RHEA-2025:23541 - Product Enhancement Advisory

Topic

Red Hat OpenShift GitOps v1.19.0 bug fix and enhancement update

Description

An update is now available for Red Hat OpenShift GitOps.
Bug Fix(es) and Enhancement(s):

• GITOPS-6281 (Implement controller-runtime options to optimize Operator's object cache)
• GITOPS-6366 (FIPS enablement : Enable FIPS compliant build for Argo CD Agent)
• GITOPS-6809 (Argocd Notification Controller appears to be holding old TCP connections open to api.github.com)
• GITOPS-7000 (FIPS enablement : Enable FIPS compliant build for Argo CD Plugin Server)
• GITOPS-7315 (Host name error for ApplicationSet Webhook Server route)
• GITOPS-7329 (Different values for app.kubernetes.io/name label in Role and RoleBindings)
• GITOPS-7358 (Image Updater: Tech Preview pre-requisite items)
• GITOPS-7385 (Argo CD 3.0: Use Annotation-Based Tracking by Default)
• GITOPS-7416 (Provide option for editing resource requests and limits for gitops-plugin component)
• GITOPS-7475 (Default argocd instance does not get recreated after deletion deletion)
• GITOPS-7484 (Argo CD local user management: contribute additional ginkgo E2E tests)
• GITOPS-7491 (Image Updater: Release notes documentation for tech preview)
• GITOPS-7608 (Redis HA pods are taking longer than expected to come up)
• GITOPS-7610 (Image Updater: Integration into Red Hat productization)
• GITOPS-7631 (Argo CD Applications Details Page and Tabs in Dev Console)
• GITOPS-7678 (Remove configmap dependency for principal deployment)
• GITOPS-7680 (Argo CD ApplicationSet Details Page and Tabs in Dev Console)
• GITOPS-7692 (Principal should reject agents named like the argo-cd installation namespace)
• GITOPS-7704 (Support Argo CD Notifications in Any Namespace)
• GITOPS-7721 (Support image pull policy configurations in GitOps)
• GITOPS-7728 (Argo CD Operator: Allow exposing Argo CD Agent principal via Route, using ArgoCD CR)
• GITOPS-7729 (Argo CD Operator: Allow exposing Argo CD Agent principal via Route, using ArgoCD CR)
• GITOPS-7730 (Argo CD Agent: argocd-agent-resource-proxy service is missing in the Operator )
• GITOPS-7731 (Argo CD Agent: Argo CD Redis NetworkPolicy should allow agent to connect to it)
• GITOPS-7737 (Image Updater: Important community fixes and enhancements for TP)
• GITOPS-7740 (Agent User Documentation Architecture/concepts)
• GITOPS-7741 (Agent User Documentation: Install)
• GITOPS-7742 (Agent User Documentation: Configuration)
• GITOPS-7790 (ArgoCD agent: In argocd-operator, 'argocd-redis' is hardcoded as redis server address, when installing argo cd agent)
• GITOPS-7821 (RC 1.18.0-3: UX- Devconsole Application details page sorting issue)
• GITOPS-7836 (Argo Agent: Application is not recreated in managed mode upon deletion from spoke)
• GITOPS-7837 (Remove dependency on argocd-redis secret for principal deployed through operator)
• GITOPS-7838 (Required for Multi-cluster GitOps - GA)
• GITOPS-7844 (GitOpsService controller creates default ArgoCD with v1alpha1 api version)
• GITOPS-7924 (Agent User Documentation Architecture/concepts)
• GITOPS-8019 (CVE-2025-49844 - Vulnerability with Redis)
• GITOPS-8031 (Hide Dev Preview Badge in GitOps Operator's Operand tabs)
• GITOPS-8034 (Agent User Documentation: Install)
• GITOPS-8035 (Agent User Documentation: Configuration)
• GITOPS-8093 (Argo agent : InvalidImageName error using agent-helm-build by konflux)
• GITOPS-8094 (Argo agent: Unable to run agent in secure mode)
• GITOPS-8140 (Image Updater: git write-back to helmvalues file produces wrong structure)
• GITOPS-8142 (CVE-2024-45337 reported by RHACS for OpenShift GitOps Operator v1.18.1 (ArgoCD-based) due to outdated git-lfs binary, dependency update required to remove false positive.)
• GITOPS-8144 (Image Updater: Cannot use digest update strategy with forceUpdate: true without version constraint)
• GITOPS-8152 (ArgoCD CR Reconciliation fails if spec.applicationSet.webhookServer.route.enabled is set to true)
• GITOPS-8210 (Agent cluster roles are created for namespaced instances)

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Fixes

• GITOPS-6281
• GITOPS-6366
• GITOPS-6809
• GITOPS-7000
• GITOPS-7315
• GITOPS-7329
• GITOPS-7358
• GITOPS-7385
• GITOPS-7416
• GITOPS-7475
• GITOPS-7484
• GITOPS-7491
• GITOPS-7608
• GITOPS-7610
• GITOPS-7678
• GITOPS-7692
• GITOPS-7704
• GITOPS-7721
• GITOPS-7728
• GITOPS-7729
• GITOPS-7730
• GITOPS-7731
• GITOPS-7737
• GITOPS-7740
• GITOPS-7741
• GITOPS-7742
• GITOPS-7790
• GITOPS-7821
• GITOPS-7836
• GITOPS-7837
• GITOPS-7838
• GITOPS-7844
• GITOPS-7924
• GITOPS-8019
• GITOPS-8034
• GITOPS-8035
• GITOPS-8093
• GITOPS-8094
• GITOPS-8140
• GITOPS-8142
• GITOPS-8144
• GITOPS-8152

CVEs

(none)

References

• https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.19/