发布日期: 2025-05-28
版本号: v2.13.8

Argo CD v2.13.8 提供了快速的安装方式,可以通过 kubectl 创建命名空间并应用清单文件来部署非高可用(Non-HA)或高可用(HA)版本。该版本修复了一个关键安全问题,并包含了若干错误修复。所有容器镜像均经过签名,且部分组件符合 SLSA Level 3 规范,具体验证方法可查阅官方文档。如需从其他次要版本升级,请参考相应的升级指南。完整变更日志可通过项目仓库查看。

更新内容 (中文)

快速入门

非高可用模式:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.13.8/manifests/install.yaml

高可用模式:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.13.8/manifests/ha/install.yaml

发布签名与来源验证

所有 Argo CD 容器镜像均通过 cosign 签名。对于符合 SLSA Level 3 规范的容器镜像和 CLI 二进制文件,会生成来源证明。验证方法详见文档

升级说明

如从不同次版本进行升级,请务必查阅升级文档

更新日志

本次发布修复了一个关键安全问题:GHSA-2hj5-g64g-fp6p

错误修复

  • 97fd4ac877dabf5b6ff4e1640c6ab58b9098ec43: 修复(appset): 生成的应用错误应使用默认重排队列 (#21887) (cherry-pick #21936) (#22673) (@gcp-cherry-pick-bot[bot])
  • 41ab259bea471f65db9fd5d79150bae836bfcccd: 修复(test): 修复端到端测试失败 (cherry-pick #22975) (#23053) (@gcp-cherry-pick-bot[bot])

其他工作

  • d508e3be5079e43e132e7a68c7670f0408291569: 合并来自分支的提交 (@crenshaw-dev)
  • 6612b7b017730041706b39fd1a8eaa92d866ec0e: 重构: 将 heptio-images 替换为 argocd-e2e-container (cherry-pick #23040) (#23056) (@nitishfy)

完整更新日志:https://github.com/argoproj/argo-cd/compare/v2.13.7…v2.13.8

更新内容 (原始)

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.13.8/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.13.8/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

This release fixes a critical security issue: GHSA-2hj5-g64g-fp6p

Bug fixes

  • 97fd4ac877dabf5b6ff4e1640c6ab58b9098ec43: fix(appset): generated app errors should use the default requeue (#21887) (cherry-pick #21936) (#22673) (@gcp-cherry-pick-bot[bot])
  • 41ab259bea471f65db9fd5d79150bae836bfcccd: fix(test): broken e2e test (cherry-pick #22975) (#23053) (@gcp-cherry-pick-bot[bot])

Other work

  • d508e3be5079e43e132e7a68c7670f0408291569: Merge commit from fork (@crenshaw-dev)
  • 6612b7b017730041706b39fd1a8eaa92d866ec0e: chore: replace heptio-images with argocd-e2e-container (cherry-pick #23040) (#23056) (@nitishfy)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.13.7...v2.13.8

下载链接