发布日期: 2025-05-20
版本号: v2.14.12

Argo CD v2.14.12 版本提供了非高可用和高可用两种快速安装方式，分别通过执行相应的kubectl命令完成。所有发布镜像和二进制文件均通过cosign签名，并符合SLSA Level 3标准。如从其他次版本升级，需查阅升级文档。本次更新主要修复了多个bug，包括ApplicationSet策略类型检查、健康检查中处理空值、端口转发策略优化、资源跟踪规范化、修复应用错误时的无限循环，以及移除缓存键中的项目字段。同时解决了若干安全漏洞依赖并进行了其他功能调整。

更新内容 （中文）

快速开始

非高可用部署：

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.12/manifests/install.yaml

高可用部署：

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.12/manifests/ha/install.yaml

发布签名与溯源

所有 Argo CD 容器镜像均通过 cosign 签名。符合 SLSA 第3级规范的容器镜像和 CLI 二进制文件会生成溯源证明。请参阅文档了解验证方法。

版本升级

若从不同次版本升级，请务必阅读升级指南文档。

更新日志

问题修复

  • f7ad2adf505ad9e35bde902377440e57ee2f94fb：修复(ApplicationSet)：检查策略类型以验证是否为渐进式同步（cherry-pick #22563）(#22833) (@gcp-cherry-pick-bot[bot])
  • ced6a7822e31fdae927c4de24bb7d56a7348ce3d：修复(health)：处理nil最后过渡时间(#22897) (cherry-pick #22900) (#22909) (@gcp-cherry-pick-bot[bot])
  • 25235fbc2d7f5cda05acc9992f42401fa4713941：修复(test)：修复端到端测试（cherry-pick #22975）(#23052) (@gcp-cherry-pick-bot[bot])
  • 78e61ba71ce9698622cf7cf1b7dc924eb3479797：修复：仅向就绪Pod进行端口转发(#10610) (cherry-pick #22794) (#22826) (@mikebryant)
  • fe9396397057ed403894e005030ceb5e38cd934b：修复：不对活跃CRD进行资源追踪规范化(#22722) - cherrypick 2.14 (#22746) (@blakepettersson)
  • 5bc6f4722bf056e3d02ce3479800e50d2637accb：修复：应用处于错误状态时出现无限调和循环(#23047) (@agaudreault)
  • b163de078488da33c163fb3a92d66a2f19472fe6：修复：从项目范围凭据的缓存密钥中移除项目(#22816) (@pjiang-dev)

依赖更新

  • efe5d2956ed9dd1511f198a770f909594839181e：依赖项：解决CVE GO-2025-3540, GO-2025-3503, GO-2025-3487（版本2.14.10内）(#22709) (@nathanlaceyraft)

其他工作

  • 3a9ab775373f32c353f8f1b5192c3ec3c0980c69：修复(commit-server)：应用镜像覆盖（cherry-pick #22916）(#22918) (@gcp-cherry-pick-bot[bot])

完整更新日志：https://github.com/argoproj/argo-cd/compare/v2.14.11…v2.14.12

更新内容 （原始）

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.12/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.12/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

  • f7ad2adf505ad9e35bde902377440e57ee2f94fb: fix(ApplicationSet): Check strategy type to verify it’s a progressive sync (cherry-pick #22563) (#22833) (@gcp-cherry-pick-bot[bot])
  • ced6a7822e31fdae927c4de24bb7d56a7348ce3d: fix(health): handle nil lastTransitionTime (#22897) (cherry-pick #22900) (#22909) (@gcp-cherry-pick-bot[bot])
  • 25235fbc2d7f5cda05acc9992f42401fa4713941: fix(test): broken e2e test (cherry-pick #22975) (#23052) (@gcp-cherry-pick-bot[bot])
  • 78e61ba71ce9698622cf7cf1b7dc924eb3479797: fix: Only port-forward to ready pods (#10610) (cherry-pick #22794) (#22826) (@mikebryant)
  • fe9396397057ed403894e005030ceb5e38cd934b: fix: do not normalize resource tracking on live crds (#22722) - cherrypick 2.14 (#22746) (@blakepettersson)
  • 5bc6f4722bf056e3d02ce3479800e50d2637accb: fix: infinite reconciliation loop when app is in error (#23047) (@agaudreault)
  • b163de078488da33c163fb3a92d66a2f19472fe6: fix: remove project from cache key for project scoped credentials (#22816) (@pjiang-dev)

Dependency updates

  • efe5d2956ed9dd1511f198a770f909594839181e: chore(deps): resolve CVE GO-2025-3540, GO-2025-3503, GO-2025-3487 within 2.14.10 (#22709) (@nathanlaceyraft)

Other work

  • 3a9ab775373f32c353f8f1b5192c3ec3c0980c69: fix(commit-server): apply image override (cherry-pick #22916) (#22918) (@gcp-cherry-pick-bot[bot])

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.14.11...v2.14.12

下载链接