发布日期: 2026-08-12
版本号: v3.4.7

这是Argo CD v3.4.7版本的更新说明。提供了快速安装指南，包含非高可用和高可用两种部署方式的kubectl命令。所有容器镜像均通过cosign签名，并生成符合SLSA 3级规范的来源证明以供验证。主要更新包括修复了应用集渐进同步、服务器端差异比对以及Secret数据遮盖等多个问题，同时更新了部分依赖。从其他次版本升级时请查阅升级文档。完整变更日志可在GitHub上查看。

更新内容 （中文）

快速开始

非高可用模式：

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.7/manifests/install.yaml

高可用模式：

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.7/manifests/ha/install.yaml

发布签名与来源验证

所有Argo CD容器镜像均由cosign签名。为符合SLSA Level 3规范的容器镜像和CLI二进制文件生成了来源证明。请参阅文档了解验证方法。

发布说明博文

要了解此版本主要变更和改进的详细说明，请查阅官方博文

升级指南

若从不同次版本升级，请务必阅读升级文档。

更新日志

错误修复

  • cbd768784b51cf3ac15143d8ab3ee8e1fa28bfd1: 修复应用集：渐进式同步修复（3.4版本#29042和#27577的反向移植）(#29141) (@himeshp)
  • 0781a1a9f1c5cf4d69e2dd8e93d65abce7386adc: 修复控制器：在屏蔽Secret数据时重用服务端差异结果(#27858)(#29075) (@1ovsss)
  • a09c39ca9c18eb1f7f7ca79909ba5d2ec013d1b7: 修复服务端：防止SSD CLI密钥屏蔽欺骗（针对3.4的cherry-pick #29089）(#29131) (@argo-cd-cherry-pick-bot[bot])
  • 8afda0dc851b5012272951b2036a5d6caae5d7ec: 修复ssd：在最后应用配置注解中隐藏密钥(#28989)(#29053) (@pjiang-dev)

依赖更新

  • e0aea006fb6acd5a69740cbd806769e501933ded: 维护：将/ui目录中的fast-xml-parser从4.5.3升级到4.5.6（3.4版本）(#27342) (@keithchong)

其他工作

  • 7b6113c14c8186e126046131dfbe5103a9f680f4: 维护：在release-3.4分支将版本号提升至3.4.7(#29161) (@github-actions[bot])

完整变更日志：https://github.com/argoproj/argo-cd/compare/v3.4.6…v3.4.7

<a href="https://argoproj.github.io/cd/"><img src="https://raw.githubusercontent.com/argoproj/argo-site/master/content/pages/cd/gitops-cd.png" width="25%" >

更新内容 （原始）

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.7/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.7/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

  • cbd768784b51cf3ac15143d8ab3ee8e1fa28bfd1: fix(appset): progressive sync fixes (3.4 backports of #29042 and #27577) (#29141) (@himeshp)
  • 0781a1a9f1c5cf4d69e2dd8e93d65abce7386adc: fix(controller): reuse server-side diff result when masking Secret data (#27858) (#29075) (@1ovsss)
  • a09c39ca9c18eb1f7f7ca79909ba5d2ec013d1b7: fix(server): prevent SSD CLI secret mask spoofing (cherry-pick #29089 for 3.4) (#29131) (@argo-cd-cherry-pick-bot[bot])
  • 8afda0dc851b5012272951b2036a5d6caae5d7ec: fix(ssd): hide secret in last-applied-configuration annotation (#28989) (#29053) (@pjiang-dev)

Dependency updates

  • e0aea006fb6acd5a69740cbd806769e501933ded: chore(deps): bump fast-xml-parser from 4.5.3 to 4.5.6 in /ui - 3.4 (#27342) (@keithchong)

Other work

  • 7b6113c14c8186e126046131dfbe5103a9f680f4: chore: bump version to 3.4.7 on release-3.4 branch (#29161) (@github-actions[bot])

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.4.6...v3.4.7

下载链接