Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.13/manifests/install.yamlHA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.13/manifests/ha/install.yamlRelease Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
- 42e23cb: fix(actions): list Rollout actions when the Rollout has no status (#30291) (cherry-pick #30331 for 3.4) (#30653) (@argo-cd-cherry-pick-bot[bot])
- 9b48378: fix(app): ensure deletion message is printed only for text output fomat (cherry-pick #30600 for 3.4) (#30617) (@argo-cd-cherry-pick-bot[bot])
- 19c7221: fix(appset): do not expose reserved cluster annotations as parameters (cherry-pick #30448 for 3.4) (#30479) (@argo-cd-cherry-pick-bot[bot])
- 46a318f: fix(appset): refresh GitLab pull request generators configured with the project path (#13766) (cherry-pick #30578 for 3.4) (#30621) (@argo-cd-cherry-pick-bot[bot])
- 1085b62: fix(cli): honor HTTP_PROXY/HTTPS_PROXY/NO_PROXY for gRPC-web connections (cherry-pick #29642 for 3.4) (#30499) (@argo-cd-cherry-pick-bot[bot])
- 53c49c3: fix(cli): send --header values when refreshing an expired auth token (#30547) (@nitishfy)
- 97854e7: fix(controller): allow terminating an operation blocked by a sync window (#26395) (cherry-pick #30267 for 3.4) (#30502) (@argo-cd-cherry-pick-bot[bot])
- 39d0bc1: fix(exec): don't leak a goroutine when a command times out without waiting (cherry-pick #30394 for 3.4) (#30435) (@argo-cd-cherry-pick-bot[bot])
- 7c167f7: fix(git): send SIGTERM before SIGKILL when a git command is cancelled (cherry-pick #30393 for 3.4) (#30408) (@argo-cd-cherry-pick-bot[bot])
- ab48586: fix(health): handle Crossplane Providers missing the Installed or Healthy condition (#23363) (cherry-pick #30429 for 3.4) (#30625) (@argo-cd-cherry-pick-bot[bot])
- 72ac2bc: fix(health): report inactive Crossplane ManagedResourceDefinitions as Healthy (#25270) (cherry-pick #30404 for 3.4) (#30424) (@argo-cd-cherry-pick-bot[bot])
- f5ede5b: fix(health): use status.healthy for customize.core.cnrm.cloud.google.com resources (#30164) (cherry-pick #30165 for 3.4) (#30654) (@argo-cd-cherry-pick-bot[bot])
- de71193: fix(server): allow the gRPC health check without authentication (#26193) (cherry-pick #30474 for 3.4) (#30569) (@antcybersec)
- e8472fa: fix(sync): remove hook finalizer when live object is missing from reconciliation cache (cherry-pick #29469 for 3.4) (#30659) (@argo-cd-cherry-pick-bot[bot])
- 4bfc7be: fix(ui): keep status panel links readable when focused in dark mode (#29288) (cherry-pick #30493 for 3.4) (#30541) (@argo-cd-cherry-pick-bot[bot])
- e27c9c7: fix(ui): refine validation and handling for write credentials in repo settings (cherry-pick #30489 for 3.4) (#30595) (@adityaraj178)
- 7aa6bdf: fix: Ingress link scheme (https) when tls is enabled without secretName (cherry-pick #28888 for 3.4) (#30507) (@argo-cd-cherry-pick-bot[bot])
- e0370cf: fix: accept IP and port as OCI Helm repository URL (#21374) (cherry-pick #30233 for 3.4) (#30516) (@argo-cd-cherry-pick-bot[bot])
- 69f908f: fix: badges with short revisions get correct width (#29335) (cherry-pick #29336 for 3.4) (#30581) (@argo-cd-cherry-pick-bot[bot])
- 0023636: fix: fix escaped URL routing for write repo (creds) endpoints (cherry-pick #29940 for 3.4) (#29955) (@argo-cd-cherry-pick-bot[bot])
- 6929086: fix: honor UserInfo cache limit when response omits expires (cherry-pick #30462 for 3.4) (#30624) (@adityaraj178)
- 40f9a9b: fix: include multi-source revisions in sync completion event (cherry-pick #30446 for 3.4) (#30470) (@gdsoumya)
- 2145508: fix: prevent panic in glob.MatchStringInList for "/" sourceNamespaces entry (cherry-pick #30572 for 3.4) (#30614) (@argo-cd-cherry-pick-bot[bot])
- 9b3eb49: fix: skip dollar escaping when DEX_EXPAND_ENV is disabled (cherry-pick #29181 for 3.4) (#30646) (@argo-cd-cherry-pick-bot[bot])
- 3ce8c62: fix: wait for current SealedSecret generation before reporting health (cherry-pick #29867 for 3.4) (#30353) (@argo-cd-cherry-pick-bot[bot])
Other work
- 83ad9cd: chore: bump version to 3.4.13 on release-3.4 branch (#30721) (@github-actions[bot])
- 4dac47e: fix(gitops-engine): race condition on empty-uid backfill (cherry-pick #28343 for 3.4) (#30526) (@argo-cd-cherry-pick-bot[bot])
- fc097bd: test(cmpserver): fix flaky timing assertions in RunCommand timeout tests (#30377) (cherry-pick #30378 for 3.4) (#30417) (@argo-cd-cherry-pick-bot[bot])
- c49dd28: test(notification-controller): fix flaky TestInitTimeout (#30401) (cherry-pick #30406 for 3.4) (#30415) (@argo-cd-cherry-pick-bot[bot])
Full Changelog: v3.4.12...v3.4.13
