RHEA-2024:6787 - Product Enhancement Advisory

Topic

Errata Advisory for Red Hat OpenShift GitOps v1.14.0.

Description

Errata Advisory for Red Hat OpenShift GitOps v1.14.0.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift GitOps 1.14 for RHEL 9 x86_64
• Red Hat OpenShift GitOps 1.14 for RHEL 8 x86_64
• Red Hat OpenShift GitOps for IBM Power, little endian 1.14 for RHEL 8 ppc64le
• Red Hat OpenShift GitOps for IBM Z and LinuxONE 1.14 for RHEL 8 s390x
• Red Hat OpenShift GitOps for ARM 64 1.14 for RHEL 9 aarch64
• Red Hat OpenShift GitOps for ARM 64 1.14 for RHEL 8 aarch64

Fixes

• GITOPS-3233 - Expose labels in Argo CD Application events
• GITOPS-4602 - HA config option for larger repos in OpenShift GitOps
• GITOPS-3737 - Implement the consistent hashing mechanism with bounded load
• GITOPS-4300 - Allow users to set extra command args for application controller deployment
• GITOPS-4647 - Support multi-source (multi-revisions) in RevisionMetadataPanel
• GITOPS-4681 - Implement: Usage of Aggregation model for Roles
• GITOPS-4871 - Rollouts: ClusterRole/ClusterRoleBinding should be deleted when RolloutManager is deleted
• GITOPS-5010 - Sidecar support in argocd-server and application-controller
• GITOPS-2615 - Controller should use aggregated cluster role as default
• GITOPS-3049 - AppSet Git Generator Verifies GPG signatures
• GITOPS-3584 - Minimize clusters reshuffling when sharding configuration changes with round-robin algorithm
• GITOPS-3996 - Add support for rollback multi-source applications
• GITOPS-4192 - Enable Edit mode for any source of a multi-source app
• GITOPS-4646 - Provide option to use persistent volumes for Repo server Storage
• GITOPS-4659 - Implement Labels in Argo CD K8s events feature
• GITOPS-4779 - Rollouts: Updating '.spec.additionalMetadata' field does not cause labels/annotations to be applied to existing resources
• GITOPS-4801 - Adding a self-signed TLS cert for the for the ApplicationSet Gitlab SCM Providerdoesn't work as expected in Gitops
• GITOPS-4890 - Rollouts: Label/annotations on updated Deployments should be preserved
• GITOPS-4947 - Race condition in termination policy for argocd server route
• GITOPS-4948 - Upgrade operator-sdk to 1.32 in ArgoCD operator
• GITOPS-5167 - After Upgrade to OCP 4.16, ArgoCD fails to manage Persistent Volumes
• GITOPS-5219 - Add limitation of not supporting templated project field for git generator with signature verification
• GITOPS-5401 - ApplicationSet controller cannot access appprojects
• GITOPS-3997 - Rollback for multiple sources (upstream) - CLI
• GITOPS-4340 - Rocket.chat upstream docs fix
• GITOPS-4358 - Issue with GitOps Server after a ROSA HIbernate
• GITOPS-4717 - Bump kustomize version
• GITOPS-4943 - `argocd app set` does not work with multi source app
• GITOPS-4949 - Upgrade operator-sdk to 1.32 in GitOps Operator
• GITOPS-4992 - Migrate kubebuilder from go/v3 to go/v4 and upgrade operator-sdk to 1.35 in argocd-operator
• GITOPS-5004 - Migrate kubebuilder from go/v3 to go/v4 and upgrade operator-sdk to 1.35 in gitops-operator

CVEs

• CVE-2023-26115
• CVE-2023-37920
• CVE-2024-1737
• CVE-2024-1975
• CVE-2024-2398
• CVE-2024-6345
• CVE-2024-37370
• CVE-2024-37371
• CVE-2024-37891
• CVE-2024-38428

References

(none)