RHEA-2025:3436 - Product Enhancement Advisory

Topic

Errata Advisory for Red Hat OpenShift GitOps v1.16.0.

Description

In the upcoming release of Red Hat OpenShift GitOps 1.16, several key components are being upgraded to enhance functionality and performance.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift GitOps 1.16 for RHEL 9 x86_64
• Red Hat OpenShift GitOps 1.16 for RHEL 8 x86_64
• Red Hat OpenShift GitOps for IBM Power, little endian 1.16 for RHEL 9 ppc64le
• Red Hat OpenShift GitOps for IBM Power, little endian 1.16 for RHEL 8 ppc64le
• Red Hat OpenShift GitOps for IBM Z and LinuxONE 1.16 for RHEL 9 s390x
• Red Hat OpenShift GitOps for IBM Z and LinuxONE 1.16 for RHEL 8 s390x
• Red Hat OpenShift GitOps for ARM 64 1.16 for RHEL 9 aarch64
• Red Hat OpenShift GitOps for ARM 64 1.16 for RHEL 8 aarch64

Fixes

• GITOPS-5161 - Add dashboard for Rollouts
• GITOPS-5212 - Add support for respectRBAC to operator
• GITOPS-5871 - Argo CD CR should include error message if reconciliation fails
• GITOPS-5876 - Refactor Argo CD operator to report errors via .status.conditions
• GITOPS-5877 - Log Create/Update/Deletion actions performed by Argo CD operator
• GITOPS-5878 - Log Create/Update/Deletion actions performed by Argo CD operator
• GITOPS-5879 - Use a default Argo CD image if '.spec.repo.sidecarContainers[*].image' is empty
• GITOPS-5955 - Add support for respectRBAC configuration option to Argo CD operator
• GITOPS-5996 - FIPS enablement : Argo CD Container image - RHEL 8
• GITOPS-5997 - FIPS enablement : Argo Rollouts Container image - RHEL 8
• GITOPS-5998 - FIPS enablement : GitOps Operator Container image - RHEL 8
• GITOPS-5999 - FIPS enablement : GitOps Operator Bundle Container image - RHEL 8
• GITOPS-6000 - FIPS enablement : Dex Container image - RHEL 8
• GITOPS-6003 - FIPS enablement : Must Gather Container image - RHEL 8
• GITOPS-6022 - Add an option to set AnnotationLabels to the ArgoCD config
• GITOPS-6133 - FIPS enablement : GitOps Backend Container image - RHEL 8
• GITOPS-6236 - Namespace-scoped instance grants access to redis service account
• GITOPS-6287 - Openshift GitOps server pod is crashing
• GITOPS-6365 - FIPS enablement : Enable FIPS compliant build for GitOps Components
• GITOPS-4445 - Provide ability to hide defined annotations in ArgoCD web UI
• GITOPS-5082 - Multi-source: Improve usability of rollback and history page
• GITOPS-5432 - Annotation tracking method when multiple ArgoCD instances
• GITOPS-5812 - fix: Override sub with federated_claims.user_id when dex is used
• GITOPS-5945 - RC v1.15.0-7 | `pod-security.kubernetes.io/enforce-version` label does not get reset
• GITOPS-6008 - RC v1.15.0: Impersonation feature does not work because of missing permission
• GITOPS-6029 - `.metadata.name` and `.spec` missing while creating a rolloutmanager instance
• GITOPS-6577 - RC v1.15.0-7 | `pod-security.kubernetes.io/enforce-version` label does not get reset
• GITOPS-3699 - Argocd notification-controller sends "success" notification when application is stilll in "progressing" state
• GITOPS-5903 - Include upstream annotation hiding in the operator
• GITOPS-5975 - Openshift GitOps Redis HA pods in CrashLoopBackOff after upgrade to 1.14.2
• GITOPS-5977 - openshift-gitops-controller-manager pod logs shoot up enabling keycloak
• GITOPS-6500 - Customers updating to 1.15.1 hit a "error setting app health" error
• GITOPS-3372 - Make specifying sidecar plugin image optional

CVEs

• CVE-2022-49043
• CVE-2024-11187
• CVE-2024-12087
• CVE-2024-12088
• CVE-2024-12747
• CVE-2024-56171
• CVE-2025-1244
• CVE-2025-24528
• CVE-2025-24928

References

(none)