0.20.0
Installation
To fetch the Helm chart for this release, run:
helm pull oci://quay.io/codefresh/gitops-runtime --version 0.20.0
🚨 Breaking Changes
-
ArgoCD Notifications has been removed from our runtime. This will not affect accounts that have installed their own Argo Notifications.
-
Delivery Pipelines editing via UI has been deprecated.
-
Garage has been removed and replaced with a Codefresh-provided SaaS logging solution. Please refer to the README for necessary values to activate this solution (it’s not enabled by default). As a result, Account ID is now a required value in the GitOps runtime Helm chart.
-
Application Annotation Required for Promotions
- Promotions will now only be triggered from applications that are explicitly associated with a Product using an annotation.
- Support for assigning applications to Products without an annotation has been removed.
Before upgrading
Please review all Products and ensure that each associated application includes the correct annotation:
metadata:
annotations:
codefresh.io/product: [product-name]
Failing to apply this annotation will prevent promotions from being triggered or completing successfully.
🚀 Chart Changes
Added
- feat: Limits enforcement in runtime installation (#495, #457)
- feat: Use Codefresh provided storage for workflow logs (#428)
- feat: Enhanced error handling for app-proxy with CORS support in internal router configmap (#485)
- feat: Added ServiceMonitor configuration for app-proxy metrics monitoring (#503)
- feat: Added PodDisruptionBudget (PDB) and ServiceMonitor templates for event-reporter (#494)
- feat: Global constraints management (#469)
- feat: Argo CD version check and validation in pre-install hook (#462)
- feat: Added default pulling interval for gitops-operator (#456)
- feat: Add support for custom TLS certificates from the platform (#519)
Changed
- feat: Updated Argo CD Helm to
7.8.23-5-cap-v2.14.9-2025-05-20-9356e64a
(#508) - chore: Bumped gitops-operator to
v0.7.11
(#509) - chore: Updated kubectl version for installer (CR-29092) (#504)
- chore: Updated codefresh-gitops-operator to improve task handling efficiency (
0.7.9
) (#487) - feat: Updated app-proxy image tags to
1.3565.0
, including fixes for no_changes errors (#510) - chore: Updated dependencies including nginx (#465), sealed-secrets (#464), csdp, cf-cli, and kubectl (#454)
Fixed
- fix: Corrected invalid redis-ha URL in event-reporter (#512)
- fix: Fixed cache handling in CI (#511)
- fix: Removed
archiveLogs=true
due to workflow execution issues without artifact storage (#507) - fix: Improved error messages for app-proxy if they contain cause details (
1.3498.0
) (#481) - fix: Fixed file revision validation in app-proxy (
1.3470.0
) (#468) - fix: Bumped gitops-operator version to
0.7.12
to fix issue with reconciling certain apps (#528) - fix: Updated ConfigMap name in Argo CD root path retrieval script (#514)
Security
- security: Updated app-proxy with critical security patches (#506)
- security: Included security fixes for Argo Rollouts
1.7.2
(#460) - security: Included security fixes for Argo Workflows
3.6.7
(#460)
🔧 App-Proxy Changes
Added
- feat: Promotion workflows examples added to UI (CR-27457)
- feat: Default git-source creation after runtime initialization
- feat: Enhanced Git token validation and error handling
- feat: App resource tree enriched with annotations and labels support for OSS Argo CD
Changed
- refactor: Improved logging formatting and readability
- feat(git): Enhanced file revision validation and retrieval mechanisms
- refactor: Migrated instrumentation to
cf-telemetry
library (CR-26924)
Fixed
- fix: Corrected inner error reporting for HttpException (CR-29194)
- fix: Resolved directory path issue in PromotionService
- fix: Improved bootstrap error logging (CR-29076)
- fix: Enhanced exception filtering to propagate underlying error messages (CR-27952)
- chore: Fixed vulnerabilities and updated libraries including fastify, axios, musl (CR-28846)
⚠️ Upcoming Breaking Changes (Next Release)
The next release of the GitOps Runtime will include several breaking changes. Please review the following changes carefully and plan your upgrade accordingly:
Sealed Secrets Controller Disabled by Default
- The sealed-secrets controller will no longer be enabled by default.
- ➤ If your setup relies on sealed secrets, you must explicitly enable it by updating your
values.yaml
file.
Argo Workflows Switched to Namespaced Mode
- Argo Workflows will now be installed in namespaced mode.
- ➤ This change ensures compatibility with clusters where another instance of Argo Workflows is already present.
- ➤ No action is needed unless your workflows currently rely on cluster-wide installation behavior.