Argo CD v2.6.0 — Release Notes & Engineering Impact

## Quick Start ### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.0/manifests/install.yaml ``` ### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.0/manifests/ha/install.yaml ``` ## Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` ## Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. ## Changes This release includes 235 contributions from 94 contributors (54 of them new) with 39 features and 34 bug fixes. ### Features (39) - feat: make discovery field optional in plugins (#12073) - feat: Allow force of basic auth for HTTP repositories (#11983) - feat(security): require the `aud` claim from OIDC providers by default (#12187) - feat: add health checks for keptn resources (#11716) - feat: Extend Cluster.cluster.x-k8s.io health check (#11705) - feat: support Knative Serving 1.5 Custom Health Checks (#9719) - feat: AppSet Progressive Rollouts with RollingSync (#9437) (#10048) - feat: Multiple sources for applications (#2789) (#10432) - feat: add google cloud source repo support (#7534) (#11618) - feat: ApplicationSet add `create-delete` policy #9101 (#11107) - feat: Allow Matrix generator to have two Git child generators without conflict (#10522) (#10523) - feat: expose deep links in UI (#11680) - feat: show cmpv2 plugins in create app wizard (#11615) - feat: pull request labels exposed in Pull Request generator template (#10204) (#11397) - feat: add deny sources (#11639) (#11646) - feat: Add support for proxy extensions (#11307) - feat: added deep links backend changes (#11401) - feat: Allow proxy to be saved when creating repoCreds (#11351) (#11425) - feat: show app age in application list view (#11209) (#11502) - feat: add support for plugin name in CMPv2 (#11290) (#11341) - feat: parameterized config management plugins (#9135) (#9216) - feat: Add wildcard support in OCI Helm Repositories targetRevision (#6686) (#10641) - feat(ui): add a filter for auto sync (#11357) - feat: Implement karmada CRD health checks (#11192) - feature: allow a custom labels on any resource to surface in the UI (tree view node tags) (#11153) - feat: display auto sync status in application details view (#11200) - feat: Shared custom health check for multiple resources (#4212) (#10885) - feat: Add new admin command to print Argo CD initial password (11117) (#11155) - feat: enable metadata to be set on namespaces (#10672) - feat: add labels and annotations to cluster details page (#9707) - feat: sort resource list by created_at, add message to AnalysisRun and replicas to ReplicaSet (#10613) - feat: UI Add copy to clipboard shortcut (#10958) - feat: directory app include/exclude fields in UI (#10880) - feat: make applicationset controller configurable in argocd-cmd-params (#10961) - feat: add bcrypt support for argocd CLI (#10934) - feat: link path directly to the path in repo (#10568) (#10860) - feat: make ARGOCD_GIT_MODULES_ENABLED configurable in argocd-cmd-params (#10931) - feat: Implement MachineHealthCheck CRD health check (#10846) - feat: Implement SecretStore health check (#10847) ### Bug fixes (34) - fix: remove argocd-cm plugin warnings (#11740) - fix: multi-source app refresh (#11772) (#12217) - fix: don't dump SSG to server logs, change deprecation notice to v2.7 (#12285) - fix: AppSet Progressive sync fixes, docs, and logging improvements (#11924) (#12103) - fix: disable edit button on App Details Summary and Parameters tabs multi-source apps (#12048) - fix: return nil if reading application set was successful (#12261) - fix: repo-server - prevent locked state after unclean git checkout (#7898) (#11805) - fix: Upgrade gopkg.in/yaml.v2 to v2.4.0 [release-2.6] (#12245) - fix: disable More button for multiple sources (#11760) (#11971) - fix: create separate API to load configured plugins (#12164) - fix: values should always be visible, even when they are empty (#11676) (#11681) - fix: pathParamPrefix is optional (#11796) (#11943) - fix: parsed url is not exposed (#11816) (#11916) - fix: upgrade qs to avoid CVE-2022-24999 (#11743) - fix: Applications with suspended jobs now marked "Suspended" instead of "Progressing" (#11603) (#11626) - fix: disable rollback button for apps with multiple sources (#11785) - fix: set Path as empty if path is not specified for a source in multiple sources (#11756) (#11774) - fix: sources.ref allow hyphen and underscore (#11775) - fix: support for enabling progressive rollouts from `argocd-cmd-params-cm` (#11776) - fix: support relative links in OCI tags query response (#11708) - fix: rollback react to known working version (#11703) - fix: Unknown sync operation state on app list page (#11621) - fix: only add baseURL in github_app client for GHE client (#11622) - fix: set baseURL in github_app client (#11613) - fix: misc css fixes for mobile (#5705) (#11508) - fix: upgrade golang.org/x/net vuln (#11447) - fix: incorrect can-i documentation (#11463) - fix: application list api is very slow when fields query parameter is supplied (#11250) - fix: add check for trailing/leading whitespace in project role group names (#10919) (#10988) - fix(ui): show orphaned as gray. fixes: #11180 (#11218) - fix: point gitops-engine to current master (#11230) - fix: do not mutate live when managed namespace enabled (#11197) - fix: defaulting to in-cluster is misleading for disconnected clusters (#10132) - fix: trim whitespace from auth token (#10539) ### Documentation (32) - docs: update config management plugin docs (#11690) - docs: add 2.5->2.6 upgrade notes to list (#12283) - docs: sign up for 1.8 release (#12266) - docs: release cycle refresh (#11137) - docs: Fix heading to not include a v for the second version (#12218) - docs: add destination.name example (#12242) - docs: custom health check resource group wildcard (#4212) - docs: added deep links doc (#11888) - docs: Update bullet formatting on Progressive Rollouts.md (#11777) - docs: bump elasticsearch version to 8.5.1 (#11771) - docs: add appset progressive rollout strategy proposal (#9979) - docs: fix web terminal step list numbering (#11590) - docs: clarify finalizer effect and link to app-of-apps (#11272) - docs: update remote-debugging-docs (#11424) - docs: update contributor meeting times (#11294) - docs: Use new Google Analytics 4 ID (#11291) - docs: add info about sync interval (#11281) - docs: fix formatting (#11245) - docs(user-guide): update link to Helm hooks documentation (#11045) - docs: fix typo in declarative-setup.md (#11190) - docs: debugging CMPs (#11142) - docs: add ui banner options in docs (#10907) - docs: Add AirQo to users list (#11160) - docs: Add SI Analytics to ArgoCD Users list (#11110) - docs: message is no longer truncated (#10962) - docs: add reverse proxy proposal for enhanced UI extensions (#10435) - docs: fix link in auth0.md (#10531) - docs: update debugging remote argocd environment (#10811) - docs: Add Gepardec to users (#10840) - docs: add dtag to users (#10845) - docs: #argo-contributors instead of #argo-dev in FAQ - docs: add declarative syntax examples for helm (#10764) ### Other (105) - chore: rename 'progressive rollouts' to 'progressive syncs' (#12265) - chore: upgrade cookiejar to avoid CVE-2022-25901 (#12030) - chore: upgrade net/http2 to avoid CVE-2022-41717 (#11616) - bug: fix url parsing for non git urls (oci://, no protocol etc) (#11819) - chore: change logging level to Debug (#11773) - chore: add kustomize project for testing param CMP locally (#11265) - chore: upgrade minimatch to avoid CVE-2022-3517 (#11745) - chore: upgrade git-url-parse to avoid CVE-2022-2900 (#11744) - chore: add Voyager Digital to USERS.md (#11735) - chore: Add Cloud Scale to USERS.md (#11731) - chore: Add Getyourguide to USERS.md (#11704) - chore: add Mercedes-Benz Tech Innovation to user list (#11682) - chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.54 to 0.9.55 (#11678) - chore(deps-dev): bump @types/cookie from 0.3.3 to 0.5.1 in /ui (#11659) - chore: downgrade React to v17 (#11653) - chore(deps): bump github.com/casbin/casbin/v2 from 2.59.0 to 2.60.0 (#11656) - chore(deps): bump express from 4.17.1 to 4.18.2 in /ui (#11591) - chore(deps-dev): bump tslint-react from 3.6.0 to 5.0.0 in /ui (#11559) - chore(deps): bump react-paginate from 6.5.0 to 8.1.4 in /ui (#11558) - chore: Bump version in master to 2.6.0 (#11641) - includeKinds for APIVersions in cluster info cache (#11241) - chore(deps): bump github.com/aws/aws-sdk-go from 1.44.129 to 1.44.156 (#11629) - chore: add Trusting Social users list (#11584) - chore(deps): bump github.com/casbin/casbin/v2 from 2.57.1 to 2.59.0 (#11607) - chore(deps): bump github.com/go-redis/redis/v8 from 8.11.3 to 8.11.5 (#11606) - chore(deps): bump github.com/Masterminds/semver/v3 from 3.1.1 to 3.2.0 (#11605) - chore(deps): bump github.com/go-openapi/loads from 0.19.4 to 0.21.2 (#11569) - chore(deps): bump sigs.k8s.io/structured-merge-diff/v4 (#11580) - chore: add Vinted to users list (#11214) - chore(deps): bump github.com/go-openapi/runtime from 0.19.4 to 0.25.0 (#11568) - add otel interceptor (#11561) - chore(deps): bump github.com/imdario/mergo from 0.3.12 to 0.3.13 (#11555) - chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.40 to 0.9.54 (#11554) - chore(deps): bump github.com/valyala/fasttemplate from 1.2.1 to 1.2.2 (#11552) - chore: Update notifications-engine dependency (#11479) - [Hack] Add concurrency to cluster creation in resource generator. (#11266) - chore(deps-dev): bump babel-jest from 24.9.0 to 26.6.3 in /ui (#11483) - chore(deps-dev): bump @babel/preset-react from 7.7.0 to 7.18.6 in /ui (#11489) - chore(deps-dev): bump @types/prop-types from 15.7.1 to 15.7.5 in /ui (#11487) - chore(deps): bump github.com/google/go-jsonnet from 0.18.0 to 0.19.1 (#11484) - chore(deps): bump github.com/mattn/go-zglob from 0.0.3 to 0.0.4 (#11486) - chore: upgrade React version (#11467) - chore(deps-dev): bump @types/lodash-es from 4.17.5 to 4.17.6 in /ui (#11488) - chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.4.3 (#11485) - chore(deps): bump github.com/alicebob/miniredis/v2 from 2.14.2 to 2.23.1 (#11481) - chore(deps): bump github.com/evanphx/json-patch (#11482) - chore: Update to v3 of the sprig library for ApplicationSets (#11277) (#11292) - chore: dependabot for npm (#11474) - chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 (#11469) - chore(deps): bump google.golang.org/grpc from 1.45.0 to 1.51.0 (#11454) - chore(deps): bump github.com/gosimple/slug from 1.12.0 to 1.13.1 (#11452) - chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.2.0 to 4.4.2 (#11468) - chore(deps): bump github.com/itchyny/gojq from 0.12.3 to 0.12.9 (#11471) - chore: update otel libraries to 1.11.1 (#11461) - chore:remove redundant parentheses (#11436) - chore(deps): bump gopkg.in/go-playground/webhooks.v5 (#11369) - chore(deps): bump github.com/prometheus/client_golang (#11366) - chore(deps): bump github.com/casbin/casbin/v2 from 2.39.1 to 2.57.1 (#11420) - chore: push GHCR image to repo scope (#11394) - chore: add Liatrio to the official users list (#11377) - proposal: Deep Links (#10278) - bug(ui): fix incomplete drop-down resource acctions (#11384) - chore: fix username for ghcr.io (#11373) - chore: Include error when dex config unmarshal fails (#11349) - chore: add user to list (#11336) - chore: add Wolffun Game to USERS (#11342) - chore: grant packages.write for image workflow (#11358) - chore: Enable dependabot for automatic dependency updates (#8339) - chore: Add Divistant to Users list (#11298) - chore(docs): fix build, prepare for google analytics v4 (#10850) (#11248) - chore: add Pigment to list of users (#11127) - Action menu: sort items, show in resource details page (#11008) - chore: Add Envoy to Users list (#11169) - chore: beta.kubernetes.io/arch has been deprecated in 1.14 (#11016) - chore: add Objective to USERS.md (#11202) - chore: Add Amadeus to user list (#11177) - chore: update owners file from membership meeting (#11184) - chore: Add retry to cluster generation for testing in hack folder (#11067) - chore: fix misleading error message in the e2e tests (#11085) - chore: migrate import statements from es5 to es6 (#11042) - test: simplify bcrypt test (#11013) - chore: increase liveness timeout (#10730) - chore: wrap errors with message (#10592) (#10986) - test: add unit test for server version (#10720) - chore: update error message to provide context (#10978) - chore: decreased indent level in setApplicationHealth (#10980) - chore: updated error message to include context (#10592) (#10960) - chore: Enhance title & description for Certificates on settings page (#7560) (#10956) - chore: improve error logs (#10944) - chore: wrap error objects to include context (#10592) (#10940) - chore: delete old snyk reports, 2nd attempt (#10950) - chore: rewording of misleading message (#10407) - chore: delete old snyk reports (#10938) - chore: fix wrong annotation in function (#10923) - chore: improve error logs (#10933) - chore: improve log in argo-cd/applicationset/generators/generator_spec_processor.go (#10906) - chore: fix git push command in Snyk update workflow (#10920) - chore: open a PR instead of pushing for Snyk updates (#10889) - chore: wrap error objects to include context (#10904) - chore: wrap error objects to include context (#10592) (#10871) - chore: add security logs to webhook verification failures (#10372) - chore: use `appv1` prefix everywhere (#10621) - chore: wrap error objects to include context (#10592) (#10859) - chore: Added artifact hub badge (#10854) - chore: update robfig/cron to v3 (#10588)