0.30.0
·
4 commits
to stable/0.30
since this release
Installation
To get Helm chart for this release run:
helm pull oci://quay.io/codefresh/gitops-runtime --version 0.30.0⚠️ Breaking Changes
- This release bumps the bundled ArgoCD to v3.4.6 .
ArgoCD 3.4 introduces a breaking change to cluster version reporting:
- Cluster version format change: ArgoCD now stores/reports Kubernetes cluster versions as
vMajor.Minor.Patchinstead of the previousMajor.Minorformat, to align with how Helm 3.19.0+ interprets versions. - Application Sets with Cluster Generators, that fetch clusters based on their Kubernetes version and use
argocd.argoproj.io/auto-label-cluster-infoon the cluster secret, need to be updated to useargocd.argoproj.io/kubernetes-versionwith thevMajor.Minor.Patchformat instead of the previousMajor.Minorformat. More details here. - API, UI, and CLI cluster info queries return the new format Major.Minor.Patch instead of the previous format Major.Minor.
Please reader full changelog here: https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/3.3-3.4/
- Increased minimal supported version of BYOA up from 3.2
Behavior Changes (non-breaking, but worth calling out)
- Application health status refinement: an Application now shows
Missinghealth only when all of its resources are missing (e.g. before the first sync). Previously, any missing resource could degrade the overall health. If your automation depends on health status to detect missing resources, switch to checkingOutOfSyncinstead. - gRPC DNS TXT lookups disabled by default:
GRPC_ENABLE_TXT_SERVICE_CONFIGnow defaults tofalse, avoiding excessive_grpc_config.<hostname>DNS TXT queries (this was causing timeouts/crashes in dual-stack IPv4+IPv6 clusters). Re-enable viacontroller.grpc.enable.txt.service.config: "true"inargocd-cmd-params-cmif you rely on it.
Dependency Upgrades
| Component | Change |
|---|---|
| ArgoCD | v3.3.x → v3.4.6 |
| Dex | → v2.45.0 (ContinueOnConnectorFailure now enabled by default) |
| go-oidc | → v3.17.0 (token signature is now verified before claims are parsed — expired tokens signed with rotated keys will redirect to login instead of silent SSO) |
| OpenTelemetry | → v1.42.0 (metric names/attributes updated per semantic conventions v1.40.0 — review Grafana dashboards/alerts) |
Chart changes
- chore: fix security vulnarabilities (#1256 )