- Issued:
- 2026-03-25
- Updated:
- 2026-03-25
RHEA-2026:5819 - Product Enhancement Advisory
Synopsis
Red Hat OpenShift GitOps v1.20.0 bug fix and enhancement update
Type/Severity
Product Enhancement Advisory
Topic
Red Hat OpenShift GitOps v1.20.0 bug fix and enhancement update
Description
An update is now available for Red Hat OpenShift GitOps.
Bug Fix(es) and Enhancement(s):
- GITOPS-1505 (Incorrect links to applications managed by other argo instances)
- GITOPS-3050 (Argo Rollouts in Console)
- GITOPS-6250 (ArgoCD progressive sync to allow removal of the application in specific order)
- GITOPS-6765 (Retry with newer commits after timeout)
- GITOPS-7264 (Ability to view pod logs on managed systems)
- GITOPS-7363 (Argo App Projects in Console)
- GITOPS-7387 (Progressive Sync MVP for beta)
- GITOPS-7391 (Certificate management: K8s trust anchors in GitOps operator)
- GITOPS-7787 (Create NetworkPolicies for Core Argo CD components)
- GITOPS-7797 (Progress Sync Unknown in UI (cherry-pick #24202 for 3.2))
- GITOPS-7840 (Clear ApplicationSet applicationStatus when ProgressiveSync is disabled (cherry-pick #24587 for 3.2)
- GITOPS-7958 (Argo CD Agent: Add a 'check-config' command to argocd-agentctl which will verify the user's configuration)
- GITOPS-8001 (ownerReferences in configmaps in ArgoCD namespace use incorrect apiVersion as `v1alpha1` for ArgoCD instance)
- GITOPS-8017 (Support for External Authentication for SingleSignOn in GitOps)
- GITOPS-8018 (Incorrect comparison logic when comparing lists)
- GITOPS-8047 (Doc incorrect link (how managed-by-url) works)
- GITOPS-8107 ([OpenShift GitOps] Red Hat Operator Base Image Change to UBI Minimal)
- GITOPS-8119 (Argo CD Agent: Agent and principal should integrate with opentelemetry)
- GITOPS-8120 (Argo CD Agent: Agent and principal should integrate with opentelemetry)
- GITOPS-8127 (Remove Keycloak/RHSSO references from documentation)
- GITOPS-8128 (Argo CD Agent: Make terminals for pods on workload clusters working on the control plane )
- GITOPS-8129 (Argo CD Agent: Make terminals for pods on workload clusters working on the control plane)
- GITOPS-8162 (Argo CD Agent: Add additional checks to 'check-config' argocd-agentctl command)
- GITOPS-8163 (Argo CD Agent: Add Behavioural E2E tests to argocd-operator and gitops-operator to verify agent fxnality)
- GITOPS-8164 (Argo CD Agent: Enable managed/autonomous agent install via operator)
- GITOPS-8217 (Enhance GitOps Operator to Support Wildcards in ApplicationSet Source Namespaces)
- GITOPS-8290 (Argo CD Agent: Live resource view should take resource tracking configuration into account )
- GITOPS-8291 (Argo CD Agent: Live resource view should take resource tracking configuration into account )
- GITOPS-8416 (Argo CD Agent: Add behavioural E2E tests in argocd-operator)
- GITOPS-8531 (Argo CD Agent: Application .spec.destination field can be used to map Applications to clusters)
- GITOPS-8532 (Argo CD Agent: Application .spec.destination field can be used to map Applications to clusters)
- GITOPS-8533 (Argo CD Agent: Ability to toggle logging from certain sub systems)
- GITOPS-8534 (Argo CD Agent: Ability to toggle logging from certain sub systems)
- GITOPS-8544 (ImageUpdater CR with Legacy Annotation Reading)
- GITOPS-8552 (Implement: ImageUpdater CR with Legacy Annotation Reading)
- GITOPS-8553 (Unit Tests: ImageUpdater CR with Legacy Annotation Reading)
- GITOPS-8554 (E2E Tests: ImageUpdater CR with Legacy Annotation Reading)
- GITOPS-8638 (ImageUpdater: writes duplicate images in Kustomize config)
- GITOPS-8679 (Argo CD Agent: Add behaviour E2E tests to gitops-operator repo)
- GITOPS-8680 (Argo CD Agent: Write draft downstream docs for installing argo cd agent managed/autonomous agent via ArgoCD CR)
- GITOPS-8773 (Console plugin Applications page is broken with cannot read properties of undefined JS error)
- GITOPS-8875 (Image Updater: git process exhaustion when retrieving git access token)
- GITOPS-8876 (Image Updater: Prevent users from referencing Applications in any namespace)
- GITOPS-8929 (Remove unused packages and depednency in GitOps component images)
- GITOPS-9075 (Operator: Add support for destination based mapping)
- GITOPS-9090 (Create NetworkPolicies for Argo CD Agent )
Solution
Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:
Fixes
- GITOPS-1505 - Incorrect links to applications managed by other argo instances
- GITOPS-3050 - Argo Rollouts in Console
- GITOPS-6250 - ArgoCD progressive sync to allow removal of the application in specific order
- GITOPS-6765 - Retry with newer commits after timeout
- GITOPS-7264 - Ability to view pod logs on managed systems
- GITOPS-7363 - Argo App Projects in Console
- GITOPS-7387 - Progressive Sync MVP for beta
- GITOPS-7391 - Certificate management: K8s trust anchors in GitOps operator
- GITOPS-7787 - Create NetworkPolicies for Core Argo CD components
- GITOPS-7797 - Progress Sync Unknown in UI (cherry-pick #24202 for 3.2)
- GITOPS-7840 - Clear ApplicationSet applicationStatus when ProgressiveSync is disabled (cherry-pick #24587 for 3.2
- GITOPS-7958 - Argo CD Agent: Add a 'check-config' command to argocd-agentctl which will verify the user's configuration
- GITOPS-8001 - ownerReferences in configmaps in ArgoCD namespace use incorrect apiVersion as `v1alpha1` for ArgoCD instance
- GITOPS-8017 - Support for External Authentication for SingleSignOn in GitOps
- GITOPS-8018 - Incorrect comparison logic when comparing lists
- GITOPS-8047 - Doc incorrect link (how managed-by-url) works
- GITOPS-8107 - [OpenShift GitOps] Red Hat Operator Base Image Change to UBI Minimal
- GITOPS-8119 - Argo CD Agent: Agent and principal should integrate with opentelemetry
- GITOPS-8120 - Argo CD Agent: Agent and principal should integrate with opentelemetry
- GITOPS-8127 - Remove Keycloak/RHSSO references from documentation
- GITOPS-8128 - Argo CD Agent: Make terminals for pods on workload clusters working on the control plane
- GITOPS-8129 - Argo CD Agent: Make terminals for pods on workload clusters working on the control plane
- GITOPS-8162 - Argo CD Agent: Add additional checks to 'check-config' argocd-agentctl command
- GITOPS-8163 - Argo CD Agent: Add Behavioural E2E tests to argocd-operator and gitops-operator to verify agent fxnality
- GITOPS-8164 - Argo CD Agent: Enable managed/autonomous agent install via operator
- GITOPS-8217 - Enhance GitOps Operator to Support Wildcards in ApplicationSet Source Namespaces
- GITOPS-8290 - Argo CD Agent: Live resource view should take resource tracking configuration into account
- GITOPS-8291 - Argo CD Agent: Live resource view should take resource tracking configuration into account
- GITOPS-8416 - Argo CD Agent: Add behavioural E2E tests in argocd-operator
- GITOPS-8531 - Argo CD Agent: Application .spec.destination field can be used to map Applications to clusters
- GITOPS-8532 - Argo CD Agent: Application .spec.destination field can be used to map Applications to clusters
- GITOPS-8533 - Argo CD Agent: Ability to toggle logging from certain sub systems
- GITOPS-8534 - Argo CD Agent: Ability to toggle logging from certain sub systems
- GITOPS-8544 - ImageUpdater CR with Legacy Annotation Reading
- GITOPS-8552 - Implement: ImageUpdater CR with Legacy Annotation Reading
- GITOPS-8553 - Unit Tests: ImageUpdater CR with Legacy Annotation Reading
- GITOPS-8554 - E2E Tests: ImageUpdater CR with Legacy Annotation Reading
- GITOPS-8638 - ImageUpdater: writes duplicate images in Kustomize config
- GITOPS-8679 - Argo CD Agent: Add behaviour E2E tests to gitops-operator repo
- GITOPS-8680 - Argo CD Agent: Write draft downstream docs for installing argo cd agent managed/autonomous agent via ArgoCD CR
- GITOPS-8773 - Console plugin Applications page is broken with cannot read properties of undefined JS error
- GITOPS-8875 - Image Updater: git process exhaustion when retrieving git access token
- GITOPS-8876 - Image Updater: Prevent users from referencing Applications in any namespace
- GITOPS-8929 - Remove unused packages and depednency in GitOps component images
- GITOPS-9075 - Operator: Add support for destination based mapping
- GITOPS-9090 - Create NetworkPolicies for Argo CD Agent
CVEs
(none)
amd64
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:1cd6bf214640fbf83e27bc22d79825766c83836c7c980331c140a3834bc33aa0 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5ab7948b9db1a38a6b3a2b659a5bc3a545d3e39038fe28a1162b3ca634f05475 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a1c4c2380c4f21a1cb546c2bf36b2f5cd2e9fb9f8d6a6eda712348414ff94a3e |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a136fa266f142676ce378216d5a29f90ba88ac1a8d476bf358fdc834b19fe0c3 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:049be7d976bc083d6086103612c418f3ac3077c392cee8b2722c5aaee7964675 |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:e090ef8fc7f889763605431641af92f187804dc56270e97f144b6d04ce7625bb |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:650e79b41a1445b41d9357c6331d307db8dc9293cf1df925fc7bac8117412feb |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ab29bbd4b6a8b5a77bfeccdef2667c2f75bfb78e572252e6583b6b2412d1b258 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:77d729d18afbc9cb6e568336a5da4941f128a496e4866e304cf085ed9bbd2936 |
| registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:2aca0e62daad8644afb8725504ad0e20c55a7cf960841c9ec793904adedaf4fd |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:bfc36c0842109d0b19d27e75ca7988c1fa6fc8e48877619eb5d2a53adb1c34f1 |
arm64
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e180689fb7f2da81c2d93ebed0d47383d656b14f9d4e10ca77b3e897f3008ed5 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:9a967ddc1bb2c15b27e404a5b51573723742198f308df278c53a13df3b0255ae |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:b9faa72c9ca94936fe36f907255132ec08b8632c7f50f89040f697dfb52cd38b |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:2af90ec400eccda6b2a0acaf64a31d29c753ab4712ec232466e7f66e1ac5faf8 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:cd87d1d37b72498ee7477410a540668fb8ac071284464a41d7797f6a1a9ee0f9 |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:b325ce7cf1d9d00c4d28869b8b837fb8e40478b83dcb45e497cbf4df60cabbb5 |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:437d9b0aab6997d28244e5d54e079566bb3e164d06c293a63f4b76496f604968 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:39381a44b099df458a6850346aa331184d1162625ded56373b0f993282f177bf |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ce832c4fcd081767b63c7a054e212e5320884a94dbadeda435b32e6abc642e40 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:73619fa773fa42201e77db873c11ca32b062f41fb273bcde4adefc10a386b074 |
ppc64le
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:000dd5b411bff7cf85efd5527984bd46d482dcbca7fd7fcbfd901ef8393066c9 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:13ba91831be622b8b727fef3262e11b633aa5bdfa882e85475b20b7d2834df54 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:3271cd3facf55b6d7e2ee36ce94cb318012f817e6525b0fae8afa8d2863944ee |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:b3a177932fea0b7c8b8af84d109c75daad3cb74b1b2699bb46db4f4c71da95c9 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:398eb341f2d9829577fa3ea826c22f82b5ab09cd690c83321046ef5cabd4a902 |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:73d4d2013aa8e03bf956e9a2c9acc66c5088286f0797a1254f44dd99345b3147 |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:61d78a54b7f955fedc17398035637df1506eab1f47c034ab27708d05ea1a3c83 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:139f11b3674317223f2e194a59103e9bee1f7dd84409db68b928918e50934085 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f31944d6ff4a8b7d7c1c64e0eeca95399e4275847476d03c0fed4d6265bb4a26 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:f40b3af47b87cee1354c22a30340a0bc5709b7058fcea5805377201744bc8ef1 |
s390x
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00d04e8aafa32ea2dab4cff2fc8778bcc0177967630d79f7aeebd43f7f8f2f78 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:dbe45829d9fd78334b69f4b35aad847338ae3ac6ea7c3c9975870ec732edcf6b |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:0a1d5efbd00e79cba8d5d9b17e97e49aa741be6df7c5d5836312ffc6d3ac617e |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:52561a05b93ce40402261da805702b19617f1f66a993c143b0884815e76f0ac0 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1f9dc7c4eb36545f47918ccd373c184a3d5f12f656fed3f68a80021ef987ccbb |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:dae21c7ceb9971d5cea56d1ee5cdd2fcb3924dc70ad167727bd69fa7ccc36590 |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:85e76be822419aa4ea52f2422a269f29967a58a5c9b070fd9f921448ac19474e |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:91e496287b401f96fe4efe2cf960f814697c55347074891fff9e5d38be7e14a0 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:19044c79f74719fe8b59481ac1f4f5667baca30871dc134b31b476ed36b61586 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:44c2088107334d1f9270100f50b7cf3fad8c0172050748692169a2c3e38545e8 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.