Skip to content

0.20.0

Compare
Choose a tag to compare
@dmaizel dmaizel released this 12 Jun 06:37
· 4 commits to release/0.20 since this release

Installation

To fetch the Helm chart for this release, run:

helm pull oci://quay.io/codefresh/gitops-runtime --version 0.20.0

🚨 Breaking Changes

  • ArgoCD Notifications has been removed from our runtime. This will not affect accounts that have installed their own Argo Notifications.

  • Delivery Pipelines editing via UI has been deprecated.

  • Garage has been removed and replaced with a Codefresh-provided SaaS logging solution. Please refer to the README for necessary values to activate this solution (it’s not enabled by default). As a result, Account ID is now a required value in the GitOps runtime Helm chart.

  • Application Annotation Required for Promotions

    • Promotions will now only be triggered from applications that are explicitly associated with a Product using an annotation.
    • Support for assigning applications to Products without an annotation has been removed.

Before upgrading

Please review all Products and ensure that each associated application includes the correct annotation:

metadata:
  annotations:
    codefresh.io/product: [product-name]

Failing to apply this annotation will prevent promotions from being triggered or completing successfully.

🚀 Chart Changes

Added

  • feat: Limits enforcement in runtime installation (#495, #457)
  • feat: Use Codefresh provided storage for workflow logs (#428)
  • feat: Enhanced error handling for app-proxy with CORS support in internal router configmap (#485)
  • feat: Added ServiceMonitor configuration for app-proxy metrics monitoring (#503)
  • feat: Added PodDisruptionBudget (PDB) and ServiceMonitor templates for event-reporter (#494)
  • feat: Global constraints management (#469)
  • feat: Argo CD version check and validation in pre-install hook (#462)
  • feat: Added default pulling interval for gitops-operator (#456)
  • feat: Add support for custom TLS certificates from the platform (#519)

Changed

  • feat: Updated Argo CD Helm to 7.8.23-5-cap-v2.14.9-2025-05-20-9356e64a (#508)
  • chore: Bumped gitops-operator to v0.7.11 (#509)
  • chore: Updated kubectl version for installer (CR-29092) (#504)
  • chore: Updated codefresh-gitops-operator to improve task handling efficiency (0.7.9) (#487)
  • feat: Updated app-proxy image tags to 1.3565.0, including fixes for no_changes errors (#510)
  • chore: Updated dependencies including nginx (#465), sealed-secrets (#464), csdp, cf-cli, and kubectl (#454)

Fixed

  • fix: Corrected invalid redis-ha URL in event-reporter (#512)
  • fix: Fixed cache handling in CI (#511)
  • fix: Removed archiveLogs=true due to workflow execution issues without artifact storage (#507)
  • fix: Improved error messages for app-proxy if they contain cause details (1.3498.0) (#481)
  • fix: Fixed file revision validation in app-proxy (1.3470.0) (#468)
  • fix: Bumped gitops-operator version to 0.7.12 to fix issue with reconciling certain apps (#528)
  • fix: Updated ConfigMap name in Argo CD root path retrieval script (#514)

Security

  • security: Updated app-proxy with critical security patches (#506)
  • security: Included security fixes for Argo Rollouts 1.7.2 (#460)
  • security: Included security fixes for Argo Workflows 3.6.7 (#460)

🔧 App-Proxy Changes

Added

  • feat: Promotion workflows examples added to UI (CR-27457)
  • feat: Default git-source creation after runtime initialization
  • feat: Enhanced Git token validation and error handling
  • feat: App resource tree enriched with annotations and labels support for OSS Argo CD

Changed

  • refactor: Improved logging formatting and readability
  • feat(git): Enhanced file revision validation and retrieval mechanisms
  • refactor: Migrated instrumentation to cf-telemetry library (CR-26924)

Fixed

  • fix: Corrected inner error reporting for HttpException (CR-29194)
  • fix: Resolved directory path issue in PromotionService
  • fix: Improved bootstrap error logging (CR-29076)
  • fix: Enhanced exception filtering to propagate underlying error messages (CR-27952)
  • chore: Fixed vulnerabilities and updated libraries including fastify, axios, musl (CR-28846)

⚠️ Upcoming Breaking Changes (Next Release)

The next release of the GitOps Runtime will include several breaking changes. Please review the following changes carefully and plan your upgrade accordingly:

Sealed Secrets Controller Disabled by Default

  • The sealed-secrets controller will no longer be enabled by default.
  • ➤ If your setup relies on sealed secrets, you must explicitly enable it by updating your values.yaml file.

Argo Workflows Switched to Namespaced Mode

  • Argo Workflows will now be installed in namespaced mode.
  • ➤ This change ensures compatibility with clusters where another instance of Argo Workflows is already present.
  • ➤ No action is needed unless your workflows currently rely on cluster-wide installation behavior.