github argoproj/argo-cd v2.4.0-rc2

latest releases: v2.9.17, v2.10.12, v2.11.3...
pre-release2 years ago

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.0-rc2/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.0-rc2/manifests/ha/install.yaml

Notes

This is a security release. We urge all users of 2.4.0-rc1 to update as soon as possible. Please refer to the Security fixes section below for more details.

Security fixes

  • CRITICAL: Argo CD will trust invalid JWT claims if anonymous access is enabled (GHSA-r642-gv9p-2wjj)
  • LOW: Login screen allows message spoofing if SSO is enabled (GHSA-xmg8-99r8-jc2j)
  • MODERATE: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server (GHSA-6gcg-hp2x-q54h)

Bug Fixes

  • fix: grouped node titles no longer wrap (#9340)
  • fix: ListResourceActions() returns duplicate actions (#9360)
  • fix: favorite icon and overlapping app title (#9130)
  • fix: favorite icon and overlapping app title (#9130)

Features

  • feat(manifests): Add service account for repo server (#9301) (#9355)

Other

  • docs: clarify Role/ClusterRole uses for exec feature (#9354)
  • docs: logs RBAC upgrate notes (#9345) (#9356)
  • chore: Improve otel grpc traces adding span correlation (#9371)

Don't miss a new argo-cd release

NewReleases is sending notifications on new releases.