v1.4.0-rc1

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v1.4.0-rc1/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v1.4.0-rc1/manifests/ha/install.yaml

The v1.4.0 is a stability release that brings multiple bug fixes, security, performance enhancements, and multiple usability improvements.

New Features

Security

A number of security enhancements and features have been implemented (thanks to @jannfis for driving it! ):

• Repository Credential Templates Management UI/CLI. Now you can use Argo CD CLI or UI to configure
  credentials template for multiple repositories!
• X-Frame-Options header on serving static assets. The X-Frame-Options prevents third party sites to trick users into interacting with the application.
• Tighten AppProject RBAC enforcement. We've improved the enforcement of access rules specified in the
  application project configuration.

Namespace Isolation

With the namespace isolation feature, you are no longer have to give full read-only cluster access to the Argo CD. Instead, you can give access only to selected namespaces with-in
the cluster:

argocd cluster add <mycluster> --namespace <mynamespace1> --namespace <mynamespace2>

This feature is useful if you don't have full cluster access but still want to use Argo CD to manage some cluster namespaces. The feature also improves performance if Argo CD is
used to manage a few namespaces of a large cluster.

Reconciliation Performance

The Argo CD no longer fork/exec kubectl to apply resource changes in the target cluster or convert resource manifest to the required manifest version. This reduces
CPU and Memory usage of large Argo CD instances.

Resources Health based Hook Status

The existing Argo CD resource hooks feature allows running custom logic during the syncing process. You can mark
any Kubernetes resource as a hook and Argo CD assess hook status if resource is a Pod, Job or Argo Workflow. In the v1.4.0 release Argo CD is going to leverage resource
health assessment to get sync hook status. This allows using any custom CRD as a sync hook and leverage custom health
check logic.

Manifest Generation

• Track Helm Charts By Semantic Version. You've been able to track charts hosted in Git repositories using branches to tags. This is now possible for Helm charts. You no longer
  need to choose the exact version, such as v1.4.0 ,instead you can use a semantic version constraint such as v1.4.* and the latest version that matches will be installed.
• Build Environment Variables. Feature allows config management tool to get access to app details during manifest generation via
  environment variables.
• Git submodules. Argo CD is going to automatically fetch sub-modules if your repository has .gitmodules directory.

UI and CLI

• Improved Resource Tree View. The Application details page got even prettier. The resource view was tuned to fit more resources into the screen, include more information about
  each resource and don't lose usability at the same time.
• New Account Management CLI Command. The CLI allows to check which actions are allowed for your account: argocd account can-i sync applications '*'

Maintenance Tools

The team put more effort into building tools that help to maintain Argo CD itself:

• Bulk Project Editing. The argocd-util allows to add and remove permissions defined in multiple project roles using one command.
• More Prometheus Metrics. A set of additional metrics that contains useful information managed clusters is exposed by application controller.

More documentation and tools are coming in patch releases.

Breaking Changes

The Argo CD deletes all in-flight hooks if you terminate running sync operation. The hook state assessment change implemented in this release the Argo CD enables detection of
an in-flight state for all Kubernetes resources including Deployment, PVC, StatefulSet, ReplicaSet etc. So if you terminate the sync operation that has, for example,
StatefulSet hook that is Progressing it will be deleted. The long-running jobs are not supposed to be used as a sync hook and you should consider using
Sync Waves instead.

Enhancements

• feat: Add custom healthchecks for cert-manager v0.11.0 (#2689)
• feat: add git submodule support (#2495)
• feat: Add repository credential management API and CLI (addresses #2136) (#2207)
• feat: add support for --additional-headers cli flag (#2467)
• feat: Add support for ssh-with-port repo url (#2866) (#2948)
• feat: Add Time to ApplicationCondition. (#2417)
• feat: Adds argocd auth can-i command. Close #2255
• feat: Adds revision history limit. Closes #2790 (#2818)
• feat: Adds support for ARGO_CD_[TARGET_REVISION|REVISION] and pass to Custom Tool/Helm/Jsonnet
• feat: Adds support for Helm charts to be a semver range. Closes #2552 (#2606)
• feat: Adds tracing to key external invocations. (#2811)
• feat: argocd-util should allow editing project policies in bulk (#2615)
• feat: Displays controllerrevsion's revision in the UI. Closes #2306 (#2702)
• feat: Issue #2559 - Add gauge Prometheus metric which represents the number of pending manifest requests. (#2658)
• feat: Make ConvertToVersion maybe 1090% faster on average (#2820)
• feat: namespace isolation (#2839)
• feat: removes redundant mutex usage in controller cache and adds cluster cache metrics (#2898)
• feat: Set X-Frame-Options on serving static assets (#2706) (#2711)
• feat: Simplify using Argo CD without users/SSO/UI (#2688)
• feat: Template Out Data Source in Grafana Dashboard (#2859)
• feat: Updates UI icons. Closes #2625 and #2757 (#2653)
• feat: use editor arguments in InteractiveEditor (#2833)
• feat: Use kubectl apply library instead of forking binary (#2861)
• feat: use resource health for hook status evaluation (#2938)

Bug Fixes

• fix: Adds support for /api/v1/account* via HTTP. Fixes #2664 (#2701)
• fix: Allow '@'-character in SSH usernames when connecting a repository (#2612)
• fix: Allow dot in project policy. Closes #2724 (#2755)
• fix: Allow you to sync local Helm apps. Fixes #2741 (#2747)
• fix: Allows Helm parameters that contains arrays or maps. (#2525)
• fix: application-controller doesn't deal with rm/add same cluster gracefully (x509 unknown) (#2389)
• fix: diff local ignore kustomize build options (#2942)
• fix: Ensures that Helm charts are correctly resolved before sync. Fixes #2758 (#2760)
• fix: Fix 'Open application' link when using basehref (#2729)
• fix: fix a bug with cluster add when token secret is not first in list. (#2744)
• fix: fix bug where manifests are not cached. Fixes #2770 (#2771)
• fix: Fixes bug whereby retry does not work for CLI. Fixes #2767 (#2768)
• fix: git contention leads applications into Unknown state (#2877)
• fix: Issue #1944 - Gracefully handle missing cached app state (#2464)
• fix: Issue #2668 - Delete a specified context (#2669)
• fix: Issue #2683 - Make sure app update don't fail due to concurrent modification (#2852)
• fix: Issue #2721 Optimize helm repo querying (#2816)
• fix: Issue #2853 - Improve application env variables/labels editing (#2856)
• fix: Issue 2848 - Application Deployment history panel shows incorrect info for recent releases (#2849)
• fix: Make BeforeHookCreation the default. Fixes #2754 (#2759)
• fix: No error on argocd app create in CLI if --revision is omitted #2665
• fix: Only delete resources during app delete cascade if permitted to (fixes #2693) (#2695)
• fix: prevent user from seeing/deleting resources not permitted in project (#2908) (#2910)
• fix: self-heal should retry syncing an application after specified delay
• fix: stop logging dex config secrets #(2904) (#2937)
• fix: stop using jsondiffpatch on clientside to render resource difference (#2869)
• fix: Target Revision truncated #2736
• fix: UI should re-trigger SSO login if SSO JWT token expires (#2891)
• fix: update argocd-util import was not working properly (#2939)

Contributors

• Aalok Ahluwalia
• Aananth K
• Abhishek Jaisingh
• Adam Johnson
• Alan Tang
• Alex Collins
• Alexander Matyushentsev
• Andrew Waters
• Byungjin Park
• Christine Banek
• Daniel Helfand
• David Hong
• David J. M. Karlsen
• David Maciel
• Devan Goodwin
• Devin Stein
• dthomson25
• Gene Liverman
• Gregor Krmelj
• Guido Maria Serra
• Ilir Bekteshi
• Imran Ismail
• INOUE BANJI
• Isaac Gaskin
• jannfis
• Jeff Hastings
• Jesse Suen
• John Girvan
• Konstantin
• Lev Aminov
• Manatsawin Hanmongkolchai
• Marco Schmid
• Masayuki Ishii
• Michael Bridgen
• Naoki Oketani
• niqdev
• nitinpatil1992
• Olivier Boukili
• Olivier Lemasle
• Omer Kahani
• Paul Brit
• Qingbo Zhou
• Saradhi Sreegiriraju
• Scott Cabrinha
• shlo
• Simon Behar
• stgarf
• Yujun Zhang
• Zoltán Reegn

v1.3.6

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v1.3.6/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v1.3.6/manifests/ha/install.yaml

Bug Fixes

• Add support for hidden directories with directory enforcer (#2821)

Contributors

• Simon Behar

See also milestone v1.3

v1.3.5

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v1.3.5/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v1.3.5/manifests/ha/install.yaml

Pull Requests

• #2820 Make ConvertToVersion maybe 1090% faster on average

Contributors

• Alex Collins

See also milestone v1.3

v1.3.4

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v1.3.4/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v1.3.4/manifests/ha/install.yaml

Other

• Update manifests to v1.3.4

Pull Requests

• #2819 Fixes logging of tracing option in CLI

Contributors

• Alex Collins

See also milestone v1.3

v1.3.3

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v1.3.3/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v1.3.3/manifests/ha/install.yaml

Bug Fixes

• #2721 High CPU utilisation (5 cores) and spammy logs

Other

• Update manifests to v1.3.3

Pull Requests

• #2615 argocd-util should allow editing project policies in bulk
• #2809 Issue #2721 - cache parsed repositories, repo credentials to avoid unnecessary yaml parsing
• #2811 Adds tracing to key external invocations.
• #2816 Issue #2721 Optimize helm repo querying

Contributors

• Alex Collins
• Alexander Matyushentsev

See also milestone v1.3

v1.3.2

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v1.3.2/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v1.3.2/manifests/ha/install.yaml

Pull Requests

• #2696 Revert "Use Kustomize 3 to generate manifetsts. Closes #2487 (#2510)"
• #2797 Fix directory traversal edge case and enhance tests

Contributors

• Alex Collins
• Simon Behar

See also milestone v1.3

v1.3.1

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v1.3.1/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v1.3.1/manifests/ha/install.yaml

Bug Fixes

• #2664 update account password from API resulted 404
• #2724 Can't use DNS-1123 compliant app name when creating project role
• #2726 App list does not show chart for Helm app
• #2741 argocd local sync cannot parse kubernetes version
• #2754 BeforeHookCreation should be the default hook
• #2767 Fix bug whereby retry does not work for CLI
• #2770 Always cache miss for manifests

Other

• #1345 argocd-application-controller: can not retrieve list of objects using index : Index with name namespace does not exist

Pull Requests

• #2701 Adds support for /api/v1/account* via HTTP. Fixes #2664
• #2716 Make directory enforcer more lenient and add flag
• #2728 Shows chart name in apps tiles and apps table pages. Closes #2726
• #2747 Allow you to sync local Helm apps. Fixes #2741
• #2755 Allow dot in project policy. Closes #2724
• #2759 Make BeforeHookCreation the default. Fixes #2754
• #2761 Removes log warning regarding indexer and may improve perf. Closes #1345
• #2768 Fixes bug whereby retry does not work for CLI. Fixes #2767
• #2771 Fix bug where manifests are not cached. Fixes #2770

Contributors

• Alex Collins
• Simon Behar

See also milestone v1.3

v1.3.0

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v1.3.0/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v1.3.0/manifests/ha/install.yaml

New Features

Helm 1st-Class Support

We know that for many of our users, they want to deploy existing Helm charts using Argo CD. Up until now that has required you to create an Argo CD app in a Git repo that does nothing but point to that chart. Now you can use a Helm chart repository is the same way as a Git repository.

On top of that, we've improved support for Helm apps. The most common types of Helm hooks such as pre-install and post-install are supported as well as a the delete policy before-hook-creation which makes it easier to work with hooks.

https://youtu.be/GP7xtrnNznw

Orphan Resources

Some users would like to make sure that resources in a namespace are managed only by Argo CD. So we've introduced the concept of an "orphan resource" - any resource that is in namespace associated with an app, but not managed by Argo CD. This is enabled in the project settings. Once enabled, Argo CD will show in the app view any resources in the app's namepspace that is not mananged by Argo CD.

https://youtu.be/9ZoTevVQf5I

Sync Windows

There may be instances when you want to control the times during which an Argo CD app can sync. Sync Windows now gives you the capability to create windows of time in which apps are either allowed or denied the ability to sync. This can apply to both manual and auto-sync, or just auto-sync. The windows are configured at the project level and assigned to apps using app name, namespace or cluster. Wildcards are supported for all fields.

Enhancements

• #1099 [UI] Add application labels to Applications list and Applications details page
• #1145 Helm repository as first class Argo CD Application source
• #1167 Ability to generate a warn/alert when a namespace deviates from the expected state
• #1615 Improve diff support for resource requests/limits
• #1642 HTTP API should allow JWT to be passed via Authorization header
• #1852 Ability to create & upsert projects from spec
• #1930 Support for in-line block from helm chart values
• #1956 Request OIDC groups claim if groups scope is not supported
• #1995 Add a maintenance window for Applications with automated syncing
• #2036 Support argocd.argoproj.io/hook-delete-policy: BeforeHookCreation
• #2078 Support setting Helm string parameters using CLI/UI
• #2203 Config management plugin environment variable UI/CLI support
• #2260 Helm: auto-detect URLs
• #2261 Helm: UI improvements
• #2275 Support helm template --kube-version
• #2277 Use community icons for resources
• #2298 Make group optional for ignoreDifferences config
• #2315 Update Helm docs
• #2354 Add cluster information into Splunk
• #2396 argocd list command should have filter options like by project
• #2445 Add target/current revision to status badge
• #2487 Update tooling to use Kustomize v3
• #2488 Update root Dockerfile to use the hack/install.sh
• #2559 Support and document using HPA for repo-server
• #2587 Upgrade Helm
• #2604 UI fixes for "Sync Apps" panel.
• #2609 Upgrade kustomize from v3.1.0 to v3.2.1
• #355 Map helm lifecycle hooks to ArgoCD pre/post/sync hooks

Bug Fixes

• #1660 failed parsing on parameters with comma
• #1881 Statefuleset with OnDelete Update Strategy stuck progressing
• #1923 Warning during secret diffing
• #1944 Error message "Unable to load data: key is missing" is confusing
• #2006 OIDC group bindings are truncated
• #2022 Multiple parallel app syncs causes OOM
• #2046 Unknown error when setting params with argocd app set on helm app
• #2060 Endpoint is no longer shown as a child of services
• #2099 SSH known hosts entry cannot be deleted if contains shell pattern in name
• #2114 Application 404s on names with periods
• #2116 Adding certs for hostnames ending with a dot (.) is not possible
• #2141 Fix TestHookDeleteBeforeCreation
• #2146 v1.2.0-rc1 nil pointer dereference when syncing
• #2150 Replacing services failure
• #2152 1.2.0-rc1 - Authentication Required error in Repo Server
• #2174 v1.2.0-rc1 Applications List View doesn't work
• #2185 Manual sync does not trigger Presync hooks
• #2192 SyncError app condition disappears during app reconciliation
• #2198 argocd app wait\sync prints 'Unknown' for resources without health
• #2206 1.2.0-rc2 Warning during secret diffing
• #2212 SSO redirect url is incorrect if configured Argo CD URL has trailing slash
• #2215 Application summary diff page shows hooks
• #2216 An app with a single resource and Sync hook remains progressing
• #2231 CONTRIBUTING documentation outdated
• #2243 v1.2.0-rc2 does not retrieve http(s) based git repository behind the proxy
• #2245 Intermittent "git ls-remote" request failures should not fail app reconciliation
• #2263 Result of ListApps operation for Git repo is cached incorrectly
• #2287 ListApps does not utilize cache
• #2290 Controller panics due to nil pointer error
• #2303 The Helm --kube-version support does not work on GKE:
• #2308 Fixes bug that prevents you creating repos via UI/CLI.
• #2316 The 'helm.repositories' settings is dropped without migration path
• #2317 Badge response does not contain cache control header
• #2321 Inconsistent sync result from UI and CLI
• #2330 Failed edit application with plugin type requiring environment
• #2339 AutoSync doesn't work anymore
• #2371 End-to-End tests not working with Kubernetes v1.16
• #2378 Creating an application from Helm repository should select "Helm" as source type
• #2386 The parameters of ValidateAccess GRPC method should not be logged
• #2398 Maintenance window meaning is confusing
• #2407 UI bug when targetRevision is ommited
• #2425 Too many vulnerabilities in Docker image
• #2443 proj windows commands not consistent with other commands
• #2448 Custom resource actions cannot be executed from the UI
• #2453 Application controller sometimes accidentally removes duplicated/excluded resource warning condition
• #2455 Logic that checks sync windows state in the cli is incorrect
• #2475 UI don't allow to create window with * * * * * schedule
• #2480 Helm Hook is executed twice if annotated with both pre-install and pre-upgrade annotations
• #2484 Impossible to edit chart name using App details page
• #2496 ArgoCD does not provide CSRF protection
• #2497 ArgoCD failing to install CRDs in master from Helm Charts
• #2549 Timestamp in Helm package file name causes error in Application with Helm source
• #2567 Attempting to create a repo with password but not username panics
• #2577 UI incorrectly mark resources as Required Pruning
• #2616 argocd app diff prints only first difference
• #2619 Bump min client cache version
• #2620 Cluster list page fails if any cluster is not reachable
• #2622 Repository type should be mandatory for repo add command in CLI
• #2626 Repo server executes unnecessary ls-remotes
• #2633 Application list page incorrectly filter apps by label selector
• #2635 Custom actions are disabled in Argo CD UI
• #2645 Failure of argocd version in the self-building container image
• #2655 Application list page is not updated automatically anymore
• #2659 Login regression issues
• #2662 Regression: Cannot return Kustomize version for 3.1.0
• #2670 API server does not allow creating role with action action/*
• #2673 Application controller kubectl-parallelism-limit flag is broken
• #2691 Annoying toolbar flickering

Other

• #1059 [UI] Enhance app creation page with Helm parameters overrides
• #1103 Deal with 4KB cookie limit for JWT
• #2086 Fix TestAutoSyncSelfHealEnabled
• #2124 Add configurable help link to every page
• #2272 e2e tests timing out after 10m
• Fix lint and merge issues
• Fixes merge issue
• Merge test from master
• Update manifests to v1.3.0
• Update manifests to v1.3.0-rc1
• Update manifests to v1.3.0-rc2
• Update manifests to v1.3.0-rc3
• Update manifests to v1.3.0-rc4
• Update manifests to v1.3.0-rc5
• codegen

Pull Requests

• #1805 Allow list actions to return yaml or json
• #2101 Fix and enhance end-to-end testing for SSH repositories
• #2110 RBAC Support for Actions
• #2111 Correct some broken links in yaml
• #2122 Add FuturePLC to List of companies using ArgoCD
• #2127 Updates hook delete policy docs
• #2130 Update rbac.md
• #2131 Update faq.md
• #2132 Minor CLI bug fixes
• #2133 Adds checks around valid paths for apps
• #2134 Enhances cookie warning with actual length to help users fix their co…
• #2135 Ignore generated code coverage
• #2145 Update helm.md
• #2149 Indicate that SyncFail hooks are on v1.2+
• #2153 Added 'SyncFail' to possible HookTypes in UI
• #2158 Update broken link
• #2159 Updates app-of-apps docs
• #2160 Added more health filters in UI
• #2161 Create "argocd" ns in make start
• #2162 Fixed routing issue for periods
• #2164 Better detection for authorization_code OIDC response type
• #2166 Determine the manifest version from the VERSION file when on release …
• #2172 Temporary disable Git LFS test to unblock release
• #2187 Add missing labels to configmap/secret in documentation
• #2189 Add missing labels to argocd-cm yaml in kustomize.md
• #2190 FAQ: Simplify admin password snippet a bit
• #2195 Codegen
• #2196 Remove duplicated DoNotIgnoreErrors method
• #2208 Add path to externalURLs
• #2210 Fix flaky TestOrphanedResource test
• #2213 Fix TestImmutableChange for running locally in microk8s
• #2222 Fix JS crash in EditablePanel component
• #2229 Fix/grafana datasources
• #2230 Alter wording in Ingress docs to be more natural
• #2232 Grammar fixes.
• #2233 ...

v1.3.0-rc5

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v1.3.0-rc5/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v1.3.0-rc5/manifests/ha/install.yaml

Changes Since v1.3.0-rc4

Enhancements

• Add AnalysisRun and Experiment HealthCheck (#2579)

Bug Fixes

• Application controller flag is broken (#2673)
• API server does not allow creating role with action 'action/*' (#2670)
• Add gauge Prometheus metric which represents the number of pending manifest requests. (#2559)
• Custom actions are disabled in Argo CD UI (#2635)
• Fix 1.3 login regressions (#2659)
• Don't parse kustomize version output (#2662)
• /api/version should not fail if unable to load tool version (#2645)
• Application list page is not updated automatically (#2655)
• Application list page incorrectly filter apps by label selector (#2633)

Other

• Use Kustomize 3 to generate manifetsts. Closes (#2487)
• Upgrade kustomize to 3.2.1 (#2607)
• Use the same tools for make image to make dev-tools-image. (#2488)

v1.3.0-rc4

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v1.3.0-rc4/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v1.3.0-rc4/manifests/ha/install.yaml

Changes Since v1.3.0-rc3

Bug Fixes

• Assume git as default repository type (#2622)
• Issue #2626 - Repo server executes unnecessary ls-remotes (#2627)
• Issue #2620 - Cluster list page fails if any cluster is not reachable (#2621)
• Issue #2616 - argocd app diff prints only first difference (#2617)
• 1.3.0-rc3 ui crash when changing project (#2632)
• Adds timeout to Helm commands. (#2570)
• Upgrade Helm to v2.15.2 (#2587)
• Sets app status to unknown if there is an error. (#2577)
• UI fixes for "Sync Apps" panel. (#2604)