RHEA-2026:28967 - Product Enhancement Advisory

Topic

Red Hat OpenShift GitOps v1.21.0 bug fix and enhancement update

Description

An update is now available for Red Hat OpenShift GitOps.
Bug Fix(es) and Enhancement(s):

• GITOPS-7316 ([ImageUpdater][CRD] Introduce status logic)
• GITOPS-7368 (Support Redis credentials via volume mounts in the Operator)
• GITOPS-7834 (Pre populate NamespaceManagement CR)
• GITOPS-8038 (Old Browser Session JWT_Tokens can be used till the expiration timeout hit)
• GITOPS-8091 (Argo CD Agent: Add Redis TLS configuration parameters to argocd-agent, and enable them in install/dev-env/E2E environments)
• GITOPS-8096 (Source Integrity Policies: Git (single source))
• GITOPS-8739 (Unable to connect to Github Repository when using Github Apps Template)
• GITOPS-8784 (Service-CA annotation removed from argocd-server Service during v1.12.3 -> v1.12.4 upgrade path, persists in later versions)
• GITOPS-8805 (Image Updater: Support Pull Request workflow for updating images)
• GITOPS-9022 (Argo CD Agent: Support a hybrid architecture in the same Argo CD instance )
• GITOPS-9109 (Avoid cascade deletion when DeletionOrder set as Reverse for Progressive Sync)
• GITOPS-9119 (Inconsistent logformat #1821)
• GITOPS-9134 (Image Updater: Allow controller to watch specific namespaces)
• GITOPS-9138 (Image Updater: community release 1.2.0)
• GITOPS-9143 (Support PR/MR-based write-back for GitHub and GitLab)
• GITOPS-9156 (e2e tests: Support PR/MR-based write-back for GitHub and GitLab)
• GITOPS-9217 (Automatic Cleanup of Unsupported KAM Components)
• GITOPS-9236 (Migration from deprecated gcr.io/kubebuilder/kube-rbac-proxy Image to controller-runtime functionality)
• GITOPS-9248 (e2e tests: Image Updater: Allow controller to watch specific namespaces)
• GITOPS-9379 (Argo CD CLI GA for OpenShift GitOps)
• GITOPS-9394 (Default Image Updater to namespace scope on ArgoCD Operator)
• GITOPS-9426 (Move non expiring token for the service-account `openshift-gitops-argocd-dex-server` to an expiring one)
• GITOPS-9549 (argocd-operator fails to update some fields of the 'copyUtil' initContainer of Dex Deployment )
• GITOPS-9560 (Argo CD Agent: Add additional logging/detail granularity to Argo CD Agent logging)
• GITOPS-9566 (CRD mode: helmvalues write-back blanks other image tags in shared values file)
• GITOPS-9568 (GitOps operator propagates argo CD tracking annotations to dynamic roleBindings)
• GITOPS-9590 (Argo CD Agent: Grafana dashboard for exported metrics)
• GITOPS-9591 (Argo CD Agent: Grafana dashboard for exported metrics)
• GITOPS-9595 (OpenShift GitOps Operator should create ServiceMonitors for Agent)
• GITOPS-9596 (OpenShift GitOps Operator should create ServiceMonitors for Agent)
• GITOPS-9609 (Feature parity to support configuring metrics for ArgoCD CRD)
• GITOPS-9631 (First class support of Argo CD Web based terminal in operator)
• GITOPS-9633 (Add interval and scrapeTimeout fields to ArgoCD CRD, for ServiceMonitors created by operator)
• GITOPS-9634 (Add interval and scrapeTimeout fields to ArgoCD CRD, for ServiceMonitors created by operator)
• GITOPS-9697 (Image Updater: community release 1.2.1)
• GITOPS-9701 (Image Updater: Add Aliyun Container Registry (ACR) webhook handler)
• GITOPS-9755 (Fix the broken "Add Favorites action" on gitops-console-plugin)
• GITOPS-9786 (Metrics for events that are discarded by the event writer)
• GITOPS-9790 (Investigate: Destination mapping should not require agent name in AppProject sourceNamespaces)
• GITOPS-9792 (UI navigates to child apps with agent-side namespace instead of principal-side namespace (app-of-apps + autonomous mode))
• GITOPS-9937 (RC 1.21.0-2 : repo server goes to CrashLoopBackOff in FIPS mode)
• GITOPS-9973 (RC 1.21.0-2 : Image Updater CRD changes missing for writeBackConfig.pullRequest field)

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift GitOps

Fixes

• GITOPS-7316 - [ImageUpdater][CRD] Introduce status logic
• GITOPS-7368 - Support Redis credentials via volume mounts in the Operator
• GITOPS-7834 - Pre populate NamespaceManagement CR
• GITOPS-8038 - Old Browser Session JWT_Tokens can be used till the expiration timeout hit
• GITOPS-8091 - Argo CD Agent: Add Redis TLS configuration parameters to argocd-agent, and enable them in install/dev-env/E2E environments
• GITOPS-8096 - Source Integrity Policies: Git (single source)
• GITOPS-8739 - Unable to connect to Github Repository when using Github Apps Template
• GITOPS-8784 - Service-CA annotation removed from argocd-server Service during v1.12.3 -> v1.12.4 upgrade path, persists in later versions
• GITOPS-8805 - Image Updater: Support Pull Request workflow for updating images
• GITOPS-9022 - Argo CD Agent: Support a hybrid architecture in the same Argo CD instance
• GITOPS-9109 - Avoid cascade deletion when DeletionOrder set as Reverse for Progressive Sync
• GITOPS-9119 - Inconsistent logformat #1821
• GITOPS-9134 - Image Updater: Allow controller to watch specific namespaces
• GITOPS-9138 - Image Updater: community release 1.2.0
• GITOPS-9143 - Support PR/MR-based write-back for GitHub and GitLab
• GITOPS-9156 - e2e tests: Support PR/MR-based write-back for GitHub and GitLab
• GITOPS-9217 - Automatic Cleanup of Unsupported KAM Components
• GITOPS-9236 - Migration from deprecated gcr.io/kubebuilder/kube-rbac-proxy Image to controller-runtime functionality
• GITOPS-9248 - e2e tests: Image Updater: Allow controller to watch specific namespaces
• GITOPS-9379 - Argo CD CLI GA for OpenShift GitOps
• GITOPS-9394 - Default Image Updater to namespace scope on ArgoCD Operator
• GITOPS-9426 - Move non expiring token for the service-account `openshift-gitops-argocd-dex-server` to an expiring one
• GITOPS-9549 - argocd-operator fails to update some fields of the 'copyUtil' initContainer of Dex Deployment
• GITOPS-9560 - Argo CD Agent: Add additional logging/detail granularity to Argo CD Agent logging
• GITOPS-9566 - CRD mode: helmvalues write-back blanks other image tags in shared values file
• GITOPS-9568 - GitOps operator propagates argo CD tracking annotations to dynamic roleBindings
• GITOPS-9590 - Argo CD Agent: Grafana dashboard for exported metrics
• GITOPS-9591 - Argo CD Agent: Grafana dashboard for exported metrics
• GITOPS-9595 - OpenShift GitOps Operator should create ServiceMonitors for Agent
• GITOPS-9596 - OpenShift GitOps Operator should create ServiceMonitors for Agent
• GITOPS-9609 - Feature parity to support configuring metrics for ArgoCD CRD
• GITOPS-9631 - First class support of Argo CD Web based terminal in operator
• GITOPS-9633 - Add interval and scrapeTimeout fields to ArgoCD CRD, for ServiceMonitors created by operator
• GITOPS-9634 - Add interval and scrapeTimeout fields to ArgoCD CRD, for ServiceMonitors created by operator
• GITOPS-9697 - Image Updater: community release 1.2.1
• GITOPS-9701 - Image Updater: Add Aliyun Container Registry (ACR) webhook handler
• GITOPS-9755 - Fix the broken "Add Favorites action" on gitops-console-plugin
• GITOPS-9786 - Metrics for events that are discarded by the event writer
• GITOPS-9790 - Investigate: Destination mapping should not require agent name in AppProject sourceNamespaces
• GITOPS-9792 - UI navigates to child apps with agent-side namespace instead of principal-side namespace (app-of-apps + autonomous mode)
• GITOPS-9937 - RC 1.21.0-2 : repo server goes to CrashLoopBackOff in FIPS mode
• GITOPS-9973 - RC 1.21.0-2 : Image Updater CRD changes missing for writeBackConfig.pullRequest field

CVEs

(none)

References

• https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.21/