- Issued:
- 2026-09-30
- Updated:
- 2026-09-30
RHEA-2026:74014 - Product Enhancement Advisory
Synopsis
An update is now available for Red Hat OpenShift GitOps.
Type/Severity
Product Enhancement Advisory
Topic
An update is now available for Red Hat OpenShift GitOps.
Description
An update is now available for Red Hat OpenShift GitOps.
Solution
Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:
Affected Products
- Red Hat OpenShift GitOps
Fixes
- GITOPS-11390 - 1.22.0 RC-2 - /tmp not writable in promoter controller pod
- GITOPS-11339 - 1.22.0 RC-2 - v1alpha1.view.promoter.argoproj.io APIService not created by operator
- GITOPS-11335 - [Bug] 1.22.0 gitops-plugin console plugin deployed in openshift-gitops instead of openshift-gitops-operator
- GITOPS-11308 - 1.22.0 RC-1 - AppProject does not get deleted from hub upon deletion from spoke in Autonomous mode
- GITOPS-11274 - 1.22.0 RC-1 - Unable to pull image for gitops-plugin pod in disconnected env
- GITOPS-11176 - Console plugin "gitops-plugin" hides Topology Route/URL decorator on workloads in OCP web console
- GITOPS-11139 - cherry-pick Add unit tests for health & application set status to release-4.18 branch
- GITOPS-11094 - getAppSetStatus incorrectly treats ApplicationSetUpToDate=True as Error
- GITOPS-10933 - History tab throws runtime error for multi-source Applications
- GITOPS-10920 - Argo CD Agent: Fix unbounded queue growth if the size exceeds limit
- GITOPS-10896 - Argo CD Agent: adopt pre-installed AppProject in-place instead of delete and recreate
- GITOPS-10855 - Label sorting is inconsistent when object key order differs
- GITOPS-10780 - GitOps console plugin: Delete ApplicationSet disabled for non-cluster-admin users (accessReview missing namespace)
- GITOPS-10654 - use diff cache when timeout.reconciliation is disabled
- GITOPS-10585 - Legacy SA token secrets and SA references for ServiceAccount `argocd-argocd-dex-server` are not cleaned up after introducing dex-server expiring token
- GITOPS-10530 - Argo CD Agent Docs: Remove 'argocd-agentctl pki propagate' from downstream docs
- GITOPS-10491 - agent: workqueues are never deleted after agent disconnect
- GITOPS-10429 - [Regression] openshift-gitops-server goroutine leak triggered by frequent Dex token renewal restarts (v1.21.0)
- GITOPS-10130 - RC 1.21.0-7: Console plugin- Description based filter does not work as expected for AppProject
- GITOPS-10082 - RC 1.21.0-7: `View in Argo CD` option disabled in GitOps plugin view
- GITOPS-10013 - Argo CD: Address inconsistencies in admin cluster commands related to sharding
- GITOPS-9972 - RC 1.21.0-2 : AppProject navigation broken from from Application details page
- GITOPS-9851 - Incorrect namespaces used in principal/agent setup when run via 'ARGOCD_AGENT_IN_CLUSTER=true make setup-e2e'
- GITOPS-9746 - AppProject RBAC is broken when using Argo CD Agent in autonomous mode
- GITOPS-9296 - Argo Agent: Missing permission to visualize resources from Argo UI
- GITOPS-9186 - Short cluster hostname causes excessive upstream DNS queries (ndots:5)
- GITOPS-9035 - Devconsole: Layout issue in Applications page in OCP 4.18
- GITOPS-8894 - `--repo-cache-expiration` does not re-pull the Helm Chart
- GITOPS-8124 - [1.18] Viewing Application in Argo CD UI triggers refresh
- GITOPS-5804 - ArgoCD Login Link Displays Layouts Before Login Page | OCP 4.12
- GITOPS-10700 - [PROPOSAL] OpenShift GitOps Lightspeed Integration Plan
- GITOPS-10614 - Argo CD Agent: Investigate eventual consistency correctness of sync
- GITOPS-10518 - Audit Go TLS endpoints for ML-KEM readiness
- GITOPS-10494 - [xKS Support] Make gitops-must-gather compatible with non-OpenShift installations
- GITOPS-10467 - Support SPIFFE/SPIRE for agent authentication
- GITOPS-10419 - Enable ArgoCDSyncAlert routing to namespace-level user alerts
- GITOPS-10334 - argocd-agent: Support for client certificate blocklist
- GITOPS-10307 - Add Argo CD Agent label selector support to the Operator
- GITOPS-10293 - Argo CD Agent: Improvements to destination-based mapping to enable potential deprecation
- GITOPS-10243 - Productization of GitOps-Promoter (Technical Preview)
- GITOPS-10230 - Automatically hide annotations defined in the ArgoCD web UI
- GITOPS-10019 - Image Updater: deprecate logformat flag
- GITOPS-10000 - Image Updater: Add ACR (Azure) webhook handler
- GITOPS-9993 - feat: deduplicate unsent event writer events for spec/statusupdate
- GITOPS-9990 - Allow buffering of Application events at informer to reduce event volume
- GITOPS-9934 - Argo CD Agent: Further improvements to informer/event/action logging
- GITOPS-9886 - Image Updater: support applications of type plugin and plug env variables
- GITOPS-9885 - Adapt Argo CD's parameter override from Git to also support setting plugin environment
- GITOPS-9879 - Image Updater: Upgrade github.com/distribution/distribution/v3 from v3.0.0 to v3.1.1
- GITOPS-9793 - ArgoCD CR annotations fields for dex and redis
- GITOPS-9787 - GA ApplicationSets in Any Namespace in downstream
- GITOPS-9708 - ImageUpdater: Detect existence of PR/MR and skip unnecessary git operations
- GITOPS-9429 - Resolve Auto-Respect RBAC Issue in OpenShift GitOps Operator
- GITOPS-9347 - Argo CD Operator: Source Hydrator
- GITOPS-9277 - [PlaceHolder] Investigation Spike for GitOps Operator on non-OpenShift Clusters
- GITOPS-9258 - Configurable TLS settings from central TLS profile
- GITOPS-9197 - Source Integrity Policies: CLI support
- GITOPS-9173 - ImageUpdater: support apps containing source hydrator
- GITOPS-9136 - Image Updater: allow `imageName` to contain wildcards
- GITOPS-9092 - Create NetworkPolicies for Argo CD Image Updater
- GITOPS-9091 - Create NetworkPolicies for Argo CD Rollouts
- GITOPS-9033 - Support Source Hydrator in RH TP
- GITOPS-8245 - Source Integrity Policies: multi-source support
- GITOPS-8224 - [OpenShift GitOps] Central TLS Profile consistency
- GITOPS-8087 - ImageUpdater: Pass the context to argo-cd utilities (to "git" commands)
CVEs
(none)
amd64
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a27c455ed2e324861f6a7d8aac19cade936ab90a5eb3dc371f3ca7ea70868841 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:69466c031f2830e12047a50253e14d77973a81ba2f1cf52434c8ef8af6d19ce4 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:1da51694fba97a2b5dfe8d74f8ef9e830723007b6b24df00e81bf23f35daf60c |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:533d8bb90601859378444c4e2786e741a6a7317e94b2fd0ef7804c2b10109853 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5055a405fb8f084aafc69ddbb717104be43dd5e277c05afd792a9474e1d66460 |
| registry.redhat.io/openshift-gitops-1/argocd-promoter-extension-rhel9@sha256:356500ebec62044ebc8d423b421da878e4564912a9432df28567ea1f85c97518 |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:d627f3f7e2ac6231cf418c28826fae5762ba12c69b55e0e2a1b95b772d2f7a2a |
| registry.redhat.io/openshift-gitops-1/console-plugin-4-18-rhel9@sha256:79bafceec8811d313bd438221276cf4441715c7dfc127818a362b9c98d71900a |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6c13f50df55b3232a13f08e8ba5bd81604259cbdfd668fc5f841b2dfb2ce5be2 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b8f51dc66a957863669359f4f74394d19e2a3e758ce84c6d12e442837f2eb6d8 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:cea11fd831dca8382b77dc299ba92779a6c9c1078e3b1f952e4f2fce93fc76b4 |
| registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:151d79fd0a881375ec0d39b45a1be0811d34adde2d47998abb7de648d92838ec |
| registry.redhat.io/openshift-gitops-1/gitops-promoter-rhel9@sha256:90a8fd8565a97fcb01ab50c4a25510b3f9f818447b3b36fc2b5d02c219a83e09 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:a90141ab425ab305caa9b5b86d3078245854c63bccfdd97048aa4c61305fbf32 |
arm64
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47e53ce30a40b10adaae8dab04a210323fc5eedec38d27579e63d04745c07a98 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:48aff4bf103af019ea761833431810fdf8fab35ec916070692821a8f2e5d34f6 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:d0ae50b63d3af49d1f32aac96caef075b2f8a0dec46ab94015b8bf5c933fc6b6 |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:e23423dfb3bc4f7ce9970496e4165afd6a037ab1c0048b04c8c96bfa3ea7127f |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:ca97dbc1508f849b88016769567954e150a0620e1435c7175aa1146762f2ea9e |
| registry.redhat.io/openshift-gitops-1/argocd-promoter-extension-rhel9@sha256:cae60f1794844b13b5eba45049e342474d8f65eb563e62d796573161098df93b |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:6bcf5fe4bff1430de1eab9fa9576fc560037c1277cec2cd6215172492431d8ef |
| registry.redhat.io/openshift-gitops-1/console-plugin-4-18-rhel9@sha256:ce553986368358326a49ff6ce763368d2cc393bf83590f4290b17726d7ee088d |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:5af07c15bb29b6fd67434ba4b5d981e9642bbf67d872e26ae621126863f1fb8e |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:33ec23df53bc749f2d674cb204da281f6bfeb29e457e7320d151433e9ea76dfc |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:6b1cf43f0075e5e93e74d73fd730ec7faaaf40efa9974f04fefde14a27896acb |
| registry.redhat.io/openshift-gitops-1/gitops-promoter-rhel9@sha256:b4082f77602f83bcf823f9cd43274d6452d3fd1999d2e536434aabf5248ba82f |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9449032dbf448264ca388637b19dd908520079129fed011868eb99bbe0d69596 |
ppc64le
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:38924660fba713adb8d848defd2be35c7b8ff55831517cc25a46f4aa5759fe0f |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:0f935b1b4cd7905477aa334857000b3f55f327be35b01e7999f18d9bf1ca8823 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:9b88317f9fb9a86bbab2ff1d8a891aa3ccca1e43d9cfe761413348caef1afa9b |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:baca15bd7209bae4fa18758a15d5c32a8e2bf84ad4e478ad65b074f524a1a43e |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:31c94b8d4cd1a964d59ebcca358488f82a4ef513dd3cae4e82d36f1a59cea806 |
| registry.redhat.io/openshift-gitops-1/argocd-promoter-extension-rhel9@sha256:5f2b6884f8d6f1546b64768295b4040f5507c9d7a83bc9c83d3179e875013c2b |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:82393c4fb8bf391b203f00e7f56c93d5f5eecd23d7a294997afcee520d15b497 |
| registry.redhat.io/openshift-gitops-1/console-plugin-4-18-rhel9@sha256:88637765a92ef93572389422a71e3f28560cdb55857cca0400b98768461d29d9 |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:a5ffbdebe7a3adec4c913da124d61090013e3542d9a2deaa99a367deafb59442 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:4542b9c72efe04eeb23b99e5a65eb62a5b0eed974e069de5fcf43d76e8cda08c |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:27fdbca8a707be848a46eb143d1ef7f1060502416f383314474be10eb8212bf5 |
| registry.redhat.io/openshift-gitops-1/gitops-promoter-rhel9@sha256:f0253befd48f26dbedbb78aa722ea59fc6e39bd368396a0dce6ba327294580de |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:49ca10ba458909d97a5898fdb1461dcc43d6a45461e9b7b585ae76704f57110f |
s390x
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:2876b82715bdc4138da10b83e0d0afc96f0bf4da7fa5e1e8d572d008435af5c0 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:62306ce1ba42c654af3e1a2b2c6b2fcf1b53014aec719bf29d773756c799e5fa |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:f42614ee301b542f16a9dcc45cca9eaceffa2c803464f5322850484910e4e09d |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:d3efa35c623050ca690b0c70d3589d98df625db139f4f6d17cc567f5903273d8 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8ce2a379e2da1fa102a7b8f7e0bece0645e05b204b63a7551a81e54e86a7728a |
| registry.redhat.io/openshift-gitops-1/argocd-promoter-extension-rhel9@sha256:ec0ad8b9a179ad76afd1cdb04037d2295b0ca655a01ed02ed17373299a76d809 |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:5c9ffd82efaba61007c52ab2b4e46859e7ecaa7a59a4e44c8a57eb26558ec54f |
| registry.redhat.io/openshift-gitops-1/console-plugin-4-18-rhel9@sha256:8ba842ad71c4098f178244e2d0129f2c149670ffa5f17eaef7d3184e7e8bf83b |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:54305b2b9342833a3b301232b3d601d54c0da477bb75d705e2b155daa3b54ff9 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:77a4b6c5cfbda8aefc7f53029d5333fd7b702f8ffb449ef23b78a431c7e42c49 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:2ebf4f8d10be7deb11867f310a2d5581505bccd5478848351b84116327a88526 |
| registry.redhat.io/openshift-gitops-1/gitops-promoter-rhel9@sha256:a50c9e125159b635eb572375dab267fa5150ee06173f03c02a1f1ee15bf52d1a |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:584045c7cd55f6477b069c72a86aa16d25d4730a38722f1b7e1fd5018f7186f0 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.