Argo CD v2.6.8 — Release Notes & Engineering Impact

## Quick Start ### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.8/manifests/install.yaml ``` ### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.8/manifests/ha/install.yaml ``` ## 🛑 Known Issues [Sidecar-installed Config Management Plugin discovery may fail](https://github.com/argoproj/argo-cd/issues/13940) for Applications whose `spec.source.path` is not `""` or `"."`. If you use sidecar Config Management Plugins which rely on running discovery rules in the Application's specified path, your Application may fail to refresh with an error about no supported plugins being found, or the CMP may incorrectly claim that it does support the app, and **it may produce unpredictable manifests, including _no manifests_, which will prune all your resources**. If you are affected, either use >= 2.6.10. ## Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` ## Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. ## Changes This release includes 26 contributions from 8 contributors with 0 features and 12 bug fixes. ### Bug fixes (12) - fix: CMPv2 does not allow symlinks to adjacent files in same git repo. Fixes #13342 (#13360) (#13724) - fix(appset): handle templating of raw JSON fields (#12947) (#12949) (#13653) - fix: avoid acquiring lock on two mutexes at the same time to prevent deadlock (#13636) (#13649) - fix: consume cluster cache deadlock fix from gitops-engine (#13613) - fix: surface errors when compressing files (#13491) (#13493) - fix: --file usage is broken for 'argocd proj create' command (#13130) - fix(cli): add `redis-compress` flag to `argocd admin dashboard` command (#13055) (#13056) (#13115) - fix(security): upgrade go to 1.19 (#13104) - fix: log error when failing to get git client (#12876) (#12997) - fix: make webhook handler work in all configured application namespaces (#11867) (#12386) - fix: trigger ApplicationSet reconciliation for clusters matching cluster generators in matrix or merge generators (#12543) (#12991) - fix: pass env when getting param announcement (#11812) (#11815) (#12966) ### Documentation (6) - docs: Update kustomize resource to correct path (#13196) (#13631) - docs: fix typo (#12960) (#13437) - docs: Application Info field documentation (#10814) (#13351) (#13376) - docs: s/No supported/Not supported (#13189) (#13254) - docs: Fix wrong link to non existing page for applicationset reference (#13207) (#13248) - docs: fix broken version selector (#13102) (#13106) ### Other (6) - Revert "Bump version to 2.6.8 (#13718)" (#13721) - chore: upgrade redis to 7.0.11 to avoid CVE-2023-0464(release-2.6) (#13559) - chore: upgrade haproxy to 2.6.12 to avoid CVE-2023-0464 (#13388) (#13400) - chore: disable codeql workflow on cherry-pick branches (#12893) (#12900) - chore: Bump dex from v2.35.3 to v2.36.0 (#12933) - chore: fix lint (#12972) (#12977)