发布日期: 2026-09-14
版本号: v3.5.3

Argo CD v3.5.3 版本发布，提供非高可用和高可用两种安装方式，均通过 kubectl 在 argocd 命名空间下应用官方 install.yaml 清单即可完成部署。本次版本的所有容器镜像均采用 cosign 签名，容器镜像和 CLI 二进制文件生成了符合 SLSA Level 3 规范的来源证明，可在官方文档中查看验证方法。版本详细变更可参考官方博客文章，若从其他次版本升级，请务必先阅读官方升级文档。本次更新主要为问题修复：修复了 KubeVirt 虚拟机声明停止时健康状态误报为 Healthy 的问题、FlinkDeployment 挂起时的健康状态报告、版本变更时仓库未正确清理的问题、Crossplane MR 资源在供应过程中应报告 Progressing 而非 Healthy、重试时 operationState 值设置不正确、SSO 重定向导致的 401 重试循环、hydrateTo 分支名称未生效、GRPCRoute 健康检查忽略过期 observedGeneration 条件、GrafanaFolder 负极性条件处理以及 AuthReconcile 访问者 panic 恢复等问题。完整变更记录可查看 GitHub 上 v3.5.2 到 v3.5.3 的对比页面。

更新内容 （中文）

快速开始

非高可用（Non-HA）：

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.3/manifests/install.yaml

高可用（HA）：

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.3/manifests/ha/install.yaml

发布签名与溯源证明

所有 Argo CD 容器镜像均由 cosign 签名。容器镜像和 CLI 二进制文件会生成符合 SLSA Level 3 规范的溯源证明（Provenance）。验证方法请参阅文档。

发布说明博客文章

关于本次发布中关键变更和改进的详细解读，请查看官方博客文章

升级

如果从不同的次要版本（minor version）升级，请务必阅读升级文档。

变更日志

缺陷修复

  • c198be7e7a00f6e643180c0f9b762f768fefcbb1: fix(health): a KubeVirt VirtualMachine declared stopped is Healthy (cherry-pick #29664 for 3.5) (#29665) (@argo-cd-cherry-pick-bot[bot])
  • 4b3f69d204d25aeaf9056bc37c3e4d44f198570c: fix(health): report suspended FlinkDeployment as healthy (#26818) (cherry-pick #28995 for 3.5) (#29525) (@argo-cd-cherry-pick-bot[bot])
  • dd2cb1aaf12ef19a2bab816fbaecced6422cad7c: fix(repository): clean repository on revision change (cherry-pick #28771 for 3.5) (#29486) (@argo-cd-cherry-pick-bot[bot])
  • 70b399c5a8335cd3abb0bf132d63129733a5e3a0: fix(resource_customizations): Crossplane MRs should report Progressing (not Healthy) whilst provisioning [ISSUE: #29381] (cherry-pick #29382 for 3.5) (#29520) (@argo-cd-cherry-pick-bot[bot])
  • be8b3873521671e3f9418c6e3019f12a472ac3c1: fix(sync): correctly set operationState values on retry (#26530) (cherry-pick #28778 for 3.5) (#29431) (@omkar619-dev)
  • a5e5992f62561d112a6d6a715e6631e3b6817671: fix(ui): guard SSO redirect to stop 401 retry loop (cherry-pick #28807 for 3.5) (#29631) (@argo-cd-cherry-pick-bot[bot])
  • 0b0890e0c79d2e2c7f8bf33736cde2772024e2b3: fix(ui): use hydrateTo branch name when set (cherry-pick #29562 for 3.5) (#29564) (@crenshaw-dev)
  • 18f0566fb550b1d10d9fb55a72fa887a530eca42: fix: GRPCRoute health check ignores stale observedGeneration conditions (#28086) (cherry-pick #28087 for 3.5) (#29517) (@argo-cd-cherry-pick-bot[bot])
  • 4d653a67174ecacd3a7d17ef5f1c923a48304bd6: fix: handle GrafanaFolder negative-polarity condition (#29395) (cherry-pick #29397 for 3.5) (#29524) (@argo-cd-cherry-pick-bot[bot])
  • ec585202b451045155203736eaa6bca145b19935: fix: recover AuthReconcile visitor panics (cherry-pick #29440 for 3.5) (#29531) (@Karthik-Chowdary)

完整变更日志: https://github.com/argoproj/argo-cd/compare/v3.5.2...v3.5.3

更新内容 （原始）

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.3/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.3/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

  • c198be7e7a00f6e643180c0f9b762f768fefcbb1: fix(health): a KubeVirt VirtualMachine declared stopped is Healthy (cherry-pick #29664 for 3.5) (#29665) (@argo-cd-cherry-pick-bot[bot])
  • 4b3f69d204d25aeaf9056bc37c3e4d44f198570c: fix(health): report suspended FlinkDeployment as healthy (#26818) (cherry-pick #28995 for 3.5) (#29525) (@argo-cd-cherry-pick-bot[bot])
  • dd2cb1aaf12ef19a2bab816fbaecced6422cad7c: fix(repository): clean repository on revision change (cherry-pick #28771 for 3.5) (#29486) (@argo-cd-cherry-pick-bot[bot])
  • 70b399c5a8335cd3abb0bf132d63129733a5e3a0: fix(resource_customizations): Crossplane MRs should report Progressing (not Healthy) whilst provisioning [ISSUE: #29381] (cherry-pick #29382 for 3.5) (#29520) (@argo-cd-cherry-pick-bot[bot])
  • be8b3873521671e3f9418c6e3019f12a472ac3c1: fix(sync): correctly set operationState values on retry (#26530) (cherry-pick #28778 for 3.5) (#29431) (@omkar619-dev)
  • a5e5992f62561d112a6d6a715e6631e3b6817671: fix(ui): guard SSO redirect to stop 401 retry loop (cherry-pick #28807 for 3.5) (#29631) (@argo-cd-cherry-pick-bot[bot])
  • 0b0890e0c79d2e2c7f8bf33736cde2772024e2b3: fix(ui): use hydrateTo branch name when set (cherry-pick #29562 for 3.5) (#29564) (@crenshaw-dev)
  • 18f0566fb550b1d10d9fb55a72fa887a530eca42: fix: GRPCRoute health check ignores stale observedGeneration conditions (#28086) (cherry-pick #28087 for 3.5) (#29517) (@argo-cd-cherry-pick-bot[bot])
  • 4d653a67174ecacd3a7d17ef5f1c923a48304bd6: fix: handle GrafanaFolder negative-polarity condition (#29395) (cherry-pick #29397 for 3.5) (#29524) (@argo-cd-cherry-pick-bot[bot])
  • ec585202b451045155203736eaa6bca145b19935: fix: recover AuthReconcile visitor panics (cherry-pick #29440 for 3.5) (#29531) (@Karthik-Chowdary)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.5.2...v3.5.3

下载链接