github argoproj-labs/argocd-agent v0.11.0

53 minutes ago

0.11.0 - 2026-11-11

This minor release focuses on operational excellence with zero-downtime certificate management, enhanced troubleshooting capabilities for production environments, improved security controls for multi-cluster deployments, and
performance improvements through concurrent request processing.

There have been tons of bug fixes and other improvements in this release - and most of all, a whole bunch of new contributors! This is very exciting, and the project would like to thank all individuals who have contributed to this release. You people rock!

The 0.11 release of argocd-agent is supporting the Argo CD 3.6 release stream.

Highlighted features

Hot TLS Certificate Reloading (#1168, #1125)

This feature enables zero-downtime certificate rotation for both agent and principal components. When TLS certificates are updated - whether through automated systems like cert-manager, SPIRE, or Vault, or through manual rotation - the gent and principal will automatically detect and apply the new certificates without requiring a restart.

This is particularly valuable for organizations with strict security policies requiring frequent certificate rotation, or those using short-lived certificates. Previously, certificate rotation meant planned downtime or rolling restarts of agents, which could disrupt continuous deployment operations. Now, certificate lifecycle management becomes truly seamless, with no service interruption and no manual intervention required. Agents maintain uninterrupted connectivity to the principal server even as certificates are rotated in the background.

Thanks to @cjcocokrisp for the principal part and @sathwick-p for the agent part of this awesome feature!

Runtime Debug Settings Toggle (#1111)

Operators can now enable or disable debug logging and performance profiling on running agent and principal instances without restarting them. This dramatically improves the ability to troubleshoot production issues, especially transient problems that are difficult to reproduce.

When investigating an issue, operators can temporarily increase logging verbosity to capture detailed diagnostic information, enable profiling to identify performance bottlenecks, and then return to normal settings - all without any service disruption. This eliminates the trade-off between running with verbose logging "just in case" (which impacts performance and storage) versus having insufficient information when problems occur. The feature makes incident response faster and more effective while maintaining normal production performance characteristics.

Thanks to @chetan-rns for contributing this valuable feature!

AppProject destinationServiceAccounts Rewriting (#1179)

This feature ensures that security controls defined in AppProjects work correctly when applications are deployed to agent-managed clusters. Specifically, it properly handles the destinationServiceAccounts field, which controls which Kubernetes service accounts can be used when deploying applications to specific clusters.

Without this fix, security policies intended to restrict which service accounts can be impersonated during deployments might not apply correctly in agent-managed environments, potentially leading to authorization failures or overly permissive access. This change ensures that multi-cluster RBAC policies are enforced consistently, whether applications are deployed directly or through agents, maintaining your security posture across all deployment patterns.

Thanks to @Rizwana777 for contributing this excellent feature!

Complete changelog

โ›ฐ๏ธ Features

๐Ÿ› Bug Fixes

๐Ÿ“ฆ Dependency updates

๐Ÿšœ Refactor

๐Ÿ“š Documentation

๐Ÿงช Testing

โš™๏ธ Miscellaneous Tasks

โ—€๏ธ Revert

Build

Release

  • Init 0.11.0 release on branch release-0.11 (#1218) - (81e522a) by @github-actions[bot]

New Contributors โค๏ธ

Don't miss a new argocd-agent release

NewReleases is sending notifications on new releases.