发布日期: 2026-07-28
版本号: v3.5.0-rc3

这是Argo CD 3.5.0-rc3候选版本的发布说明，提供了非高可用与高可用两种模式的快速安装命令。本版本的所有容器镜像和CLI二进制文件均由cosign签名，并生成了符合SLSA第3级规范的来源证明。官方博客中有该版本的详细变更解析。升级时若跨越次版本号，请务必参考官方升级文档。本次更新引入了新功能，并修复了多个错误，主要涉及应用集、Helm、UI、权限管理以及会话刷新等方面。

更新内容 （中文）

快速开始

非高可用部署：

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.0-rc3/manifests/install.yaml

高可用部署：

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.0-rc3/manifests/ha/install.yaml

发布签名与来源证明

所有 Argo CD 容器镜像均由 cosign 签名。符合 SLSA Level 3 规范的容器镜像和 CLI 二进制文件会生成来源证明。验证方法详见文档。

发布说明博文

关于此版本关键变更和改进的详细分解，请查看官方博文。

升级须知

若从不同次版本升级，请务必阅读升级文档。

变更日志

功能特性

  • 41b6fee59d67b8ba22bba995a7c0bbc44eb2512f: 功能(模拟)：允许禁用严格执行 (#27084) (为3.5版本合并 #27573) (#28595) (@argo-cd-cherry-pick-bot[bot])

错误修复

  • 06fae9ddd5798ff1be10c007624174673d31eb1b: 修复(appset)：当补丁返回未找到时回退到创建 (#17312) (为3.5版本合并 #28645) (#28716) (@argo-cd-cherry-pick-bot[bot])
  • a62624ae60e70e1e16b379dd8fae66dfc67282fd: 修复(差异)：过滤webhook变更时不要丢弃由manager拥有的后代字段 (为3.5版本合并 #28819) (#28895) (@argo-cd-cherry-pick-bot[bot])
  • 0b42a6d6ea4cad492448d11cd282f980bf6cbcc3: 修复(helm)：通过stdin传递注册表密码 (合并提交) (#28834) (@nitishfy)
  • 5c1b9303eb2e6397146182260ff7947ad1afabd1: 修复(渐进同步)：检查错误是否为未找到 (为3.5版本合并 #28663) (#28670) (@argo-cd-cherry-pick-bot[bot])
  • bc5d359c86d68a55250bedd624a86dfce239486a: 修复(ui)：更新ApplicationsSummary中的集群计数逻辑 (为3.5版本合并 #28768) (#28777) (@argo-cd-cherry-pick-bot[bot])
  • b6bff3b3d4f35fc4ea113b59eafdc4e8046e4ba4: 修复：在repo-server中挂载argocd-cmd-params-cm以便可以启用pprof (为3.5版本合并 #28863) (#28866) (@argo-cd-cherry-pick-bot[bot])
  • 061bd2bd3f7f9bafc6de79563a8e52c2c6c6caa2: 修复：仅当实时环境未设置时才进行注解回填 (为3.5版本合并 #28770) (#28775) (@argo-cd-cherry-pick-bot[bot])
  • f1b39c88b8997dc87f6909e4e2b845474f05e8b6: 修复：当jti不存在时，使用Entra ID uti声明作为令牌ID (#28625) (为3.5版本合并 #28656) (#28675) (@argo-cd-cherry-pick-bot[bot])
  • 7cde9f43784e956bb69b304ddeaf0e9f7b1f64dd: 修复：使用OIDC刷新令牌续订过期的会话 (#27041, #12189) (为3.5版本合并 #27777) (#28689) (@argo-cd-cherry-pick-bot[bot])

其他工作

  • 7660efb23b2d56bf01b0189ba5e2c2ab12badf71: 杂项：在release-3.5分支上将版本号提升至3.5.0-rc3 (#28938) (@github-actions[bot])
  • faaa0b66df1b4e8016cc630ef9b1d3db30b8c40e: 修复(repo-server)：在repo-server中遵守 ARGOCD_REPO_SERVER_OTLP_HEADERS (合并提交 - 3.5) (#28715) (@nitishfy)
  • 8ffead8d98ad0987686c2c5c77b7be38dc2ddefc: 测试(e2e)：修复GitHub无法显示完整e2e测试结果的问题 (#28727) (为3.5版本合并 #28726) (#28728) (@argo-cd-cherry-pick-bot[bot])

完整变更日志: https://github.com/argoproj/argo-cd/compare/v3.5.0-rc2...v3.5.0-rc3

<a href="https://argoproj.github.io/cd/"><img src="https://raw.githubusercontent.com/argoproj/argo-site/master/content/pages/cd/gitops-cd.png" width="25%" >

更新内容 （原始）

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.0-rc3/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.0-rc3/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Features

  • 41b6fee59d67b8ba22bba995a7c0bbc44eb2512f: feat(impersonation): allow to disable strict enforcement (#27084) (cherry-pick #27573 for 3.5) (#28595) (@argo-cd-cherry-pick-bot[bot])

Bug fixes

  • 06fae9ddd5798ff1be10c007624174673d31eb1b: fix(appset): fall back to create when patch returns NotFound (#17312) (cherry-pick #28645 for 3.5) (#28716) (@argo-cd-cherry-pick-bot[bot])
  • a62624ae60e70e1e16b379dd8fae66dfc67282fd: fix(diff): don’t drop manager-owned descendant fields when filtering webhook mutations (cherry-pick #28819 for 3.5) (#28895) (@argo-cd-cherry-pick-bot[bot])
  • 0b42a6d6ea4cad492448d11cd282f980bf6cbcc3: fix(helm): pass registry passwords through stdin (Cherry-Pick) (#28834) (@nitishfy)
  • 5c1b9303eb2e6397146182260ff7947ad1afabd1: fix(progressivesync): check if error == notfound (cherry-pick #28663 for 3.5) (#28670) (@argo-cd-cherry-pick-bot[bot])
  • bc5d359c86d68a55250bedd624a86dfce239486a: fix(ui): update cluster count logic in ApplicationsSummary (cherry-pick #28768 for 3.5) (#28777) (@argo-cd-cherry-pick-bot[bot])
  • b6bff3b3d4f35fc4ea113b59eafdc4e8046e4ba4: fix: mount argocd-cmd-params-cm in repo-server so pprof can be enabled (cherry-pick #28863 for 3.5) (#28866) (@argo-cd-cherry-pick-bot[bot])
  • 061bd2bd3f7f9bafc6de79563a8e52c2c6c6caa2: fix: only do annotation backfill if live unset (cherry-pick #28770 for 3.5) (#28775) (@argo-cd-cherry-pick-bot[bot])
  • f1b39c88b8997dc87f6909e4e2b845474f05e8b6: fix: use Entra ID uti claim as token id when jti is absent (#28625) (cherry-pick #28656 for 3.5) (#28675) (@argo-cd-cherry-pick-bot[bot])
  • 7cde9f43784e956bb69b304ddeaf0e9f7b1f64dd: fix: use OIDC refresh tokens to renew expired sessions (#27041, #12189) (cherry-pick #27777 for 3.5) (#28689) (@argo-cd-cherry-pick-bot[bot])

Other work

  • 7660efb23b2d56bf01b0189ba5e2c2ab12badf71: chore: bump version to 3.5.0-rc3 on release-3.5 branch (#28938) (@github-actions[bot])
  • faaa0b66df1b4e8016cc630ef9b1d3db30b8c40e: fix(repo-server): honor ARGOCD_REPO_SERVER_OTLP_HEADERS in repo-server (Cherry-pick - 3.5) (#28715) (@nitishfy)
  • 8ffead8d98ad0987686c2c5c77b7be38dc2ddefc: test(e2e): fix github’s failure to show complete results of e2e test (#28727) (cherry-pick #28726 for 3.5) (#28728) (@argo-cd-cherry-pick-bot[bot])

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.5.0-rc2...v3.5.0-rc3

下载链接