features (41)

• feat(appset): ApplicationSet in any namespace (#12378)
• feat(appset): add Pull Request Generator for Azure DevOps Repos (#13367)
• feat(appset): Added Bitbucket Cloud support for pull request generator (#11273) (#11275)
• feat(helm): helm values can be either a string or a map (#2936) (#11538)
• feat: add ignoreResourceUpdates to reduce controller CPU usage (#13534) (#13912)
• feat: Create job action (#12174 and #4116) (#12925)
• feat(action): support refresh of ExternalSecret (#13951)
• feat(health): Add custom health check for KServe Inference Service resources (#14177)
• feat: upgrade notification engine (#14175)
• feat(appset): Policies create-only, create-update, sync per ApplicationSet (#11462)
• feat(ui): enable gzip for UI assets by default (#13944)
• feat: add health-checks for snapshot volume (#13979)
• feat(appset): Implement Plugin Generator (#13017)
• feat: RBAC csv policy can be composed by multiple configmap keys (#12511)
• feat(appset): add support for missingkey=error in ApplicationSets (#13731) (#13733)
• feat(appset): Support AWS CodeCommit in ApplicationSet controller (Alpha) (#13579)
• feat(health): Add Health Checks for IngressController resources (#12776)
• feat(appset): Add argocd.argoproj.io/application-set-name to rendered appset applications (#13456)
• feat: specify listen address from env / command line (#11846)
• feat(appset): Implement additional values and their interpolation for Git and SCM generators (#10751) (#10754)
• feat(appset): Add target branch support pullrequestgenerator (#13535)
• feat(health): support for external-secrets.io cluster resources (#12957)
• feat: support referencing secret in any field of oidc config (#13475)
• feat: Add controllerNamespace to .status of an application (#13081)
• feat: allow argocd-notifications-controller env variables (#13605)
• feat: Added healthcheck for ArgoEvents EventBus CRD. #12395 (#12401)
• feat: Support insecure flag for OCI pull command and upgrade helm version to 3.12.0 (#13608)
• feat: add monaco-kubernetes for editing IntelliSense (#12778)
• feat: Page header and toolbar in system extensions (#13451)
• feat: use oras-go library to enable more complex OCI Helm authentication (#12554)
• feat(appset): add configurable max reconciliations to appset (#13381)
• feat: support health check on ClusterIssuer (#12000)
• feat: add MariaDB CRD health checks (#13143)
• feat: enable gzip compression in Redis by default (#13458) (#13459)
• feat(appset): applicationset controller use repo server (#10952) (#12714)
• feat(UI): Tree view groups node by heath status (#12089)
• feat: better repo path sanitization (#12974)
• feat: Expose Helm Chart metadata in Argo CD UI (#11352) (#11575)
• feat: add short_sha_7 to AppSet generators (#11976) (#13199)
• feat: Making the moment lib global in ArgoCD project to minimize the tar ball of metrics extension (#13075)
• feat: Container statuses on summary tab of pod and detailed info in tooltip for pod on resource tree (#11513)

Bug fixes (43)

• fix: add gitlab.SystemHookEvents to support Gitlab system events (#12547)
• fix: fix permanent vertical scroll and left marging on project details page (#14181)
• fix(appset): Apply nested matrix and merge generator's generator selectors (#11984)
• fix: fix broken tooltip component (#14178)
• fix: added optional: true field to ARGOCD_APPLICATIONSET_CONTROLLER_POLICY env var (#14160)
• fix: retain count and order of revisions for multi source apps (#14108) (#14113)
• fix(gitpod): changed permission of gocache folder (#14122)
• fix(ui): use react link to route to relative deep-link path (#13529)
• fix(cmp): discover plugins relative to app path (#13940) (#13946)
• fix(ui): soften readiness gate failure message (#13972) (#14076)
• fix: remove extra comma (#13969)
• fix(ui): rename variable component to Component (#13983)
• fix: Fixes sharding placement algorithm and allows development of alternative algorithms (#13018)
• fix: creds.CAPath passed helm in PullOCI (#13726) (#13871)
• fix: set readOnlyRootFilesystem to true for redis and ha-proxy (#13316)
• fix: remove rolebinding for missing role (#7510)
• fix(ui): set arrow into negative space in pod-terminal-viewer (#13060)
• fix(appset): return error on invalid annotations (#13743)
• fix(rbac): handle malformed rbac policy (#11964)
• fix(ui): Display error msg when live state is empty (#13031)
• fix: add optional safer Git file generator globbing (#13313) (#13314)
• fix: health-checks for Elasticsearch (#13322)
• fix(ui): Updated text in refresh dialog (#13583)
• fix: allow sync when multiple allow windows are present (#12706)
• fix: implement filtering on cluster List API endpoint (#13363)
• fix(repo-server): completely clean up Git working directory (#3683) (#13001)
• fix(ui): Stop using the deprecated url format for gitlab instances (#13687)
• fix(appset): allow cluster urls to be matched (#13715)
• fix(appset): Post selector with Go templates in ApplicationSet (#13584)
• fix: Disable keep alives for helm https connections (#13695)
• fix: surface source not permitted errors (#12255)
• fix: CVE-2023-1732 (#13748)
• fix: ui dark theme transition (#12068)
• fix: typo in manifest (#13677)
• fix: update managed namespace metadata (#13074)
• fix: fix broken helm repo alias/name support (#13647)
• fix: rewrite Host header in dex round tripper (#13500)
• fix: UI should show error if repo/creds disconnect attempt fails (#13498)
• fix: CMPv2 does not allow symlinks to adjacent files in same git repo. Fixes #13342 (#13360)
• fix: broken Git file generator caching (fixes #13440) (#13452)
• fix: Avoid Docker volume creating empty directory if dex.yaml could not be generated, improve error message (#10332)
• fix: append elementsYaml in order to keep fields order (#13335)
• fix(ui): Object options menu truncated when selected in ApplicationListView. (#11695)

Documentation (30)

• docs: update documentation to reflect the procedure on current keycloak (#12505)
• docs: list tested Kubernetes versions (#12276) (#14180)
• docs: add CRD specification example files to docs (#14021)
• docs: fix code highlighting (#14022)
• docs: Fix example domain typo (#13896)
• docs: Clarify ingress-nginx ssl termination example (#13913)
• docs: add pre-release to helm tracking strategies (#13923)
• docs: proposal/dynamic rebalancing of clusters across shards (#13221)
• docs: fix typo (#13967)
• docs: document matchExpressions field for post-selectors (#13646)
• docs: add GHSA to vulnerability reporting methods (#13510)
• docs: added command to add environmental PATH (#13240)
• docs: update USERS.md with the addition of seek.com.au (#13297)
• docs: Add Mono Repo Usage (#9556)
• docs: Update health documentation (#12996)
• docs: fix url in kustomize installation example (#13581)
• docs: Custom Style Class name update (#13392)
• docs: Remove old annotations (#12168)
• docs: add scalability benchmarking proposal (#12662)
• docs: Simplify the release document (#13563)
• docs(users): add StreamNative to the list of users (#13499)
• docs: Add Hostinger to USERS.md (#13304)
• docs: nginx passthrough secret as argocd-server-tls (#12921)
• docs: Add Argo CD components architecture doc (#13194)
• docs: Add link to kustomization example for installing argocd (#13268)
• docs: Update RBAC example to include permissions for projects (#12773)
• docs: Add Argo CD Core documentation (#13225)
• docs: add KelkooGroup to users list (#13095)
• docs: recommend users build test-tools-image locally (#13082)
• docs: update private-repositories.md (#12332)

Other (163)

• Unified option format (#11259)
• chore(deps): bump google.golang.org/protobuf from 1.30.0 to 1.31.0 (#14212)
• chore(deps): upgrade go-grpc to v0.15.0 (#13872)
• chore(deps): bump bitnami/kubectl from 1.26 to 1.27 in /test/container (#13270)
• build: Use full-qualified image slugs instead of short names (#14198)
• chore(deps): bump sigstore/cosign-installer from 3.0.5 to 3.1.0 (#14202)
• chore(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 (#14203)
• chore: add 1.27 k3s version to ci-build.yaml (#14207)
• relogin cmd tests (#14186)
• chore(deps): bump github.com/aws/aws-sdk-go from 1.44.288 to 1.44.289 (#14188)
• chore(deps): bump Helm to 3.12.1 and Kustomize to 5.1.0 (#14173)
• chore(deps): upgrade node to 20.3.1 (#14174)
• chore(deps): bump github.com/aws/aws-sdk-go from 1.44.287 to 1.44.288 (#14176)
• chore(deps): bump github.com/xanzy/go-gitlab from 0.85.0 to 0.86.0 (#14165)
• chore(deps): bump github.com/aws/aws-sdk-go from 1.44.286 to 1.44.287 (#14164)
• chore(deps): bump google.golang.org/grpc from 1.56.0 to 1.56.1 (#14163)
• build: Consistently default to linux/amd64 (#14146)
• chore(deps): bump github.com/aws/aws-sdk-go from 1.44.285 to 1.44.286 (#14153)
• chore: remove argocd-cm plugin support (#13755)
• chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.59 to 0.9.60 (#14118)
• chore(deps): bump github.com/aws/aws-sdk-go from 1.44.283 to 1.44.285 (#14126)
• chore: parse from env (#14116)
• chore: add build-args for git-commit etc (#14114)
• chore(deps): bump github.com/casbin/casbin/v2 from 2.71.0 to 2.71.1 (#14120)
• Revert "feat: add monaco-kubernetes for editing IntelliSense (#12778)" (#14000)
• chore: remove references to ARGOCD_REDIS (#13434)
• chore(deps): bump github.com/casbin/casbin/v2 from 2.70.0 to 2.71.0 (#14095)
• chore: add ZDF to USERS.md (#14099)
• chore(deps): bump github.com/prometheus/client_golang (#14092)
• chore(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.0 (#14093)
• chore(deps): bump github.com/aws/aws-sdk-go from 1.44.282 to 1.44.283 (#14094)
• chore(deps): bump golang.org/x/sync from 0.2.0 to 0.3.0 (#14069)
• Add the default resource exclusions (#13897)
• chore(deps): upgrade go to 1.20.5 (#13941)
• chore(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.9.0 (#14031)
• chore(deps): bump docker/build-push-action from 4.1.0 to 4.1.1 (#14033)
• chore(deps): bump github.com/aws/aws-sdk-go from 1.44.281 to 1.44.282 (#14028)
• chore(deps): bump golang.org/x/crypto from 0.9.0 to 0.10.0 (#14029)
• chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.58 to 0.9.59 (#14030)
• chore(deps): bump peter-evans/create-pull-request from 5.0.1 to 5.0.2 (#14032)
• chore(deps): bump docker/setup-buildx-action from 2.6.0 to 2.7.0 (#14034)
• chore: add MeilleursAgents to USERS.md (#14007)
• chore(deps): bump goreleaser/goreleaser-action from 4.2.0 to 4.3.0 (#14014)
• chore(deps): bump golangci/golangci-lint-action from 3.5.0 to 3.6.0 (#14013)
• chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 (#14011)
• chore(deps): bump github.com/aws/aws-sdk-go from 1.44.280 to 1.44.281 (#14010)
• chore(deps): bump github.com/aws/aws-sdk-go from 1.44.279 to 1.44.280 (#13991)
• chore(deps): bump actions/checkout from 3.5.2 to 3.5.3 (#13993)
• chore(deps): bump github.com/xanzy/go-gitlab from 0.84.0 to 0.85.0 (#13992)
• chore(deps): bump docker/build-push-action from 4.0.0 to 4.1.0 (#13994)
• chore(deps): bump library/busybox in /test/e2e/multiarch-container (#13998)
• chore(deps): bump github.com/aws/aws-sdk-go from 1.44.278 to 1.44.279 (#13974)
• chore(deps): bump thehanimo/pr-title-checker from 1.3.7 to 1.4.0 (#13903)
• chore(deps): bump golangci/golangci-lint-action from 3.4.0 to 3.5.0 (#13904)
• chore(deps): bump docker/setup-qemu-action from 2.1.0 to 2.2.0 (#13962)
• chore(deps): bump docker/login-action from 2.1.0 to 2.2.0 (#13961)
• chore(deps): bump slsa-framework/slsa-github-generator (#13960)
• chore(deps): bump docker/setup-buildx-action from 2.5.0 to 2.6.0 (#13959)
• chore(deps): bump github.com/aws/aws-sdk-go from 1.44.277 to 1.44.278 (#13957)
• chore(deps): bump github.com/casbin/casbin/v2 from 2.69.1 to 2.70.0 (#13958)
• chore: Code format (#12400)
• chore(deps): bump github.com/hashicorp/go-retryablehttp (#13933)
• chore(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 (#13932)
• chore(deps): bump github.com/aws/aws-sdk-go from 1.44.275 to 1.44.277 (#13931)
• chore(deps): bump github.com/Masterminds/semver/v3 from 3.2.0 to 3.2.1 (#13930)
• chore(deps): bump github.com/alicebob/miniredis/v2 from 2.23.1 to 2.30.3 (#13917)
• chore(deps): bump github.com/prometheus/client_golang (#13919)
• chore(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 (#13918)
• chore(deps): bump github.com/grpc-ecosystem/go-grpc-middleware (#13920)
• chore(deps): bump github.com/yuin/gopher-lua (#13916)
• chore(deps): bump github.com/itchyny/gojq from 0.12.12 to 0.12.13 (#13902)
• chore(deps): bump github.com/aws/aws-sdk-go from 1.44.274 to 1.44.275 (#13901)
• chore(deps): bump github.com/redis/go-redis/v9 from 9.0.2 to 9.0.5 (#13900)
• chore(deps): bump github.com/go-git/go-git/v5 from 5.6.1 to 5.7.0 (#13899)
• chore: bump argo-ui version (#13836)
• chore(deps): bump github.com/aws/aws-sdk-go from 1.44.272 to 1.44.274 (#13880)
• chore(deps): bump oras.land/oras-go/v2 from 2.1.0 to 2.2.0 (#13881)
• chore(deps): bump github.com/imdario/mergo from 0.3.13 to 0.3.16 (#13883)
• chore(deps): bump github.com/xanzy/go-gitlab from 0.83.0 to 0.84.0 (#13884)
• chore: remove unused variables in GenerateManifests (#13887)
• chore: Clean up repeated package import (#13821)
• chore(deps): bump github.com/casbin/casbin/v2 from 2.60.0 to 2.69.1 (#13861)
• chore(deps): bump github.com/dustin/go-humanize from 1.0.0 to 1.0.1 (#13864)
• chore(deps): bump github.com/google/go-jsonnet from 0.19.1 to 0.20.0 (#13863)
• chore(deps): bump golang.org/x/sync from 0.1.0 to 0.2.0 (#13862)
• chore(deps): bump github.com/antonmedv/expr from 1.9.0 to 1.12.5 (#13860)
• chore(deps): bump github.com/aws/aws-sdk-go from 1.44.271 to 1.44.272 (#13842)
• chore(deps): bump github.com/coreos/go-oidc/v3 from 3.4.0 to 3.6.0 (#13844)
• chore(deps): bump github.com/go-openapi/runtime from 0.25.0 to 0.26.0 (#13845)
• chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.55 to 0.9.58 (#13843)
• chore: bump otel dependencies (#13798)
• chore: upgrade node to 20.2.0 (#13800)
• chore: upgrade go to 1.20.4 (#13801)
• chore(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 (#13829)
• chore(deps): bump github.com/itchyny/gojq from 0.12.10 to 0.12.12 (#13816)
• chore(deps): bump github.com/gorilla/websocket from 1.4.2 to 1.5.0 (#13817)
• chore(deps): bump github.com/whilp/git-urls (#13814)
• chore(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.19 (#13818)
• chore(deps): bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 (#12109)
• chore(deps): bump github.com/xanzy/go-gitlab from 0.60.0 to 0.83.0 (#13269)
• chore(deps): bump codecov/codecov-action from 3.1.1 to 3.1.4 (#13602)
• chore(deps): bump sigstore/cosign-installer from 3.0.1 to 3.0.5 (#13639)
• chore(deps): bump foundation-sites from 6.7.4 to 6.7.5 in /ui (#13806)
• fix(appset): ArgoCD admin cmd: handle applicationsets RBAC (#11997)
• chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 (#13804)
• chore(deps): bump golang.org/x/crypto from 0.6.0 to 0.9.0 (#13803)
• chore(deps): bump github.com/aws/aws-sdk-go from 1.44.164 to 1.44.271 (#13805)
• chore(deps-dev): bump webpack from 5.70.0 to 5.84.1 in /ui (#13750)
• Implement Proclaim CRD health checks. (#12930)
• chore: set explicit package.json deps (#13483)
• chore: add GoTo Financial ArgoCD user (#13317)
• feat: add health-checks for Percona XtraDB cluster (#13093)
• chore(deps): bump slsa-framework/slsa-github-generator (#13656)
• chore: Clean up repeated package import (#13685)
• test: add tests to validate helm ranges (#4047) (#13662)
• chore: code clean for hack known_types.go (#12304)
• chore(deps): bump peter-evans/create-pull-request from 4.2.4 to 5.0.1 (#13408)
• chore: add chainnodes to users (#13754)
• chore: Add Veepee into USERS (#13301)
• chore(deps): bump actions/setup-go from 3.5.0 to 4.0.1 (#13601)
• chore: Clean up repeated package import (#13543)
• chore(deps): bump github.com/docker/distribution (#13554)
• chore: update VERSION on rc1 release (#13558)
• Update kustomize resource to correct path (#13196)
• consume cluster cache deadlock fix in gitops-engine (#13611)
• chore: Add Procore as a user of Argo CD (#13515)
• Add candis.io to USERS.md (#13504)
• chore(deps): bump actions/checkout from 3.4.0 to 3.5.2 (#13228)
• chore: Add Cloudogu to USERS.md (#13412)
• chore: replace github.com/ghodss/yaml with sigs.k8s.io/yaml (#13292)
• chore: add Puzzle to the users list (#13288)
• chore: Add ScaleFactory to USERS.md (#13303)
• Add DaoCloud in users (#13300)
• chore: Bumped version to the next release version 2.8.0 (#13368)
• chore(deps): bump library/golang from 1.19.6 to 1.19.7 (#12859)
• chore: adding test coverage for the notification_controller (#13339)
• chore: Add additional field to set Extra Build Information while building argo-cd by vendors (#13324)
• add last sync field to application tiles (#13184)
• chore: Add Previder BV to USERS.md (#13273)
• chore: Add Albert Heijn to the users.md (#13280)
• chore: add SLSA badge (#13282)
• chore: Clean up repeated package import (#13134)
• chore: better error handling for nestedGeneratorHasClusterGenerator (#13195)
• Added filterSuggestions to project dropdown list (#13109)
• chore: Add Lucid Motors to USERS.md (#13117)
• chore: Add missionlane.com to USERS.md (#13094)
• ci: OSV scanner override (#13099)
• chore: fix PR title config (#13091)
• chore: PR title, uses less permissive permissions (#13084)
• chore(deps): bump ossf/scorecard-action from 2.1.2 to 2.1.3 (#13049)
• chore: use build-and-publish digest output (#13083)
• chore: fix needs context for image workflow (#13072)
• chore: use ghcr for latest tag attestations (#13058)
• chore: remove invalid err check (#13040)
• chore: updated error message to include context (#11066)
• chore: remove deprecated apiversion for deployment (#11830)
• chore: identify pluginName with quotes (#12040) (#12046)
• chore: Comment format (#12399)
• chore: Update example-plugin-helm version and the latest yg version (#11840)
• chore: change cmp server help message (#12049)
• chore: delete unused code for admin-settings-rbac (#12312)
• chore: remove duplicate message field (#12477)
• Add wildcard filtering to the name search field (#13022)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.7.6...v2.8.0-rc1