argocd: update dependency argoproj/argo-cd to v3.3.0 #376
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Infro diff for 9812b0f
Detailstime="2026-01-22T20:48:22Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2026-01-22T20:48:35Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
===== apiextensions.k8s.io/CustomResourceDefinition /applications.argoproj.io ======
--- /tmp/argocd-diff3262014099/applications.argoproj.io-live.yaml
+++ /tmp/argocd-diff3262014099/applications.argoproj.io
@@ -118,6 +118,10 @@
a failed sync. If set to 0, no retries will be performed.
format: int64
type: integer
+ refresh:
+ description: 'Refresh indicates if the latest revision should
+ be used on retry instead of the initial one (default: false)'
+ type: boolean
type: object
sync:
description: Sync contains parameters for the operation
@@ -1482,11 +1486,15 @@
path:
description: |-
Path is a directory path within the git repository where hydrated manifests should be committed to and synced
- from. If hydrateTo is set, this is just the path from which hydrated manifests will be synced.
+ from. The Path should never point to the root of the repo. If hydrateTo is set, this is just the path from which
+ hydrated manifests will be synced.
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
- description: TargetBranch is the branch to which hydrated
- manifests should be committed
+ description: |-
+ TargetBranch is the branch from which hydrated manifests will be synced.
+ If HydrateTo is not set, this is also the branch to which hydrated manifests are committed.
type: string
required:
- path
@@ -1945,6 +1953,10 @@
a failed sync. If set to 0, no retries will be performed.
format: int64
type: integer
+ refresh:
+ description: 'Refresh indicates if the latest revision should
+ be used on retry instead of the initial one (default: false)'
+ type: boolean
type: object
syncOptions:
description: Options allow you to specify whole app sync-options
@@ -2913,6 +2925,11 @@
be performed.
format: int64
type: integer
+ refresh:
+ description: 'Refresh indicates if the latest revision
+ should be used on retry instead of the initial one (default:
+ false)'
+ type: boolean
type: object
sync:
description: Sync contains parameters for the operation
@@ -4885,11 +4902,15 @@
path:
description: |-
Path is a directory path within the git repository where hydrated manifests should be committed to and synced
- from. If hydrateTo is set, this is just the path from which hydrated manifests will be synced.
+ from. The Path should never point to the root of the repo. If hydrateTo is set, this is just the path from which
+ hydrated manifests will be synced.
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
- description: TargetBranch is the branch to which hydrated
- manifests should be committed
+ description: |-
+ TargetBranch is the branch from which hydrated manifests will be synced.
+ If HydrateTo is not set, this is also the branch to which hydrated manifests are committed.
type: string
required:
- path
@@ -4964,11 +4985,15 @@
path:
description: |-
Path is a directory path within the git repository where hydrated manifests should be committed to and synced
- from. If hydrateTo is set, this is just the path from which hydrated manifests will be synced.
+ from. The Path should never point to the root of the repo. If hydrateTo is set, this is just the path from which
+ hydrated manifests will be synced.
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
- description: TargetBranch is the branch to which hydrated
- manifests should be committed
+ description: |-
+ TargetBranch is the branch from which hydrated manifests will be synced.
+ If HydrateTo is not set, this is also the branch to which hydrated manifests are committed.
type: string
required:
- path
===== apiextensions.k8s.io/CustomResourceDefinition /applicationsets.argoproj.io ======
--- /tmp/argocd-diff1600003384/applicationsets.argoproj.io-live.yaml
+++ /tmp/argocd-diff1600003384/applicationsets.argoproj.io
@@ -489,6 +489,8 @@
syncSource:
properties:
path:
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
type: string
@@ -780,6 +782,8 @@
limit:
format: int64
type: integer
+ refresh:
+ type: boolean
type: object
syncOptions:
items:
@@ -1171,6 +1175,8 @@
syncSource:
properties:
path:
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
type: string
@@ -1462,6 +1468,8 @@
limit:
format: int64
type: integer
+ refresh:
+ type: boolean
type: object
syncOptions:
items:
@@ -1854,6 +1862,8 @@
syncSource:
properties:
path:
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
type: string
@@ -2145,6 +2155,8 @@
limit:
format: int64
type: integer
+ refresh:
+ type: boolean
type: object
syncOptions:
items:
@@ -2515,6 +2527,8 @@
syncSource:
properties:
path:
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
type: string
@@ -2806,6 +2820,8 @@
limit:
format: int64
type: integer
+ refresh:
+ type: boolean
type: object
syncOptions:
items:
@@ -3201,6 +3217,8 @@
syncSource:
properties:
path:
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
type: string
@@ -3492,6 +3510,8 @@
limit:
format: int64
type: integer
+ refresh:
+ type: boolean
type: object
syncOptions:
items:
@@ -3883,6 +3903,8 @@
syncSource:
properties:
path:
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
type: string
@@ -4174,6 +4196,8 @@
limit:
format: int64
type: integer
+ refresh:
+ type: boolean
type: object
syncOptions:
items:
@@ -4566,6 +4590,8 @@
syncSource:
properties:
path:
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
type: string
@@ -4857,6 +4883,8 @@
limit:
format: int64
type: integer
+ refresh:
+ type: boolean
type: object
syncOptions:
items:
@@ -5227,6 +5255,8 @@
syncSource:
properties:
path:
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
type: string
@@ -5518,6 +5548,8 @@
limit:
format: int64
type: integer
+ refresh:
+ type: boolean
type: object
syncOptions:
items:
@@ -5896,6 +5928,8 @@
syncSource:
properties:
path:
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
type: string
@@ -6187,6 +6221,8 @@
limit:
format: int64
type: integer
+ refresh:
+ type: boolean
type: object
syncOptions:
items:
@@ -6342,6 +6378,8 @@
- project
- repo
type: object
+ continueOnRepoNotFoundError:
+ type: boolean
filters:
items:
properties:
@@ -6349,6 +6387,8 @@
type: string
targetBranchMatch:
type: string
+ titleMatch:
+ type: string
type: object
type: array
gitea:
@@ -6788,6 +6828,8 @@
syncSource:
properties:
path:
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
type: string
@@ -7079,6 +7121,8 @@
limit:
format: int64
type: integer
+ refresh:
+ type: boolean
type: object
syncOptions:
items:
@@ -7675,6 +7719,8 @@
syncSource:
properties:
path:
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
type: string
@@ -7966,6 +8012,8 @@
limit:
format: int64
type: integer
+ refresh:
+ type: boolean
type: object
syncOptions:
items:
@@ -8353,6 +8401,8 @@
syncSource:
properties:
path:
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
type: string
@@ -8644,6 +8694,8 @@
limit:
format: int64
type: integer
+ refresh:
+ type: boolean
type: object
syncOptions:
items:
@@ -9041,6 +9093,8 @@
syncSource:
properties:
path:
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
type: string
@@ -9332,6 +9386,8 @@
limit:
format: int64
type: integer
+ refresh:
+ type: boolean
type: object
syncOptions:
items:
@@ -9723,6 +9779,8 @@
syncSource:
properties:
path:
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
type: string
@@ -10014,6 +10072,8 @@
limit:
format: int64
type: integer
+ refresh:
+ type: boolean
type: object
syncOptions:
items:
@@ -10406,6 +10466,8 @@
syncSource:
properties:
path:
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
type: string
@@ -10697,6 +10759,8 @@
limit:
format: int64
type: integer
+ refresh:
+ type: boolean
type: object
syncOptions:
items:
@@ -11067,6 +11131,8 @@
syncSource:
properties:
path:
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
type: string
@@ -11358,6 +11424,8 @@
limit:
format: int64
type: integer
+ refresh:
+ type: boolean
type: object
syncOptions:
items:
@@ -11736,6 +11804,8 @@
syncSource:
properties:
path:
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
type: string
@@ -12027,6 +12097,8 @@
limit:
format: int64
type: integer
+ refresh:
+ type: boolean
type: object
syncOptions:
items:
@@ -12182,6 +12254,8 @@
- project
- repo
type: object
+ continueOnRepoNotFoundError:
+ type: boolean
filters:
items:
properties:
@@ -12189,6 +12263,8 @@
type: string
targetBranchMatch:
type: string
+ titleMatch:
+ type: string
type: object
type: array
gitea:
@@ -12628,6 +12704,8 @@
syncSource:
properties:
path:
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
type: string
@@ -12919,6 +12997,8 @@
limit:
format: int64
type: integer
+ refresh:
+ type: boolean
type: object
syncOptions:
items:
@@ -13515,6 +13595,8 @@
syncSource:
properties:
path:
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
type: string
@@ -13806,6 +13888,8 @@
limit:
format: int64
type: integer
+ refresh:
+ type: boolean
type: object
syncOptions:
items:
@@ -14197,6 +14281,8 @@
syncSource:
properties:
path:
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
type: string
@@ -14488,6 +14574,8 @@
limit:
format: int64
type: integer
+ refresh:
+ type: boolean
type: object
syncOptions:
items:
@@ -14865,6 +14953,8 @@
syncSource:
properties:
path:
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
type: string
@@ -15156,6 +15246,8 @@
limit:
format: int64
type: integer
+ refresh:
+ type: boolean
type: object
syncOptions:
items:
@@ -15311,6 +15403,8 @@
- project
- repo
type: object
+ continueOnRepoNotFoundError:
+ type: boolean
filters:
items:
properties:
@@ -15318,6 +15412,8 @@
type: string
targetBranchMatch:
type: string
+ titleMatch:
+ type: string
type: object
type: array
gitea:
@@ -15757,6 +15853,8 @@
syncSource:
properties:
path:
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
type: string
@@ -16048,6 +16146,8 @@
limit:
format: int64
type: integer
+ refresh:
+ type: boolean
type: object
syncOptions:
items:
@@ -16644,6 +16744,8 @@
syncSource:
properties:
path:
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
type: string
@@ -16935,6 +17037,8 @@
limit:
format: int64
type: integer
+ refresh:
+ type: boolean
type: object
syncOptions:
items:
@@ -17016,6 +17120,8 @@
type: object
strategy:
properties:
+ deletionOrder:
+ type: string
rollingSync:
properties:
steps:
@@ -17397,6 +17503,8 @@
syncSource:
properties:
path:
+ minLength: 1
+ pattern: ^.{2,}|[^./]$
type: string
targetBranch:
type: string
@@ -17688,6 +17796,8 @@
limit:
format: int64
type: integer
+ refresh:
+ type: boolean
type: object
syncOptions:
items:
@@ -17793,6 +17903,9 @@
type: string
type: object
type: array
+ resourcesCount:
+ format: int64
+ type: integer
type: object
required:
- metadata
===== apps/Deployment argocd/argocd-applicationset-controller ======
--- /tmp/argocd-diff4038717376/argocd-applicationset-controller-live.yaml
+++ /tmp/argocd-diff4038717376/argocd-applicationset-controller
@@ -555,7 +555,13 @@
key: applicationsetcontroller.requeue.after
name: argocd-cmd-params-cm
optional: true
- image: quay.io/argoproj/argocd:v2.14.15@sha256:3be6babe6a3248cf35f2c7816c0fcbbbdba592320d93494016ef7123031339cb
+ - name: ARGOCD_APPLICATIONSET_CONTROLLER_MAX_RESOURCES_STATUS_COUNT
+ valueFrom:
+ configMapKeyRef:
+ key: applicationsetcontroller.status.max.resources.count
+ name: argocd-cmd-params-cm
+ optional: true
+ image: quay.io/argoproj/argocd:v3.1.0@sha256:51abf85651c33cfd0645d72e0877eeeae187bb404d4641ec47caa1921c9750be
imagePullPolicy: Always
name: argocd-applicationset-controller
ports:
@@ -590,6 +596,8 @@
name: tmp
- mountPath: /app/config/reposerver/tls
name: argocd-repo-server-tls
+ - mountPath: /home/argocd/params
+ name: argocd-cmd-params-cm
dnsPolicy: ClusterFirst
nodeSelector:
kubernetes.io/os: linux
@@ -628,6 +636,14 @@
path: ca.crt
optional: true
secretName: argocd-repo-server-tls
+ - configMap:
+ defaultMode: 420
+ items:
+ - key: applicationsetcontroller.profile.enabled
+ path: profiler.enabled
+ name: argocd-cmd-params-cm
+ optional: true
+ name: argocd-cmd-params-cm
status:
availableReplicas: 1
conditions:
===== apps/Deployment argocd/argocd-dex-server ======
--- /tmp/argocd-diff1543148511/argocd-dex-server-live.yaml
+++ /tmp/argocd-diff1543148511/argocd-dex-server
@@ -359,7 +359,7 @@
- -n
- /usr/local/bin/argocd
- /shared/argocd-dex
- image: quay.io/argoproj/argocd:v2.14.15@sha256:3be6babe6a3248cf35f2c7816c0fcbbbdba592320d93494016ef7123031339cb
+ image: quay.io/argoproj/argocd:v3.1.0@sha256:51abf85651c33cfd0645d72e0877eeeae187bb404d4641ec47caa1921c9750be
imagePullPolicy: Always
name: copyutil
resources: {}
===== apps/Deployment argocd/argocd-notifications-controller ======
--- /tmp/argocd-diff1985862733/argocd-notifications-controller-live.yaml
+++ /tmp/argocd-diff1985862733/argocd-notifications-controller
@@ -277,7 +277,7 @@
key: notificationscontroller.repo.server.plaintext
name: argocd-cmd-params-cm
optional: true
- image: quay.io/argoproj/argocd:v2.14.15@sha256:3be6babe6a3248cf35f2c7816c0fcbbbdba592320d93494016ef7123031339cb
+ image: quay.io/argoproj/argocd:v3.1.0@sha256:51abf85651c33cfd0645d72e0877eeeae187bb404d4641ec47caa1921c9750be
imagePullPolicy: Always
livenessProbe:
failureThreshold: 3
===== apps/Deployment argocd/argocd-redis ======
--- /tmp/argocd-diff734075265/argocd-redis-live.yaml
+++ /tmp/argocd-diff734075265/argocd-redis
@@ -261,7 +261,7 @@
- argocd
- admin
- redis-initial-password
- image: quay.io/argoproj/argocd:v2.14.15@sha256:3be6babe6a3248cf35f2c7816c0fcbbbdba592320d93494016ef7123031339cb
+ image: quay.io/argoproj/argocd:v3.1.0@sha256:51abf85651c33cfd0645d72e0877eeeae187bb404d4641ec47caa1921c9750be
imagePullPolicy: IfNotPresent
name: secret-init
resources: {}
===== apps/Deployment argocd/argocd-repo-server ======
--- /tmp/argocd-diff3621750657/argocd-repo-server-live.yaml
+++ /tmp/argocd-diff3621750657/argocd-repo-server
@@ -829,6 +829,24 @@
key: reposerver.disable.helm.manifest.max.extracted.size
name: argocd-cmd-params-cm
optional: true
+ - name: ARGOCD_REPO_SERVER_OCI_MANIFEST_MAX_EXTRACTED_SIZE
+ valueFrom:
+ configMapKeyRef:
+ key: reposerver.oci.manifest.max.extracted.size
+ name: argocd-cmd-params-cm
+ optional: true
+ - name: ARGOCD_REPO_SERVER_DISABLE_OCI_MANIFEST_MAX_EXTRACTED_SIZE
+ valueFrom:
+ configMapKeyRef:
+ key: reposerver.disable.oci.manifest.max.extracted.size
+ name: argocd-cmd-params-cm
+ optional: true
+ - name: ARGOCD_REPO_SERVER_OCI_LAYER_MEDIA_TYPES
+ valueFrom:
+ configMapKeyRef:
+ key: reposerver.oci.layer.media.types
+ name: argocd-cmd-params-cm
+ optional: true
- name: ARGOCD_REVISION_CACHE_LOCK_TIMEOUT
valueFrom:
configMapKeyRef:
@@ -853,6 +871,12 @@
key: reposerver.git.request.timeout
name: argocd-cmd-params-cm
optional: true
+ - name: ARGOCD_REPO_SERVER_ENABLE_BUILTIN_GIT_CONFIG
+ valueFrom:
+ configMapKeyRef:
+ key: reposerver.enable.builtin.git.config
+ name: argocd-cmd-params-cm
+ optional: true
- name: ARGOCD_GRPC_MAX_SIZE_MB
valueFrom:
configMapKeyRef:
@@ -871,7 +895,7 @@
value: /helm-working-dir
- name: HELM_DATA_HOME
value: /helm-working-dir
- image: quay.io/argoproj/argocd:v2.14.15@sha256:3be6babe6a3248cf35f2c7816c0fcbbbdba592320d93494016ef7123031339cb
+ image: quay.io/argoproj/argocd:v3.1.0@sha256:51abf85651c33cfd0645d72e0877eeeae187bb404d4641ec47caa1921c9750be
imagePullPolicy: Always
livenessProbe:
failureThreshold: 3
@@ -944,7 +968,7 @@
env:
- name: GNUPGHOME
value: /gnupg-home/.gnupg
- image: quay.io/argoproj/argocd:v2.14.15@sha256:3be6babe6a3248cf35f2c7816c0fcbbbdba592320d93494016ef7123031339cb
+ image: quay.io/argoproj/argocd:v3.1.0@sha256:51abf85651c33cfd0645d72e0877eeeae187bb404d4641ec47caa1921c9750be
imagePullPolicy: IfNotPresent
name: import-gpg-key
resources: {}
@@ -975,7 +999,7 @@
- -n
- /usr/local/bin/argocd
- /var/run/argocd/argocd-cmp-server
- image: quay.io/argoproj/argocd:v2.14.15@sha256:3be6babe6a3248cf35f2c7816c0fcbbbdba592320d93494016ef7123031339cb
+ image: quay.io/argoproj/argocd:v3.1.0@sha256:51abf85651c33cfd0645d72e0877eeeae187bb404d4641ec47caa1921c9750be
imagePullPolicy: IfNotPresent
name: copyutil
resources: {}
===== apps/Deployment argocd/argocd-server ======
--- /tmp/argocd-diff3854690396/argocd-server-live.yaml
+++ /tmp/argocd-diff3854690396/argocd-server
@@ -904,7 +904,7 @@
key: server.sync.replace.allowed
name: argocd-cmd-params-cm
optional: true
- image: quay.io/argoproj/argocd:v2.14.15@sha256:3be6babe6a3248cf35f2c7816c0fcbbbdba592320d93494016ef7123031339cb
+ image: quay.io/argoproj/argocd:v3.1.0@sha256:51abf85651c33cfd0645d72e0877eeeae187bb404d4641ec47caa1921c9750be
imagePullPolicy: Always
livenessProbe:
failureThreshold: 3
===== apps/StatefulSet argocd/argocd-application-controller ======
--- /tmp/argocd-diff529529227/argocd-application-controller-live.yaml
+++ /tmp/argocd-diff529529227/argocd-application-controller
@@ -611,6 +611,12 @@
key: controller.self.heal.backoff.cooldown.seconds
name: argocd-cmd-params-cm
optional: true
+ - name: ARGOCD_SYNC_WAVE_DELAY
+ valueFrom:
+ configMapKeyRef:
+ key: controller.sync.wave.delay.seconds
+ name: argocd-cmd-params-cm
+ optional: true
- name: ARGOCD_APPLICATION_CONTROLLER_SYNC_TIMEOUT
valueFrom:
configMapKeyRef:
@@ -757,7 +763,7 @@
optional: true
- name: KUBECACHEDIR
value: /tmp/kubecache
- image: quay.io/argoproj/argocd:v2.14.15@sha256:3be6babe6a3248cf35f2c7816c0fcbbbdba592320d93494016ef7123031339cb
+ image: quay.io/argoproj/argocd:v3.1.0@sha256:51abf85651c33cfd0645d72e0877eeeae187bb404d4641ec47caa1921c9750be
imagePullPolicy: Always
name: argocd-application-controller
ports:
===== rbac.authorization.k8s.io/ClusterRole /argocd-applicationset-controller ======
--- /tmp/argocd-diff3011158227/argocd-applicationset-controller-live.yaml
+++ /tmp/argocd-diff3011158227/argocd-applicationset-controller
@@ -58,37 +58,25 @@
- apiGroups:
- argoproj.io
resources:
- - applicationsets/status
- verbs:
- - get
- - patch
- - update
-- apiGroups:
- - argoproj.io
- resources:
- appprojects
verbs:
- get
- list
- watch
- apiGroups:
- - ""
+ - argoproj.io
resources:
- - events
+ - applicationsets/status
verbs:
- - create
- get
- - list
- patch
- - watch
+ - update
- apiGroups:
- ""
resources:
- - configmaps
+ - events
verbs:
- create
- - update
- - delete
- get
- list
- patch
@@ -97,28 +85,24 @@
- ""
resources:
- secrets
+ - configmaps
verbs:
- get
- list
- watch
- apiGroups:
- - apps
- - extensions
+ - coordination.k8s.io
resources:
- - deployments
+ - leases
verbs:
- - get
- - list
- - watch
+ - create
- apiGroups:
- coordination.k8s.io
+ resourceNames:
+ - 58ac56fa.applicationsets.argoproj.io
resources:
- leases
verbs:
- - create
- - delete
- get
- - list
- - patch
- update
- - watch
+ - create
===== rbac.authorization.k8s.io/Role argocd/argocd-applicationset-controller ======
--- /tmp/argocd-diff3601798164/argocd-applicationset-controller-live.yaml
+++ /tmp/argocd-diff3601798164/argocd-applicationset-controller
@@ -100,11 +100,18 @@
- list
- watch
- apiGroups:
- - apps
- - extensions
+ - coordination.k8s.io
resources:
- - deployments
+ - leases
verbs:
+ - create
+- apiGroups:
+ - coordination.k8s.io
+ resourceNames:
+ - 58ac56fa.applicationsets.argoproj.io
+ resources:
+ - leases
+ verbs:
- get
- - list
- - watch
+ - update
+ - create
Detailstime="2026-01-22T20:48:49Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2026-01-22T20:48:51Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
===== /Service external-dns/external-dns ======
--- /tmp/argocd-diff1965221103/external-dns-live.yaml
+++ /tmp/argocd-diff1965221103/external-dns
@@ -2,9 +2,11 @@
kind: Service
metadata:
annotations:
+ argocd.argoproj.io/tracking-id: external-dns:/Service:external-dns/external-dns
kubectl.kubernetes.io/last-applied-configuration: |
{"apiVersion":"v1","kind":"Service","metadata":{"annotations":{},"labels":{"app.kubernetes.io/name":"external-dns"},"name":"external-dns","namespace":"external-dns"},"spec":{"ports":[{"name":"metrics","port":7979,"targetPort":7979}],"selector":{"app.kubernetes.io/name":"external-dns"}}}
labels:
+ app.kubernetes.io/instance: external-dns
app.kubernetes.io/name: external-dns
name: external-dns
namespace: external-dns
===== /ServiceAccount external-dns/external-dns ======
--- /tmp/argocd-diff698515781/external-dns-live.yaml
+++ /tmp/argocd-diff698515781/external-dns
@@ -2,9 +2,11 @@
kind: ServiceAccount
metadata:
annotations:
+ argocd.argoproj.io/tracking-id: external-dns:/ServiceAccount:external-dns/external-dns
kubectl.kubernetes.io/last-applied-configuration: |
{"apiVersion":"v1","kind":"ServiceAccount","metadata":{"annotations":{},"labels":{"app.kubernetes.io/name":"external-dns"},"name":"external-dns","namespace":"external-dns"}}
labels:
+ app.kubernetes.io/instance: external-dns
app.kubernetes.io/name: external-dns
name: external-dns
namespace: external-dns
===== apps/Deployment external-dns/external-dns ======
--- /tmp/argocd-diff710787367/external-dns-live.yaml
+++ /tmp/argocd-diff710787367/external-dns
@@ -2,11 +2,13 @@
kind: Deployment
metadata:
annotations:
+ argocd.argoproj.io/tracking-id: external-dns:apps/Deployment:external-dns/external-dns
deployment.kubernetes.io/revision: "11"
kubectl.kubernetes.io/last-applied-configuration: |
{"apiVersion":"apps/v1","kind":"Deployment","metadata":{"annotations":{},"labels":{"app.kubernetes.io/name":"external-dns"},"name":"external-dns","namespace":"external-dns"},"spec":{"selector":{"matchLabels":{"app.kubernetes.io/name":"external-dns"}},"strategy":{"type":"Recreate"},"template":{"metadata":{"labels":{"app.kubernetes.io/name":"external-dns"}},"spec":{"containers":[{"args":["--source=service","--source=ingress","--registry=txt","--provider=aws","--txt-owner-id=digitalocean-hashbang","--txt-prefix=_owner.","--source=crd","--domain-filter=hashbang.sh","--managed-record-types=A","--managed-record-types=CNAME","--managed-record-types=TXT"],"env":[{"name":"AWS_REGION","value":"us-west-2"},{"name":"AWS_ACCESS_KEY_ID","value":"AKIAR7CEWFK35SZX5S66"},{"name":"AWS_SECRET_ACCESS_KEY","valueFrom":{"secretKeyRef":{"key":"key","name":"external-dns-iam"}}}],"image":"registry.k8s.io/external-dns/external-dns:v0.16.1@sha256:37d3a7a05c4638b8177382b80a627c223bd84a53c1a91be137245bd3cfdf9986","name":"external-dns","ports":[{"containerPort":7979,"name":"metrics"}]}],"securityContext":{"fsGroup":65534},"serviceAccountName":"external-dns"}}}}
generation: 11
labels:
+ app.kubernetes.io/instance: external-dns
app.kubernetes.io/name: external-dns
managedFields:
- apiVersion: apps/v1
@@ -150,11 +152,6 @@
- --provider=aws
- --txt-owner-id=digitalocean-hashbang
- --txt-prefix=_owner.
- - --source=crd
- - --domain-filter=hashbang.sh
- - --managed-record-types=A
- - --managed-record-types=CNAME
- - --managed-record-types=TXT
env:
- name: AWS_REGION
value: us-west-2
===== cilium.io/CiliumNetworkPolicy external-dns/external-dns ======
--- /tmp/argocd-diff1545633551/external-dns-live.yaml
+++ /tmp/argocd-diff1545633551/external-dns
@@ -2,10 +2,12 @@
kind: CiliumNetworkPolicy
metadata:
annotations:
+ argocd.argoproj.io/tracking-id: external-dns:cilium.io/CiliumNetworkPolicy:external-dns/external-dns
kubectl.kubernetes.io/last-applied-configuration: |
{"apiVersion":"cilium.io/v2","kind":"CiliumNetworkPolicy","metadata":{"annotations":{},"labels":{"app.kubernetes.io/name":"external-dns"},"name":"external-dns","namespace":"external-dns"},"spec":{"egress":[{"toEntities":["cluster"]},{"toEntities":["cluster"],"toPorts":[{"ports":[{"port":"53","protocol":"ANY"}],"rules":{"dns":[{"matchPattern":"*.amazonaws.com"}]}}]},{"toEntities":["world"],"toPorts":[{"ports":[{"port":"443","protocol":"TCP"}]}]}],"endpointSelector":{"matchLabels":{"k8s:app":"external-dns"}},"ingress":[{"fromEntities":["cluster"],"toPorts":[{"ports":[{"port":"7979","protocol":"TCP"}],"rules":{"http":[{"method":"GET","path":"/metrics"}]}}]}]}}
generation: 32
labels:
+ app.kubernetes.io/instance: external-dns
app.kubernetes.io/name: external-dns
name: external-dns
namespace: external-dns
===== monitoring.coreos.com/ServiceMonitor external-dns/external-dns-server-metrics ======
--- /tmp/argocd-diff1148776583/external-dns-server-metrics-live.yaml
+++ /tmp/argocd-diff1148776583/external-dns-server-metrics
@@ -3,10 +3,12 @@
metadata:
annotations:
argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+ argocd.argoproj.io/tracking-id: external-dns:monitoring.coreos.com/ServiceMonitor:external-dns/external-dns-server-metrics
kubectl.kubernetes.io/last-applied-configuration: |
{"apiVersion":"monitoring.coreos.com/v1","kind":"ServiceMonitor","metadata":{"annotations":{"argocd.argoproj.io/sync-options":"SkipDryRunOnMissingResource=true"},"labels":{"app.kubernetes.io/name":"external-dns","prometheusInstance":"default"},"name":"external-dns-server-metrics","namespace":"external-dns"},"spec":{"endpoints":[{"port":"metrics"}],"selector":{"matchLabels":{"app.kubernetes.io/name":"external-dns"}}}}
generation: 1
labels:
+ app.kubernetes.io/instance: external-dns
app.kubernetes.io/name: external-dns
prometheusInstance: default
managedFields:
===== rbac.authorization.k8s.io/ClusterRole /external-dns ======
--- /tmp/argocd-diff1903918936/external-dns-live.yaml
+++ /tmp/argocd-diff1903918936/external-dns
@@ -2,9 +2,11 @@
kind: ClusterRole
metadata:
annotations:
+ argocd.argoproj.io/tracking-id: external-dns:rbac.authorization.k8s.io/ClusterRole:external-dns/external-dns
kubectl.kubernetes.io/last-applied-configuration: |
{"apiVersion":"rbac.authorization.k8s.io/v1","kind":"ClusterRole","metadata":{"annotations":{},"labels":{"app.kubernetes.io/name":"external-dns"},"name":"external-dns"},"rules":[{"apiGroups":[""],"resources":["endpoints","pods","services"],"verbs":["get","watch","list"]},{"apiGroups":["extensions"],"resources":["ingresses"],"verbs":["get","watch","list"]},{"apiGroups":["networking.k8s.io"],"resources":["ingresses"],"verbs":["get","watch","list"]},{"apiGroups":[""],"resources":["nodes"],"verbs":["watch","list"]},{"apiGroups":["externaldns.k8s.io"],"resources":["dnsendpoints"],"verbs":["get","watch","list"]},{"apiGroups":["externaldns.k8s.io"],"resources":["dnsendpoints/status"],"verbs":["*"]}]}
labels:
+ app.kubernetes.io/instance: external-dns
app.kubernetes.io/name: external-dns
name: external-dns
resourceVersion: "710536737"
@@ -43,17 +45,3 @@
verbs:
- watch
- list
-- apiGroups:
- - externaldns.k8s.io
- resources:
- - dnsendpoints
- verbs:
- - get
- - watch
- - list
-- apiGroups:
- - externaldns.k8s.io
- resources:
- - dnsendpoints/status
- verbs:
- - '*'
===== rbac.authorization.k8s.io/ClusterRoleBinding /external-dns-viewer ======
--- /tmp/argocd-diff3833853475/external-dns-viewer-live.yaml
+++ /tmp/argocd-diff3833853475/external-dns-viewer
@@ -2,9 +2,11 @@
kind: ClusterRoleBinding
metadata:
annotations:
+ argocd.argoproj.io/tracking-id: external-dns:rbac.authorization.k8s.io/ClusterRoleBinding:external-dns/external-dns-viewer
kubectl.kubernetes.io/last-applied-configuration: |
{"apiVersion":"rbac.authorization.k8s.io/v1","kind":"ClusterRoleBinding","metadata":{"annotations":{},"labels":{"app.kubernetes.io/name":"external-dns"},"name":"external-dns-viewer"},"roleRef":{"apiGroup":"rbac.authorization.k8s.io","kind":"ClusterRole","name":"external-dns"},"subjects":[{"kind":"ServiceAccount","name":"external-dns","namespace":"external-dns"}]}
labels:
+ app.kubernetes.io/instance: external-dns
app.kubernetes.io/name: external-dns
name: external-dns-viewer
resourceVersion: "710536742"
Detailstime="2026-01-22T20:48:53Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2026-01-22T20:48:55Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
===== apps/Deployment ingress-nginx/ingress-nginx-controller ======
--- /tmp/argocd-diff3821512618/ingress-nginx-controller-live.yaml
+++ /tmp/argocd-diff3821512618/ingress-nginx-controller
@@ -280,7 +280,7 @@
fieldPath: metadata.namespace
- name: LD_PRELOAD
value: /usr/local/lib/libmimalloc.so
- image: registry.k8s.io/ingress-nginx/controller:v1.12.3@sha256:ac444cd9515af325ba577b596fe4f27a34be1aa330538e8b317ad9d6c8fb94ee
+ image: registry.k8s.io/ingress-nginx/controller:v1.13.1@sha256:37e489b22ac77576576e52e474941cd7754238438847c1ee795ad6d59c02b12a
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
Detailstime="2026-01-22T20:48:57Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2026-01-22T20:48:59Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
===== apps/Deployment ircd/irc-deployment ======
--- /tmp/argocd-diff3985636074/irc-deployment-live.yaml
+++ /tmp/argocd-diff3985636074/irc-deployment
@@ -30,7 +30,7 @@
app: irc
spec:
containers:
- - image: ghcr.io/ergochat/ergo:v2.14.0@sha256:ef4040d18044a53c8c995defb3159018cf2e83030e5db068c3976d9343c826a5
+ - image: ghcr.io/ergochat/ergo:v2.15.0@sha256:135cd42c6300d957e0045ee53fbe886e43e1c04bb621391ed7b8940c174d68f3
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 3
@@ -78,7 +78,7 @@
echo "Exiting.";
command:
- /bin/sh
- image: ghcr.io/ergochat/ergo:v2.14.0@sha256:ef4040d18044a53c8c995defb3159018cf2e83030e5db068c3976d9343c826a5
+ image: ghcr.io/ergochat/ergo:v2.15.0@sha256:135cd42c6300d957e0045ee53fbe886e43e1c04bb621391ed7b8940c174d68f3
imagePullPolicy: IfNotPresent
name: config-reloader
resources: {}
Detailstime="2026-01-22T20:49:21Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2026-01-22T20:49:24Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
===== apps/Deployment userdb-api/userdb-api-deployment ======
--- /tmp/argocd-diff1855046721/userdb-api-deployment-live.yaml
+++ /tmp/argocd-diff1855046721/userdb-api-deployment
@@ -45,7 +45,7 @@
secretKeyRef:
key: db-uri
name: postgrest-secrets
- image: postgrest/postgrest:v12.2.12@sha256:5f4ce744539bbba786b4e24dbbd95bdb2a956dcf568c5374995a0ff4a68f5bd2
+ image: postgrest/postgrest:v13.0.4@sha256:a312f4b2e48530a01fc26f5310d547d6c26d087858360e164522e415723a7732
imagePullPolicy: IfNotPresent
name: postgrest
ports:
Detailstime="2026-01-22T20:49:29Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2026-01-22T20:49:33Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
===== apps/Deployment wkd/wkd ======
--- /tmp/argocd-diff3160517570/wkd-live.yaml
+++ /tmp/argocd-diff3160517570/wkd
@@ -233,7 +233,7 @@
value: enroll
- name: FOLDER
value: /tmp/keys
- image: kiwigrid/k8s-sidecar:1.30.8@sha256:494ac9c00e699cda00fc10008a88b9ee24055f284d200390857cc49d1f456730
+ image: kiwigrid/k8s-sidecar:1.30.9@sha256:8c06e1ba643a4625de14b2db65c356f5db6b1482a25fce4754380a2936207338
imagePullPolicy: IfNotPresent
name: watcher
resources: {} |
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/argoproj-argo-cd-3.x
branch
from
2f55902 to
1e55417
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/argoproj-argo-cd-3.x
branch
from
1e55417 to
42e151d
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/argoproj-argo-cd-3.x
branch
2 times, most recently
from
a4d8169 to
b7709a8
Compare
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/argoproj-argo-cd-3.x
branch
from
b7709a8 to
21dd4d3
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/argoproj-argo-cd-3.x
branch
from
21dd4d3 to
49b8c38
Compare
renovate
bot
force-pushed
the
renovate/argoproj-argo-cd-3.x
branch
from
49b8c38 to
e88e95a
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/argoproj-argo-cd-3.x
branch
from
e88e95a to
9311885
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/argoproj-argo-cd-3.x
branch
from
9311885 to
e0f280a
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/argoproj-argo-cd-3.x
branch
from
e0f280a to
a087faf
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/argoproj-argo-cd-3.x
branch
from
a087faf to
2145ef5
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/argoproj-argo-cd-3.x
branch
from
2145ef5 to
1dd3173
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/argoproj-argo-cd-3.x
branch
from
1dd3173 to
06aec27
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/argoproj-argo-cd-3.x
branch
from
06aec27 to
55cc299
Compare
renovate
bot
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v3.1.0→v3.3.0Release Notes
argoproj/argo-cd (argoproj/argo-cd)
v3.3.0Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Features
ce2fb70: Revert "feat: Ability to create custom labels for namespaces created … (#455) (@pasha-codefresh)e50dd00: feat(actions): Add cloudnativepg reload, restart, promote, suspend and resume actions (#24192) (@rouke-broersma)3ee16c0: feat(actions): PullRequest merge action (#24823) (@crenshaw-dev)0c77f3c: feat(actions): add icons to apps actions (#25343) (#25344) (@rickbrouwer)a64933f: feat(actions): add pause action for KEDA ScaledObject and ScaledJob (#25301) (#25302) (@rickbrouwer)97d50a1: feat(appset): add pprof endpoints (#25044) (@rumstead)482440b: feat(appset): use clone instead of replace on sprig templates to reduce function copies (#25576) (@rumstead)64421a7: feat(ci): add run failure link to cherry pick comment (#24838) (@crenshaw-dev)4678361: feat(cli): Add additional examples toproj listcommand (#25169) (@onasser1)ac12ab9: feat(cli): Updated CLI to show Plugins during tab completion (#24758) (@christianh814)53c3542: feat(cli): add powershell completion (#25595) (@onasser1)f866959: feat(cli): added support for filtering by group in app get-resource CLI command (#25495) (@sabre1041)ac1a2f8: feat(health): add grafana-org-operator Health (#25662) (@sathieu)0c6fa28: feat(hydrator): add inline parameter support to Source Hydrator (#24228) (#24277) (@sangyeong01)dea7ead: feat(hydrator): avoid unnecessary repo-server calls (#25150) (@pbhatnagar-oss)6cd30d3: feat(hydrator): don't push commits if manifests don't change (#25056) (@pbhatnagar-oss)fe02a8f: feat(redis): Secrets credentials via volume mount (#24597) (@Mangaal)bbc3e99: feat(repo): add support for github app authentication without installationid (#25339) (#25374) (@pbhatnagar-oss)1ae13b2: feat(ui): conditionally render app view extensions (#25132) (@jwinters01)afaf16b: feat(ui): hide sync option 'replace' if sync with replace is disabled in the server (issue no. #22625) (#22647) (@jan-mrm)528482c: feat(ui): implement abstraction layer for appset ui support (#24916) (@pjiang-dev)b74c7aa: feat(ui): improve sync warnings (#25524) (@jwinters01)90b3e85: feat(ui): support custom icons (#20864) (@crenshaw-dev)a56a803: feat: Ability to create custom labels for namespaces created with syncOptions CreateNamespace (#443) (@pasha-codefresh)9ab0b2e: feat: Add ability to hide certain annotations on secret resources (#577) (@svghadi)9ee5cca: feat: Add health check for Ceph CRD (#24111) (@afarbos)51c9add: feat: Add health checks for ServiceBinding and ServiceInstance (#25007) (@dzahariev)8c890d4: feat: Add impersonation support for App finalizer deletion (#24524) (@ccjette-logmein)ed537d5: feat: Add path flag to ArgoCD CLI app list (#24834) (@onasser1)1c4ef33: feat: Add server-side apply manager config (#418) (@leoluz)7493226: feat: Add support for HPA v2 (autoscaling/v2) (#411) (@EppO)1a6973a: feat: Add the ability to not autogenerate external URLs from ingress object (#13705) (#25383) (@rkevin-arch)ed7c77a: feat: Apply out of sync option only (#533) (@pasha-codefresh)d65e9d9: feat: Enable SkipDryRunOnMissingResource sync option on Application level (#712) (@pasha-codefresh)aba3819: feat: Implement Server-Side Diffs (#522) (@leoluz)6b2984e: feat: More optimal IterateHierarchyV2 and iterateChildrenV2 [#600] (#601) (@andrii-korotkov-verkada)4eb3ca3: feat: Namespace/CRD creation should happen before PreSync phase (#159) ( <>)3bf3d8a: feat: PreDelete hooks support (Issue #13975) (#22288) (@pedro-cs-ribeiro)5fd9f44: feat: Prune resources in reverse of sync wave order (#538) (@svghadi)e360551: feat: Support for retries when building up cluster cache (#374) (@jannfis)e56739c: feat: add CreateResource to kubectl (#12174 and #4116) (#516) (@reggie-k)0b4199b: feat: add FindResources method that allows to find any resource in cache (#204) ( <>)f9456de: feat: add GvkParser in cluster cache (#404) (@leoluz)1b08fd1: feat: add ability to use shallow clone for repositories (#24931) (@alexmt)d8b1a12: feat: add basic support for server-side apply (#363) (@sathieu)bfac3f5: feat: add creation timestamp (#87) (@taisho6339)9664cf8: feat: add profile feature for agent, and fix logr's panic (#444) (@alswl)f6f1a42: feat: add status.resourcesCount field to appset and change limit default (#24698) (@alexmt)c7bab2e: feat: add support split yaml that return actual yamls (#346) (@pasha-codefresh)ed70eac: feat: add sync delete option (#507) (@gdsoumya)aae8ded: feat: added cascade option to DeleteResource - argo-cd #5368 (#220) (@ishitasequeira)0000f05: feat: adds various OCI metrics (#25493) (@ppapapetrou76)e77acec: feat: allow limiting clusterResourceWhitelist by resource name (#12208) (#24674) (@crenshaw-dev)09e5225: feat: application resource deletion protection (#630) (@alexmt)69dfa70: feat: auto migrate kubectl-client-side-apply fields for SSA (#727) (@pjiang-dev)187312f: feat: auto respect rbac for discovery/sync (#532) (@gdsoumya)bc9ce57: feat: better error message for sync operations (#336) (@pasha-codefresh)9163758: feat: cluster cache should expose synchronization error (#32) ( <>)ae94ad9: feat: configurable watch resync timeout. ability to disable cluster resync (#353) (@jessesuen)3c54508: feat: create namespace (#94) (@mayzhang2000)ddce93c: feat: cross namespace hierarchy traversal from cluster-scoped parents to namespaced children (fixes #24379) (#24847) (@jcogilvie)92a3433: feat: detect PVC StatefulSet ownership (#112) ( <>)4ea93db: feat: enable forks to release and publish to custom quay registries (#25365) (@reggie-k)ddc92c9: feat: expose APIGroups in GetClusterInfo (#283) ( <>)762cb1b: feat: expose all kubernetes resources in cluster info (#337) ( <>)8aefb18: feat: expose cluster sync retry timeout (#373) (@yeya24)e58bdf2: feat: implement KEDA scaledJob health-checks (#25106) (@rickbrouwer)cd2e16d: feat: implement gitops-agent (#37) ( <>)605958d: feat: improve memory consumption limiting (#100) (@ash2k)344b1bc: feat: improve sync operation messages (#84) ( <>)cfdefa4: feat: introduce SyncWaveHook callbacks invoked after applying each sync wave (#177) (@jessesuen)5c6aa59: feat: oidc background token refresh (#23727) (@devopsjedi)82f0935: feat: prune last (#203) (@mayzhang2000)c0c2dd1: feat: retry with client side dry run if server one was failed (#548) (@pasha-codefresh)c617562: feat: return images from resources when sync occurs (#642) (@Aaron-9900)7669da6: feat: split refresh button with dropdown for hard refresh (#25445) (@choejwoo)89ddd0d: feat: support 'Replace=true' sync option (#246) ( <>)11d47a6: feat: support configuring cluster cache re-sync timeout (#107) ( <>)723667d: feat: support exiting early from IterateHierarchy method (#388) (@alexmt)e8cfb83: feat: support limiting number of concurrent k8s list queries (#55) ( <>)a4c77d5: feat: support managing cluster resources in a namespaced mode (#297) ( <>)1ce2acc: feat: support replace strategy for CRD (#252) ( <>)89cb483: feat: support resource prune propagation policy (#235) ( <>)ff6e9f8: feat: support resource pruning in gitops-agent (#45) ( <>)fbecbb8: feat: sync-options annotation with Force=true (#414) (#560) (@kkk777-7)026d10e: feat: syncing to a different revision requires override privilege (#22858) (@schraax)552ad1c: feat: update unpause fast/gradual actions for Numaplane rollouts (#24545) (@dpadhiar)90979fe: feat: use Kubernetes v1.18.6 libraries (#102) (@ash2k)1301eaa: feat: use different env variable to control server side K8s API call timeout (#25271) (@ppapapetrou76)Bug fixes
f3ae26b: fix(actions): enable pause action so deployment can be paused (#25394) (#25395) (@rickbrouwer)15568cb: fix(appset): do not trigger reconciliation on appsets not part of allowed namespaces when updating a cluster secret (cherry-pick #25622 for 3.3) (#25909) (@argo-cd-cherry-pick-bot[bot])e582975: fix(appset): ensure finalizer is added when deletionOrder is set as reverse (#25125) (@ranakan19)40e9a06: fix(appset): handle pre/post delete hook finalizers conflicts (#25539) (@agaudreault)c377101: fix(appset): progressive sync loop when application has sync errors (#24507) (@agaudreault)d78929e: fix(cluster): reduce lock contention on cluster initialization (#660) (@crenshaw-dev)adb68bc: fix(clusterCache): don't miss finding live obj if obj is cluster-scoped and namespacedResources is in transition (#597) (@ncdc)e181fbb: fix(cmp): fix plugins not having access to argocd cli for git ASKPASS (#24665) (@zachaller)ef5b778: fix(health): incorrect reason in PullRequest script (#24826) (@crenshaw-dev)2849f53: fix(health): typo in PromotionStrategy health.lua (@crenshaw-dev)7c0f032: fix(health): update crossplane healthchecks (#25386) (@jonasz-lasut)28ec26a: fix(health): use promotion resource Ready condition regardless of reason (#24971) (@crenshaw-dev)dab4cc0: fix(hooks): always remove finalizers on create if hook exists (#770) (@agaudreault)b52a075: fix(hydrator): .gitattributes include deeply nested files (#25870) (cherry-pick #26011 for 3.3) (#26013) (@argo-cd-cherry-pick-bot[bot])a2659e9: fix(hydrator): appset should preserve annotation when hydration is requested (#25644) (@agaudreault)48a9dcc: fix(hydrator): empty links for failed operation (#25025) (cherry-pick #26014 for 3.3) (#26018) (@argo-cd-cherry-pick-bot[bot])fe0466d: fix(hydrator): git fetch needs creds (#25727) (cherry-pick #25738 for 3.3) (#25742) (@argo-cd-cherry-pick-bot[bot])393cb97: fix(hydrator): hydrated sha missing on no-ops (#25694) (cherry-pick #25695 for 3.3) (#25697) (@argo-cd-cherry-pick-bot[bot])0fa47b1: fix(hydrator): pass destination.namespace to manifest rendering (#25478) (cherry-pick #25699 for 3.3) (#26019) (@argo-cd-cherry-pick-bot[bot])708c636: fix(hydrator): race when pushing notes (cherry-pick #25700 for 3.3) (#25709) (@argo-cd-cherry-pick-bot[bot])05b4169: fix(metrics): more consistent oci metrics (cherry-pick #25549 for 3.3) (#25728) (@argo-cd-cherry-pick-bot[bot])ed983d8: fix(oci): loosen up layer restrictions (#24640) (@blakepettersson)5efb184: fix(oidc): check userinfo endpoint in AuthMiddleware (#23586) (@the-technat)7921242: fix(server): Dry run always in client mode just for yaml manifest validation even with server side apply (#564) (@anandf)7430650: fix(server): ensure resource health status is inferred on application retrieval (#24832) (#24851) (@vr009)20604f1: fix(server): update resourceVersion on Terminate retry (cherry-pick #25650 for 3.3) (#25717) (@argo-cd-cherry-pick-bot[bot])4a5648e: fix(server): use server side dry run in case if it is server side apply (#546) (@pasha-codefresh)b3a2ec1: fix(sync): ApplyOutOfSyncOnly=true sync option is not honoured for cluster scoped resources (#765) (@anandf)8007df5: fix(sync): create namespace before dry-run (#731) (@agaudreault)c2f611f: fix(ui): Improve Delete Dialog Behaviour when deleting child apps in the app-of-app pattern (#24802) (@aali309)27a503a: fix(ui): add null-safe handling for assignedWindows in status panel (#25128) (@choejwoo)65cbbca: fix(ui): convert EditablePanel, EditbleSection and Query to function component (#22776) (@linghaoSu)7e1db4a: fix(ui): convert PodView components to functional components (#23781) (@chansuke)de901da: fix(ui): convert ProjectDetails components to functional components (#23797) (@chansuke)59c9c60: fix(ui): convert TagsInput component to functional component (#23795) (@jiwlee97)b4e022c: fix(ui): convert class component to functional component in project-sync-windows-edit (#23837) (@jiwlee97)6d40847: fix(ui): fix minor UI issue in app operation state (#24845) (@choejwoo)ed1fb04: fix(ui): inaccurate timestamp in tooltip for root node (#25014) (@choejwoo)e7b51da: fix(ui): migrate certs-list.tsx from class to functional (#23646) (#23820) (@bianbbc87)68d10fe: fix(ui): migrate gpgkeys-list.tsx from class to functional (#23646) (#23821) (@bianbbc87)44324c0: fix(ui): migrate repos-list.tsx from class to functional (#23646) (#23818) (@bianbbc87)ad96cb8: fix(ui): overlapping UI elements and add resource units to tooltips (#24717) (@choejwoo)0b40e3b: fix(ui): refactor tooltip, align action btns in app tile view (#25098) (@choejwoo)8dcaa2f: fix(ui): show delete/details action dropdown for orphaned resource (#24766) (@choejwoo)24fbf28: fix: shell compatibility issues in Procfile (#24792) (@adityaraj178)0679215: fix: #24781 update crossplane healthchecks to V2 version (#24782) (@jonasz-lasut)2c97a96: fix: 'ResourceOperations.CreateResource' should use 'kubectl' package to properly execute create operation (#298) ( <>)847cfc9: fix: Ability to disable Server Side Apply on individual resource level (#634) (@pasha-codefresh)2565df3: fix: Add ScaleDownLimit as health state for HPA (#343) (@harikrongali)23f41cb: fix: Add ScalingDisabled healthy state to HPA (#323) (@maruina)5d680d6: fix: Add additional healthy states for HPA (#234) (@mikebryant)61c0cc7: fix: Add missing IngressClass in kind order when syncing tasks (#380) (@terrytangyuan)c0b63af: fix: Address issue during diff when secret data is nil (#345) (@leoluz)ed6fe76: fix: Allow the ISVC to be healthy when the Stopped Condition is False (#25312) (@hdefazio)da66819: fix: Change wrong log level in cluster.go openAPISchema, gvkParser (#430) (@dllegru)6657adf: fix: Check for err == nil before Fatal (#61) (@darshanime)3a3f6a3: fix: Child apps should not affect parent app's health by default (#153) (@keithchong)d59276a: fix: Clear ApplicationSet applicationStatus when ProgressiveSync is disabled (#24587) (@aali309)760fcb6: fix: Current time is not set in startedAt in NewSyncContext (#180) (@yutachaos)814d79d: fix: Data race between gitops-engine's pkg/cache/cluster.go and itself, on Argo CD startup (#4627) (#168) (@jgwest)872c470: fix: Detect unknown fields in invalid specs as OutOfSync (#154) (@jgwest)380f7be: fix: Dry run stuck on pre sync hook (#236) (@mayzhang2000)2bc3fef: fix: Fix argument order in resource filter (#436) (@jannfis)762f9b7: fix: Fix checking dryRun when using Server Side Apply (#699) (@pjiang-dev)dbef22c: fix: Fixed inconsistent alignment of titles and headings in status panel (#23160) (@sivasath16)30abebd: fix: GCP config connector healthchecks do not make use of existing observedGeneration #24458 (#24459) (@Hapshanko)53cbe5f: fix: HPA health check is making incorrect assumption on annotations (#190) (@mayzhang2000)2daaf1e: fix: Health status for HTTPRoute with multiple generations (#24958) (#24959) (@lindeskar)54bbebf: fix: Hook Deletion Policies HookSucceeded should be run after whole H… (#144) (@mayzhang2000)93cf3c5: fix: Lock to write MockKubectlCmd.LastValidate to fix the race condition (#52) (@suzuki-shunsuke)1f14791: fix: Make CephCluster CRD health script deterministic (#25391) (#25392) (@rkevin-arch)dcb86f7: fix: Namespace auto-creation (#105) (@mayzhang2000)3ef5ab1: fix: New kube applier for server side diff dry run with refactoring (#662) (@andrii-korotkov-verkada)ed31317: fix: Only consider resources which supports appropriate verb for any given operation (#423) (@jannfis)0d0cec6: fix: Only showapiVersion/kindwhentargetStateis defined (#25068) (@jsoref)32c32a6: fix: Only show please update resource specification message when spec… (cherry-pick #25066 for 3.3) (#25894) (@argo-cd-cherry-pick-bot[bot])b7c7d02: fix: Opentelemetry Collector in sidecar mode doesn't count instances (#25407) (@JorTurFer)fbcaf35: fix: Progress Sync Unknown in UI (#24202) (@aali309)69d5d94: fix: Revert test tools image redis to non-alpine based image (#25381) (#25382) (@rkevin-arch)8849c3f: fix: Server side diff now works correctly with fields removal (#640) (@andrii-korotkov-verkada)89c110b: fix: Server-Side diff removed fields missing in diff (#722) (@pjiang-dev)4fd1847: fix: Server-side diff shows incorrect diffs for list related changes (#688) (@pjiang-dev)73bcea9: fix: Set QPS and burst rate for resource ops client (#395) (@jannfis)8d99997: fix: Set TLSServerName in NewKubeConfig ([#156](https://redirect.github.com/argoproj/argo-cd/issu