argocd: update dependency argoproj/argo-cd to v3.5.0 - #420
Merged
Conversation
Infro diff for f434240
Detailstime="2026-08-04T15:09:39Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2026-08-04T15:09:55Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
===== apiextensions.k8s.io/CustomResourceDefinition /applications.argoproj.io ======
--- /tmp/argocd-diff3366520021/applications.argoproj.io-live.yaml
+++ /tmp/argocd-diff3366520021/applications.argoproj.io
@@ -549,6 +549,13 @@
description: RepoURL is the URL to the repository (Git or
Helm) that contains the application manifests
type: string
+ tagPrefix:
+ description: |-
+ TagPrefix filters git tags to only those with this prefix before evaluating targetRevision as a semver constraint.
+ The prefix is stripped from tag names before comparison and re-added to the resolved version.
+ For example, with tagPrefix "component-b/" and targetRevision "1.0.*", tags like "component-b/1.0.0" and
+ "component-b/1.0.1" are candidates, and the constraint resolves to "component-b/1.0.1".
+ type: string
targetRevision:
description: |-
TargetRevision defines the revision of the source to sync the application to.
@@ -938,6 +945,13 @@
description: RepoURL is the URL to the repository (Git or
Helm) that contains the application manifests
type: string
+ tagPrefix:
+ description: |-
+ TagPrefix filters git tags to only those with this prefix before evaluating targetRevision as a semver constraint.
+ The prefix is stripped from tag names before comparison and re-added to the resolved version.
+ For example, with tagPrefix "component-b/" and targetRevision "1.0.*", tags like "component-b/1.0.0" and
+ "component-b/1.0.1" are candidates, and the constraint resolves to "component-b/1.0.1".
+ type: string
targetRevision:
description: |-
TargetRevision defines the revision of the source to sync the application to.
@@ -1433,6 +1447,13 @@
description: RepoURL is the URL to the repository (Git or Helm)
that contains the application manifests
type: string
+ tagPrefix:
+ description: |-
+ TagPrefix filters git tags to only those with this prefix before evaluating targetRevision as a semver constraint.
+ The prefix is stripped from tag names before comparison and re-added to the resolved version.
+ For example, with tagPrefix "component-b/" and targetRevision "1.0.*", tags like "component-b/1.0.0" and
+ "component-b/1.0.1" are candidates, and the constraint resolves to "component-b/1.0.1".
+ type: string
targetRevision:
description: |-
TargetRevision defines the revision of the source to sync the application to.
@@ -1838,6 +1859,11 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ description: |-
+ RepoURL is the URL to the git repository that contains the hydrated manifests. If not set, defaults to
+ the DrySource.RepoURL.
+ type: string
targetBranch:
description: |-
TargetBranch is the branch from which hydrated manifests will be synced.
@@ -2224,6 +2250,13 @@
description: RepoURL is the URL to the repository (Git or Helm)
that contains the application manifests
type: string
+ tagPrefix:
+ description: |-
+ TagPrefix filters git tags to only those with this prefix before evaluating targetRevision as a semver constraint.
+ The prefix is stripped from tag names before comparison and re-added to the resolved version.
+ For example, with tagPrefix "component-b/" and targetRevision "1.0.*", tags like "component-b/1.0.0" and
+ "component-b/1.0.1" are candidates, and the constraint resolves to "component-b/1.0.1".
+ type: string
targetRevision:
description: |-
TargetRevision defines the revision of the source to sync the application to.
@@ -2784,6 +2817,13 @@
description: RepoURL is the URL to the repository (Git or
Helm) that contains the application manifests
type: string
+ tagPrefix:
+ description: |-
+ TagPrefix filters git tags to only those with this prefix before evaluating targetRevision as a semver constraint.
+ The prefix is stripped from tag names before comparison and re-added to the resolved version.
+ For example, with tagPrefix "component-b/" and targetRevision "1.0.*", tags like "component-b/1.0.0" and
+ "component-b/1.0.1" are candidates, and the constraint resolves to "component-b/1.0.1".
+ type: string
targetRevision:
description: |-
TargetRevision defines the revision of the source to sync the application to.
@@ -3180,6 +3220,13 @@
description: RepoURL is the URL to the repository (Git
or Helm) that contains the application manifests
type: string
+ tagPrefix:
+ description: |-
+ TagPrefix filters git tags to only those with this prefix before evaluating targetRevision as a semver constraint.
+ The prefix is stripped from tag names before comparison and re-added to the resolved version.
+ For example, with tagPrefix "component-b/" and targetRevision "1.0.*", tags like "component-b/1.0.0" and
+ "component-b/1.0.1" are candidates, and the constraint resolves to "component-b/1.0.1".
+ type: string
targetRevision:
description: |-
TargetRevision defines the revision of the source to sync the application to.
@@ -3731,6 +3778,13 @@
description: RepoURL is the URL to the repository
(Git or Helm) that contains the application manifests
type: string
+ tagPrefix:
+ description: |-
+ TagPrefix filters git tags to only those with this prefix before evaluating targetRevision as a semver constraint.
+ The prefix is stripped from tag names before comparison and re-added to the resolved version.
+ For example, with tagPrefix "component-b/" and targetRevision "1.0.*", tags like "component-b/1.0.0" and
+ "component-b/1.0.1" are candidates, and the constraint resolves to "component-b/1.0.1".
+ type: string
targetRevision:
description: |-
TargetRevision defines the revision of the source to sync the application to.
@@ -4146,6 +4200,13 @@
description: RepoURL is the URL to the repository
(Git or Helm) that contains the application manifests
type: string
+ tagPrefix:
+ description: |-
+ TagPrefix filters git tags to only those with this prefix before evaluating targetRevision as a semver constraint.
+ The prefix is stripped from tag names before comparison and re-added to the resolved version.
+ For example, with tagPrefix "component-b/" and targetRevision "1.0.*", tags like "component-b/1.0.0" and
+ "component-b/1.0.1" are candidates, and the constraint resolves to "component-b/1.0.1".
+ type: string
targetRevision:
description: |-
TargetRevision defines the revision of the source to sync the application to.
@@ -4672,6 +4733,13 @@
description: RepoURL is the URL to the repository (Git
or Helm) that contains the application manifests
type: string
+ tagPrefix:
+ description: |-
+ TagPrefix filters git tags to only those with this prefix before evaluating targetRevision as a semver constraint.
+ The prefix is stripped from tag names before comparison and re-added to the resolved version.
+ For example, with tagPrefix "component-b/" and targetRevision "1.0.*", tags like "component-b/1.0.0" and
+ "component-b/1.0.1" are candidates, and the constraint resolves to "component-b/1.0.1".
+ type: string
targetRevision:
description: |-
TargetRevision defines the revision of the source to sync the application to.
@@ -5077,6 +5145,13 @@
description: RepoURL is the URL to the repository (Git
or Helm) that contains the application manifests
type: string
+ tagPrefix:
+ description: |-
+ TagPrefix filters git tags to only those with this prefix before evaluating targetRevision as a semver constraint.
+ The prefix is stripped from tag names before comparison and re-added to the resolved version.
+ For example, with tagPrefix "component-b/" and targetRevision "1.0.*", tags like "component-b/1.0.0" and
+ "component-b/1.0.1" are candidates, and the constraint resolves to "component-b/1.0.1".
+ type: string
targetRevision:
description: |-
TargetRevision defines the revision of the source to sync the application to.
@@ -5625,6 +5700,11 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ description: |-
+ RepoURL is the URL to the git repository that contains the hydrated manifests. If not set, defaults to
+ the DrySource.RepoURL.
+ type: string
targetBranch:
description: |-
TargetBranch is the branch from which hydrated manifests will be synced.
@@ -5647,6 +5727,11 @@
- message
- phase
type: object
+ lastComparedDryRevision:
+ description: |-
+ LastComparedDryRevision holds the resolved revision from the most recent dry source comparison.
+ This is updated on every evaluation, even when hydration is skipped due to no changes.
+ type: string
lastSuccessfulOperation:
description: LastSuccessfulOperation holds info about the most
recent successful hydration
@@ -6078,6 +6163,11 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ description: |-
+ RepoURL is the URL to the git repository that contains the hydrated manifests. If not set, defaults to
+ the DrySource.RepoURL.
+ type: string
targetBranch:
description: |-
TargetBranch is the branch from which hydrated manifests will be synced.
@@ -6119,6 +6209,10 @@
items:
type: string
type: array
+ isAppOfApps:
+ description: IsAppOfApps holds true if the application has any
+ application for child resource.
+ type: boolean
type: object
sync:
description: Sync contains information about the application's current
@@ -6567,6 +6661,13 @@
description: RepoURL is the URL to the repository (Git
or Helm) that contains the application manifests
type: string
+ tagPrefix:
+ description: |-
+ TagPrefix filters git tags to only those with this prefix before evaluating targetRevision as a semver constraint.
+ The prefix is stripped from tag names before comparison and re-added to the resolved version.
+ For example, with tagPrefix "component-b/" and targetRevision "1.0.*", tags like "component-b/1.0.0" and
+ "component-b/1.0.1" are candidates, and the constraint resolves to "component-b/1.0.1".
+ type: string
targetRevision:
description: |-
TargetRevision defines the revision of the source to sync the application to.
@@ -6971,6 +7072,13 @@
repoURL:
description: RepoURL is the URL to the repository (Git
or Helm) that contains the application manifests
+ type: string
+ tagPrefix:
+ description: |-
+ TagPrefix filters git tags to only those with this prefix before evaluating targetRevision as a semver constraint.
+ The prefix is stripped from tag names before comparison and re-added to the resolved version.
+ For example, with tagPrefix "component-b/" and targetRevision "1.0.*", tags like "component-b/1.0.0" and
+ "component-b/1.0.1" are candidates, and the constraint resolves to "component-b/1.0.1".
type: string
targetRevision:
description: |-
===== apiextensions.k8s.io/CustomResourceDefinition /applicationsets.argoproj.io ======
--- /tmp/argocd-diff147728735/applicationsets.argoproj.io-live.yaml
+++ /tmp/argocd-diff147728735/applicationsets.argoproj.io
@@ -465,6 +465,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -720,6 +722,8 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ type: string
targetBranch:
type: string
required:
@@ -965,6 +969,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -1373,6 +1379,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -1628,6 +1636,8 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ type: string
targetBranch:
type: string
required:
@@ -1873,6 +1883,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -2282,6 +2294,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -2537,6 +2551,8 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ type: string
targetBranch:
type: string
required:
@@ -2782,6 +2798,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -3169,6 +3187,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -3424,6 +3444,8 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ type: string
targetBranch:
type: string
required:
@@ -3669,6 +3691,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -4081,6 +4105,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -4336,6 +4362,8 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ type: string
targetBranch:
type: string
required:
@@ -4581,6 +4609,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -4989,6 +5019,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -5244,6 +5276,8 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ type: string
targetBranch:
type: string
required:
@@ -5489,6 +5523,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -5898,6 +5934,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -6153,6 +6191,8 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ type: string
targetBranch:
type: string
required:
@@ -6398,6 +6438,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -6785,6 +6827,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -7040,6 +7084,8 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ type: string
targetBranch:
type: string
required:
@@ -7285,6 +7331,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -7680,6 +7728,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -7935,6 +7985,8 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ type: string
targetBranch:
type: string
required:
@@ -8180,6 +8232,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -8802,6 +8856,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -9057,6 +9113,8 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ type: string
targetBranch:
type: string
required:
@@ -9302,6 +9360,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -9522,6 +9582,8 @@
type: boolean
api:
type: string
+ excludeArchivedRepos:
+ type: boolean
insecure:
type: boolean
owner:
@@ -9548,6 +9610,8 @@
type: string
appSecretName:
type: string
+ excludeArchivedRepos:
+ type: boolean
organization:
type: string
tokenRef:
@@ -9581,6 +9645,8 @@
type: object
group:
type: string
+ includeArchivedRepos:
+ type: boolean
includeSharedProjects:
type: boolean
includeSubgroups:
@@ -9915,6 +9981,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -10170,6 +10238,8 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ type: string
targetBranch:
type: string
required:
@@ -10415,6 +10485,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -10819,6 +10891,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -11074,6 +11148,8 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ type: string
targetBranch:
type: string
required:
@@ -11319,6 +11395,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -11733,6 +11811,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -11988,6 +12068,8 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ type: string
targetBranch:
type: string
required:
@@ -12233,6 +12315,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -12641,6 +12725,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -12896,6 +12982,8 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ type: string
targetBranch:
type: string
required:
@@ -13141,6 +13229,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -13550,6 +13640,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -13805,6 +13897,8 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ type: string
targetBranch:
type: string
required:
@@ -14050,6 +14144,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -14437,6 +14533,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -14692,6 +14790,8 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ type: string
targetBranch:
type: string
required:
@@ -14937,6 +15037,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -15332,6 +15434,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -15587,6 +15691,8 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ type: string
targetBranch:
type: string
required:
@@ -15832,6 +15938,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -16454,6 +16562,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -16709,6 +16819,8 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ type: string
targetBranch:
type: string
required:
@@ -16954,6 +17066,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -17174,6 +17288,8 @@
type: boolean
api:
type: string
+ excludeArchivedRepos:
+ type: boolean
insecure:
type: boolean
owner:
@@ -17200,6 +17316,8 @@
type: string
appSecretName:
type: string
+ excludeArchivedRepos:
+ type: boolean
organization:
type: string
tokenRef:
@@ -17233,6 +17351,8 @@
type: object
group:
type: string
+ includeArchivedRepos:
+ type: boolean
includeSharedProjects:
type: boolean
includeSubgroups:
@@ -17567,6 +17687,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -17822,6 +17944,8 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ type: string
targetBranch:
type: string
required:
@@ -18067,6 +18191,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -18475,6 +18601,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -18730,6 +18858,8 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ type: string
targetBranch:
type: string
required:
@@ -18975,6 +19105,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -19369,6 +19501,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -19624,6 +19758,8 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ type: string
targetBranch:
type: string
required:
@@ -19869,6 +20005,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -20491,6 +20629,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -20746,6 +20886,8 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ type: string
targetBranch:
type: string
required:
@@ -20991,6 +21133,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -21211,6 +21355,8 @@
type: boolean
api:
type: string
+ excludeArchivedRepos:
+ type: boolean
insecure:
type: boolean
owner:
@@ -21237,6 +21383,8 @@
type: string
appSecretName:
type: string
+ excludeArchivedRepos:
+ type: boolean
organization:
type: string
tokenRef:
@@ -21270,6 +21418,8 @@
type: object
group:
type: string
+ includeArchivedRepos:
+ type: boolean
includeSharedProjects:
type: boolean
includeSubgroups:
@@ -21604,6 +21754,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -21859,6 +22011,8 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ type: string
targetBranch:
type: string
required:
@@ -22104,6 +22258,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -22585,6 +22741,8 @@
type: string
repoURL:
type: string
+ tagPrefix:
+ type: string
targetRevision:
type: string
required:
@@ -22840,6 +22998,8 @@
minLength: 1
pattern: ^.{2,}|[^./]$
type: string
+ repoURL:
+ type: string
targetBranch:
type: string
required:
@@ -23084,6 +23244,8 @@
ref:
type: string
repoURL:
+ type: string
+ tagPrefix:
type: string
targetRevision:
type: string
===== apiextensions.k8s.io/CustomResourceDefinition /appprojects.argoproj.io ======
--- /tmp/argocd-diff2154200298/appprojects.argoproj.io-live.yaml
+++ /tmp/argocd-diff2154200298/appprojects.argoproj.io
@@ -263,11 +263,15 @@
type: object
type: array
signatureKeys:
- description: SignatureKeys contains a list of PGP key IDs that commits
- in Git must be signed with in order to be allowed for sync
+ description: |-
+ SignatureKeys contains a list of PGP key IDs that commits in Git must be signed with in order to be allowed for sync
+
+ Deprecated: Use SourceIntegrity instead. SignatureKeys will be removed with the next major version.
items:
- description: SignatureKey is the specification of a key required
- to verify commit signatures with
+ description: |-
+ SignatureKey is the specification of a key required to verify commit signatures with
+
+ Deprecated: Use SourceIntegrity instead. SignatureKeys will be removed with the next major version.
properties:
keyID:
description: The ID of the key in hexadecimal notation
@@ -276,6 +280,55 @@
- keyID
type: object
type: array
+ sourceIntegrity:
+ description: |-
+ SourceIntegrity represents a constraint on manifest sources integrity to be met before they can be used.
+ Do not access directly, use EffectiveSourceIntegrity() for correct backwards compatibility handling.
+ properties:
+ git:
+ description: Git - policies for git source verification
+ properties:
+ policies:
+ items:
+ properties:
+ gpg:
+ description: Verify GPG commit/tag signatures
+ properties:
+ keys:
+ description: List of key IDs to trust. The keys
+ need to be in the repository server keyring.
+ items:
+ type: string
+ type: array
+ mode:
+ type: string
+ required:
+ - keys
+ - mode
+ type: object
+ repos:
+ description: List of repository criteria restricting
+ repositories the policy will apply to
+ items:
+ properties:
+ url:
+ description: URL specifier, glob.
+ type: string
+ required:
+ - url
+ type: object
+ type: array
+ required:
+ - gpg
+ - repos
+ type: object
+ type: array
+ required:
+ - policies
+ type: object
+ required:
+ - git
+ type: object
sourceNamespaces:
description: SourceNamespaces defines the namespaces application resources
are allowed to be created in
@@ -337,6 +390,12 @@
description: Schedule is the time the window will begin, specified
in cron format
type: string
+ syncOverrun:
+ description: |-
+ SyncOverrun allows ongoing syncs to continue in two scenarios:
+ For deny windows: allows syncs that started before the deny window became active to continue running
+ For allow windows: allows syncs that started during the allow window to continue after the window ends
+ type: boolean
timeZone:
description: TimeZone of the sync that will be applied to the
schedule
===== apps/Deployment argocd/argocd-applicationset-controller ======
--- /tmp/argocd-diff1060348959/argocd-applicationset-controller-live.yaml
+++ /tmp/argocd-diff1060348959/argocd-applicationset-controller
@@ -616,6 +616,24 @@
key: applicationsetcontroller.repo.server.strict.tls
name: argocd-cmd-params-cm
optional: true
+ - name: ARGOCD_APPLICATIONSET_CONTROLLER_REPO_SERVER_CA_CERT_PATH
+ valueFrom:
+ configMapKeyRef:
+ key: applicationsetcontroller.repo.server.ca.cert.path
+ name: argocd-cmd-params-cm
+ optional: true
+ - name: ARGOCD_APPLICATIONSET_CONTROLLER_REPO_SERVER_CLIENT_CERT_PATH
+ valueFrom:
+ configMapKeyRef:
+ key: applicationsetcontroller.repo.server.client.cert.path
+ name: argocd-cmd-params-cm
+ optional: true
+ - name: ARGOCD_APPLICATIONSET_CONTROLLER_REPO_SERVER_CLIENT_CERT_KEY_PATH
+ valueFrom:
+ configMapKeyRef:
+ key: applicationsetcontroller.repo.server.client.cert.key.path
+ name: argocd-cmd-params-cm
+ optional: true
- name: ARGOCD_APPLICATIONSET_CONTROLLER_REPO_SERVER_TIMEOUT_SECONDS
valueFrom:
configMapKeyRef:
@@ -711,6 +729,8 @@
name: tmp
- mountPath: /app/config/reposerver/tls
name: argocd-repo-server-tls
+ - mountPath: /app/config/reposerver/mtls
+ name: argocd-repo-server-mtls
- mountPath: /home/argocd/params
name: argocd-cmd-params-cm
dnsPolicy: ClusterFirst
@@ -751,6 +771,18 @@
path: ca.crt
optional: true
secretName: argocd-repo-server-tls
+ - name: argocd-repo-server-mtls
+ secret:
+ defaultMode: 420
+ items:
+ - key: client.crt
+ path: client.crt
+ - key: client.key
+ path: client.key
+ - key: server-ca.crt
+ path: server-ca.crt
+ optional: true
+ secretName: argocd-repo-server-mtls
- configMap:
defaultMode: 420
items:
===== apps/Deployment argocd/argocd-notifications-controller ======
--- /tmp/argocd-diff1532754240/argocd-notifications-controller-live.yaml
+++ /tmp/argocd-diff1532754240/argocd-notifications-controller
@@ -289,6 +289,24 @@
key: notificationscontroller.repo.server.plaintext
name: argocd-cmd-params-cm
optional: true
+ - name: ARGOCD_NOTIFICATION_CONTROLLER_REPO_SERVER_CA_CERT_PATH
+ valueFrom:
+ configMapKeyRef:
+ key: notificationscontroller.repo.server.ca.cert.path
+ name: argocd-cmd-params-cm
+ optional: true
+ - name: ARGOCD_NOTIFICATION_CONTROLLER_REPO_SERVER_CLIENT_CERT_PATH
+ valueFrom:
+ configMapKeyRef:
+ key: notificationscontroller.repo.server.client.cert.path
+ name: argocd-cmd-params-cm
+ optional: true
+ - name: ARGOCD_NOTIFICATION_CONTROLLER_REPO_SERVER_CLIENT_CERT_KEY_PATH
+ valueFrom:
+ configMapKeyRef:
+ key: notificationscontroller.repo.server.client.cert.key.path
+ name: argocd-cmd-params-cm
+ optional: true
image: quay.io/argoproj/argocd:v3.4.3@sha256:b6d161b4984c4bffb8c02250252fdd17f23fa4e2aa25fada0e606e1fa08d2348
imagePullPolicy: Always
livenessProbe:
@@ -313,6 +331,8 @@
name: tls-certs
- mountPath: /app/config/reposerver/tls
name: argocd-repo-server-tls
+ - mountPath: /app/config/reposerver/mtls
+ name: argocd-repo-server-mtls
workingDir: /app
dnsPolicy: ClusterFirst
nodeSelector:
@@ -343,3 +363,15 @@
path: ca.crt
optional: true
secretName: argocd-repo-server-tls
+ - name: argocd-repo-server-mtls
+ secret:
+ defaultMode: 420
+ items:
+ - key: client.crt
+ path: client.crt
+ - key: client.key
+ path: client.key
+ - key: server-ca.crt
+ path: server-ca.crt
+ optional: true
+ secretName: argocd-repo-server-mtls
===== apps/Deployment argocd/argocd-repo-server ======
--- /tmp/argocd-diff3038933349/argocd-repo-server-live.yaml
+++ /tmp/argocd-diff3038933349/argocd-repo-server
@@ -780,6 +780,12 @@
key: reposerver.tls.ciphers
name: argocd-cmd-params-cm
optional: true
+ - name: ARGOCD_REPO_SERVER_CLIENT_CA_PATH
+ valueFrom:
+ configMapKeyRef:
+ key: reposerver.client.ca.path
+ name: argocd-cmd-params-cm
+ optional: true
- name: ARGOCD_REPO_CACHE_EXPIRATION
valueFrom:
configMapKeyRef:
@@ -1012,12 +1018,16 @@
name: gpg-keyring
- mountPath: /app/config/reposerver/tls
name: argocd-repo-server-tls
+ - mountPath: /app/config/reposerver/mtls
+ name: argocd-repo-server-mtls
- mountPath: /tmp
name: tmp
- mountPath: /helm-working-dir
name: helm-working-dir
- mountPath: /home/argocd/cmp-server/plugins
name: plugins
+ - mountPath: /home/argocd/params
+ name: argocd-cmd-params-cm
dnsPolicy: ClusterFirst
initContainers:
- command:
@@ -1124,6 +1134,14 @@
path: ca.crt
optional: true
secretName: argocd-repo-server-tls
+ - name: argocd-repo-server-mtls
+ secret:
+ defaultMode: 420
+ items:
+ - key: client-ca.crt
+ path: client-ca.crt
+ optional: true
+ secretName: argocd-repo-server-mtls
- emptyDir: {}
name: var-files
- emptyDir: {}
===== apps/Deployment argocd/argocd-server ======
--- /tmp/argocd-diff2638750203/argocd-server-live.yaml
+++ /tmp/argocd-diff2638750203/argocd-server
@@ -802,6 +802,24 @@
key: server.repo.server.strict.tls
name: argocd-cmd-params-cm
optional: true
+ - name: ARGOCD_SERVER_REPO_SERVER_CA_CERT_PATH
+ valueFrom:
+ configMapKeyRef:
+ key: server.repo.server.ca.cert.path
+ name: argocd-cmd-params-cm
+ optional: true
+ - name: ARGOCD_SERVER_REPO_SERVER_CLIENT_CERT_PATH
+ valueFrom:
+ configMapKeyRef:
+ key: server.repo.server.client.cert.path
+ name: argocd-cmd-params-cm
+ optional: true
+ - name: ARGOCD_SERVER_REPO_SERVER_CLIENT_CERT_KEY_PATH
+ valueFrom:
+ configMapKeyRef:
+ key: server.repo.server.client.cert.key.path
+ name: argocd-cmd-params-cm
+ optional: true
- name: ARGOCD_SERVER_DEX_SERVER_PLAINTEXT
valueFrom:
configMapKeyRef:
@@ -958,6 +976,18 @@
key: server.webhook.parallelism.limit
name: argocd-cmd-params-cm
optional: true
+ - name: ARGOCD_SERVER_GLOB_CACHE_SIZE
+ valueFrom:
+ configMapKeyRef:
+ key: server.glob.cache.size
+ name: argocd-cmd-params-cm
+ optional: true
+ - name: ARGOCD_SERVER_WEBHOOK_REFRESH_WORKERS
+ valueFrom:
+ configMapKeyRef:
+ key: server.webhook.refresh.workers
+ name: argocd-cmd-params-cm
+ optional: true
- name: ARGOCD_APPLICATIONSET_CONTROLLER_ENABLE_NEW_GIT_FILE_GLOBBING
valueFrom:
configMapKeyRef:
@@ -1047,6 +1077,8 @@
name: tls-certs
- mountPath: /app/config/server/tls
name: argocd-repo-server-tls
+ - mountPath: /app/config/reposerver/mtls
+ name: argocd-repo-server-mtls
- mountPath: /app/config/dex/tls
name: argocd-dex-server-tls
- mountPath: /home/argocd
@@ -1099,6 +1131,18 @@
path: ca.crt
optional: true
secretName: argocd-dex-server-tls
+ - name: argocd-repo-server-mtls
+ secret:
+ defaultMode: 420
+ items:
+ - key: client.crt
+ path: client.crt
+ - key: client.key
+ path: client.key
+ - key: server-ca.crt
+ path: server-ca.crt
+ optional: true
+ secretName: argocd-repo-server-mtls
- configMap:
defaultMode: 420
items:
===== apps/StatefulSet argocd/argocd-application-controller ======
--- /tmp/argocd-diff407018244/argocd-application-controller-live.yaml
+++ /tmp/argocd-diff407018244/argocd-application-controller
@@ -616,6 +616,12 @@
key: controller.operation.processors
name: argocd-cmd-params-cm
optional: true
+ - name: ARGOCD_APPLICATION_CONTROLLER_HYDRATION_PROCESSORS
+ valueFrom:
+ configMapKeyRef:
+ key: controller.hydration.processors
+ name: argocd-cmd-params-cm
+ optional: true
- name: ARGOCD_APPLICATION_CONTROLLER_LOGFORMAT
valueFrom:
configMapKeyRef:
@@ -736,6 +742,24 @@
key: controller.repo.server.strict.tls
name: argocd-cmd-params-cm
optional: true
+ - name: ARGOCD_APPLICATION_CONTROLLER_REPO_SERVER_CA_CERT_PATH
+ valueFrom:
+ configMapKeyRef:
+ key: controller.repo.server.ca.cert.path
+ name: argocd-cmd-params-cm
+ optional: true
+ - name: ARGOCD_APPLICATION_CONTROLLER_REPO_SERVER_CLIENT_CERT_PATH
+ valueFrom:
+ configMapKeyRef:
+ key: controller.repo.server.client.cert.path
+ name: argocd-cmd-params-cm
+ optional: true
+ - name: ARGOCD_APPLICATION_CONTROLLER_REPO_SERVER_CLIENT_CERT_KEY_PATH
+ valueFrom:
+ configMapKeyRef:
+ key: controller.repo.server.client.cert.key.path
+ name: argocd-cmd-params-cm
+ optional: true
- name: ARGOCD_APPLICATION_CONTROLLER_PERSIST_RESOURCE_HEALTH
valueFrom:
configMapKeyRef:
@@ -895,6 +919,8 @@
volumeMounts:
- mountPath: /app/config/controller/tls
name: argocd-repo-server-tls
+ - mountPath: /app/config/reposerver/mtls
+ name: argocd-repo-server-mtls
- mountPath: /home/argocd
name: argocd-home
- mountPath: /home/argocd/params
@@ -928,6 +954,18 @@
path: ca.crt
optional: true
secretName: argocd-repo-server-tls
+ - name: argocd-repo-server-mtls
+ secret:
+ defaultMode: 420
+ items:
+ - key: client.crt
+ path: client.crt
+ - key: client.key
+ path: client.key
+ - key: server-ca.crt
+ path: server-ca.crt
+ optional: true
+ secretName: argocd-repo-server-mtls
- configMap:
defaultMode: 420
items:
Detailstime="2026-08-04T15:10:24Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2026-08-04T15:10:33Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
===== coordination.k8s.io/Lease /db9c8771.cnpg.io ======
--- /tmp/argocd-diff2957563185/db9c8771.cnpg.io-live.yaml
+++ /tmp/argocd-diff2957563185/db9c8771.cnpg.io
@@ -0,0 +1,11 @@
+apiVersion: coordination.k8s.io/v1
+kind: Lease
+metadata:
+ annotations:
+ argocd.argoproj.io/tracking-id: cloudnative-pg:coordination.k8s.io/Lease:cloudnative-pg/db9c8771.cnpg.io
+ labels:
+ app.kubernetes.io/component: manager
+ app.kubernetes.io/instance: cloudnative-pg
+ app.kubernetes.io/name: cloudnative-pg
+ name: db9c8771.cnpg.io
+spec: {}
Detailstime="2026-08-04T15:10:35Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2026-08-04T15:10:40Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
===== apps/Deployment external-dns/external-dns ======
--- /tmp/argocd-diff3212513126/external-dns-live.yaml
+++ /tmp/argocd-diff3212513126/external-dns
@@ -173,11 +173,6 @@
- --provider=aws
- --txt-owner-id=digitalocean-hashbang
- --txt-prefix=_owner.
- - --source=crd
- - --domain-filter=hashbang.sh
- - --managed-record-types=A
- - --managed-record-types=CNAME
- - --managed-record-types=TXT
env:
- name: AWS_REGION
value: us-west-2 |
renovate
Bot
force-pushed
the
renovate/argoproj-argo-cd-3.x
branch
from
July 9, 2026 16:44
61a35df to
ad2ea73
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/argoproj-argo-cd-3.x
branch
from
July 31, 2026 13:50
ad2ea73 to
6f9224d
Compare
renovate
Bot
changed the title
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/argoproj-argo-cd-3.x
branch
from
August 4, 2026 15:09
6f9224d to
de6b41d
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v3.4.3→v3.5.0Release Notes
argoproj/argo-cd (argoproj/argo-cd)
v3.5.0Compare Source
v3.4.6Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
aa9970b: fix(appset): fall back to create when patch returns NotFound (#17312) (cherry-pick #28645 for 3.4) (#28718) (@rickbrouwer)9a91802: fix(diff): don't drop manager-owned descendant fields when filtering webhook mutations (cherry-pick #28819 for 3.4) (#28894) (@argo-cd-cherry-pick-bot[bot])4907a99: fix(helm): pass registry passwords through stdin (#17821) (#28835) (@nitishfy)b6d7c82: fix: mount argocd-cmd-params-cm in repo-server so pprof can be enabled (cherry-pick #28863 for 3.4) (#28864) (@argo-cd-cherry-pick-bot[bot])cf7c4a7: fix: only do annotation backfill if live unset (cherry-pick #28770 for 3.4) (#28776) (@argo-cd-cherry-pick-bot[bot])a3d8e28: fix: progressive sync fixes (3.4 cherry-picks) (#29000) (@blakepettersson)2aa646b: fix: use Entra ID uti claim as token id when jti is absent (#28625) (cherry-pick #28656 for 3.4) (#28676) (@argo-cd-cherry-pick-bot[bot])275d11e: fix: use OIDC refresh tokens to renew expired sessions (#27041, #12189) (cherry-pick #27777 for 3.4) (#28688) (@argo-cd-cherry-pick-bot[bot])Other work
e1becb7: chore: bump version to 3.4.6 on release-3.4 branch (#28959) (@github-actions[bot])Full Changelog: argoproj/argo-cd@v3.4.5...v3.4.6
v3.4.5Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
e77e4b6: fix(reposerver): honor depth of referenced source instead of primary source (cherry-pick #28339 for 3.4) (#28341) (@alexandresavicki)63e67d5: fix(ssa): do not run auth reconcile with SSA (cherry pick of #27624 and #27601 to 3.4) (#28265) (@Mangaal)2403907: fix: auto-sync skipped when newer commit arrives during sync with manifest-generate-paths (#27875) (cherry-pick #28227 for 3.4) (#28331) (@argo-cd-cherry-pick-bot[bot])2d18587: fix: deleted resource are incorrectly shown in UI (cherry-pick #28322 for 3.4) (#28337) (@argo-cd-cherry-pick-bot[bot])a82e158: fix: don't clobber non-ignored fields on "replace" (cherry-pick #27136 for 3.4) (#28507) (@argo-cd-cherry-pick-bot[bot])d4c8f1c: fix: fixes a regression of dex config env vars substituion - Cherry pick of #28369 in 3.4 (#28411) (@ppapapetrou76)Dependency updates
8c7ece5: chore(deps): bump golang.org/x/crypto to 0.53.0 (release-3.4) (#28375) (@nmirasch)a8f245b: chore(deps): update Ubuntu base image to 26.04 LTS (3.4) (#28430) (@suii2210)Full Changelog: argoproj/argo-cd@v3.4.4...v3.4.5
v3.4.4Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
146184e: fix(health): PromotionStrategy stuck Progressing after no-op re-hydration (#28124) (cherry-pick #28125 for 3.4) (#28135) (@argo-cd-cherry-pick-bot[bot])e515f51: fix(rbac): resolve RBAC regression for project-scoped resources in multi-namespace architecture (#25289) (#26573) (#28062) (@wanddynosios)7f2fe95: fix(ssd): regression causing diff to error on new objects (#27679) (cherry-pick #27703 for 3.4) (#28241) (@argo-cd-cherry-pick-bot[bot])5199ea6: fix: add a lock on clusterinformer (cherry-pick #28216 for 3.4) (#28312) (@blakepettersson)7a64081: fix: exclude live status from normalization (cherry-pick #28201 for 3.4) (#28204) (@argo-cd-cherry-pick-bot[bot])0b3436f: fix: fixes parsing of dex passwords with dollar sign (cherry pick of #28027 to 3.4) (#28197) (@ppapapetrou76)9ccf66b: fix: resolve cross-generator Values templates in RenderGeneratorParams (#27827) (cherry-pick #27830 for 3.4) (#28128) (@argo-cd-cherry-pick-bot[bot])Other work
14ad471: Merge pull request #28162 from argoproj/cherry-pick-28158-to-release-3.4 (@dudinea)0fd000b: Merge pull request #28164 from argoproj/cherry-pick-28155-to-release-3.4 (@dudinea)ff25519: chore(ci): bump codecov action to 7.0.0 to fix the GPG issue (cherry-pick #28159 for 3.4) (#28172) (@dudinea)e9ff0c5: ci: bump goreleaser (cherry-pick #28033 for 3.4) (#28072) (@argo-cd-cherry-pick-bot[bot])1c5e37d: ci: use github release notes in goreleaser (cherry-pick #28048 for 3.4) (#28071) (@argo-cd-cherry-pick-bot[bot])0c14cfb: fix(manifest-generate-paths): Normalize repo before using type repo (#28113) (@fm1ck3y)c2003f4: test(e2e): Add test for second Sync after initial for different resources/options (#28156) (#28155) (@dudinea)9810fa2: test(e2e): fix cleanup of CRDs for e2e tests (#28157) (#28158) (@dudinea)Full Changelog: argoproj/argo-cd@v3.4.3...v3.4.4
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.