argo-cd v3.1.2 版本更新介绍
发布日期: 2025-09-04
版本号: v3.1.2
Argo CD v3.1.3版本发布,主要解决了v3.1.2版本中发布步骤失败的问题,建议使用此版本。提供了标准和高可用两种部署方式的kubectl安装命令。所有容器镜像均通过cosign签名,并生成符合SLSA Level 3规范的出处证明。从其他版本升级时请参考官方升级文档。该版本包含多项错误修复和改进,完整变更日志可查看发布对比页面。
更新内容 (中文)
快速开始
使用 v3.1.3
v3.1.2 版本的不可变发布存在问题,导致部分发布步骤失败(上传来源证明和 SBOMs)。v3.1.2 本身并无问题,但 v3.1.3 是经过完整成功发布的等效版本。
非高可用部署:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.1.2/manifests/install.yaml
高可用部署:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.1.2/manifests/ha/install.yaml
发布签名与来源证明
所有 Argo CD 容器镜像均使用 cosign 进行签名。符合 SLSA Level 3 规范的容器镜像和 CLI 二进制文件会生成来源证明。验证方法详见文档。
发布说明博文
关于本次发布主要变更和改进的详细说明,请查阅官方博文
升级指南
若从其他次版本升级,请务必阅读升级文档。
更新日志
错误修复
- fe6efec8f456db7ed7bbe2bbc05807b6c3e9228c: fix(appset): 将 applicationsets 添加到内置只读角色 (#24190) (#24318) (#24321) (@crenshaw-dev)
- 30d8ce66e28e993e9bc9a331f60a358a70f660ce: fix(appset): 通过克隆 http.DefaultTransport 防止 Bitbucket SCM/PR 生成器中的空闲连接累积 (#24264) (@anandf)
- 7982a746005e9ea7832c7f878b4a437a81936983: fix(discovery): 向 discovery 添加缺失的 lua 语法和返回值 (修复 #24257) - 3.1 (#24268) (@jan-mrm)
- 60c62a944b155702e6d89cbef4c04ff0f525692f: fix(security): repository.GetDetailedProject 暴露仓库密钥 (#24391) (@crenshaw-dev)
- 20447f7f575125aa45e4efad7e64b619dbae5ef2: fix: 降级 go-git (#24288) (release-3.1) (#24317) (@blakepettersson)
其他工作
- b3ad040b2cfb33837a910599e96c8026d86412b6: chore(cherry-pick-3.1): 替换 bitnami 镜像 (#24101) (#24286) (@nitishfy)
- ed9149beead1d373423797c8627dbb59449587b1: fix(cherry-pick-3.1): 为 OCI 类型的 flux helm 仓库添加自定义资源健康状态 (#24341) (@adberger)
- 6de4f7739b9350832971931247f4eb5a75cd8f7f: fix(cherry-pick-3.1): 处理 UI 上缺失的资源 (#24357) (@pjiang-dev)
完整更新日志: https://github.com/argoproj/argo-cd/compare/v3.1.1...v3.1.2
更新内容 (原始)
Quick Start
Use v3.1.3
There was an issue with immutable releases for v3.1.2 which caused some release steps to fail (uploading provenance and SBOMs). There should be nothing wrong with v3.1.2, but v3.1.3 is equivalent with a fully-successful release.
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.1.2/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.1.2/manifests/ha/install.yaml
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
- fe6efec8f456db7ed7bbe2bbc05807b6c3e9228c: fix(appset): add applicationsets to the built-in readonly role (#24190) (#24318) (#24321) (@crenshaw-dev)
- 30d8ce66e28e993e9bc9a331f60a358a70f660ce: fix(appset): prevent idle connection buildup by cloning http.DefaultTransport in Bitbucket SCM/PR generator (#24264) (@anandf)
- 7982a746005e9ea7832c7f878b4a437a81936983: fix(discovery): add missing lua syntax and return to discovery (fixes #24257) - 3.1 (#24268) (@jan-mrm)
- 60c62a944b155702e6d89cbef4c04ff0f525692f: fix(security): repository.GetDetailedProject exposes repo secrets (#24391) (@crenshaw-dev)
- 20447f7f575125aa45e4efad7e64b619dbae5ef2: fix: downgrade go-git (#24288) (release-3.1) (#24317) (@blakepettersson)
Other work
- b3ad040b2cfb33837a910599e96c8026d86412b6: chore(cherry-pick-3.1): replace bitnami images (#24101) (#24286) (@nitishfy)
- ed9149beead1d373423797c8627dbb59449587b1: fix(cherry-pick-3.1): custom resource health for flux helm repository of type oci (#24341) (@adberger)
- 6de4f7739b9350832971931247f4eb5a75cd8f7f: fix(cherry-pick-3.1): handle missing resources on UI (#24357) (@pjiang-dev)
Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.1.1...v3.1.2
