- Issued:
- 2026-05-26
- Updated:
- 2026-05-26
RHSA-2026:20947 - Security Advisory
Synopsis
Important: Red Hat OpenShift GitOps v1.20.4 security update
Type/Severity
Security Advisory: Important
Topic
Important: Red Hat OpenShift GitOps v1.20.4 security update
Description
An update is now available for Red Hat OpenShift GitOps.
Bug Fix(es) and Enhancement(s):
- GITOPS-8784 (Service-CA annotation removed from argocd-server Service during v1.12.3 -> v1.12.4 upgrade path, persists in later versions)
- GITOPS-9549 (argocd-operator fails to update some fields of the 'copyUtil' initContainer of Dex Deployment )
Solution
Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:
Fixes
- GITOPS-8784 - Service-CA annotation removed from argocd-server Service during v1.12.3 -> v1.12.4 upgrade path, persists in later versions
- GITOPS-9549 - argocd-operator fails to update some fields of the 'copyUtil' initContainer of Dex Deployment
amd64
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:4fc7f450ed27f228e9f3316c3132137b3afe7cf50a305e4dcaefd49f90a85117 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:517a98436c7ab863d0ecb5868767aa65b5b96cee51377ed9653014502f374040 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e395bde8aed3d4b96bb3c7dbcd3f482c8f3c1c8f3f7a0fd41001b1500b16ffe9 |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:f960b8e8b4d2d05ce5f8ba1231149feaeb88ad966736315916838d28a260d2ea |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:9707ca205f8ef70c1c717b69def8a97fc073fb4f107a770bbae5052bd259e86e |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:03b2aecd6940db2ec188236c3c01a82aa837f8029842223814bea1ecfbbb8528 |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:260a73551007abc59f7cdb4030b711788daf6d2f0fe3d21cf136df2ad301b40a |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:bad4019ce77d92b2ab9c8eda870766288d97cab3a1393093549d24a80aace047 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:a73af073c445b1b3cddbbfb9486ca69f7b3e406703641c1f18de720a16482185 |
| registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:b89210f76c58360210437f48dbde51d298ab1eb30cd2b77fb93c0e84dc8740c1 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:53fa2f326d7c3674e8343414a920aab142351331ca4905c21f6feec02c6df5e5 |
arm64
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:c09e60b8a28c54592e6a3ae888310fefaebe1baf41cc90fc054c15940e48f5f5 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3892296394f7bad0156308d380b2d1460c487487fb4b63ee8c3ad7b721e79cc9 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:4a679044f2c9531a5b093e74736b4c28c125485c66b8afd3fbc82f868b3b1136 |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:de91f521e7442bb7f0b9a9d8991c1219bcb9029a5eaa9a65a8ffdf2dd4e7b140 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2c10fa9cb8012acd7768c1852239783d6e39e4b3845c180498179a9c275e1e78 |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3ecda0a790ad27a0ee994f20c57e67e084bbd6da7ca25606a571a4451441f666 |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:210616e4620edfe60d2afed74676e294b41b496e35a4d3c4632861e51219393e |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a6201bf45068fdf7a8dc3ce982f7a9c4457af7f3ec1dab917a7098e6627f57cb |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8c555f4b93120f2e7ca4aa7afc76910bf0400ea1372c525b07d1ecd667ab33c1 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:180ffcba7c7f4b3b9a81296b48da243a38128fdd5c11aa2235f1eadf05996af1 |
ppc64le
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:d70756f5732cde032d921adc757cca39cd1711f421ed445bf26d7687b880f37f |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:79d5b63a421a8115669b45adb68f9a8326a5cfd4bf8c9ed6a3c6bf3d8e000470 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:d86e912f9a3b81126e6aba09366e1aa3cc01c04cc1c256859b758300915be686 |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:c4c36dbf7f774c1a1f02b8d4fc2c3539daca7dee5db327fc168269e993aedd6e |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:aa23e3d5ec1b30db7e637f872f68915c6b6144f1ebea8d229c54a79c92a84c7b |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:94dc69ec5613bb951d023fb8c3d02a24c22bdc8bbb43006a3545619eaa5aa76f |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:73b63bcef874d439971678425fbeaf145d02843c2386417c3a28fca218f87b89 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:046642d4ad460eb470537732d1e5c71c67f8e1076df952197409a6b005b15f7f |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:3ec3e316e5d9abc039c7b706d05bcb8aaf9b196272769634de7967963d15e473 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:6909137ec06f78f1bc35227b0dbf973f74695183e0cf439365af6035fbdeb15b |
s390x
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:79678aa6a7a85a443fa63ca9ed51c009d1e82cda6094a53dfacc686f5276bda5 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bdcc59168d4a265ef8733e8bd8991e0360bcdf0772531b2deb029f850877a2d7 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:f41409195124127b270fe99e62a3ed6da956dcc675e735316c155f26be6f25e2 |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0bc428c7968e0cdc1bd332dd622a26df0889213979547861733ae9cc898e37ad |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8b6661e4b32182e73a31330ce37e75c1e61186d5d11d64413545ef2396a891ff |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1daea453dafe60848af52b13ffd92703cc826337ba38e8464888f9dc457288f6 |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6e451ed56c07de8809a97f00d16597fefeb0c0f26f15593191669eed58a61a70 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:15d0458e7fb5bab543d9fc7faa7ae214fd969c21a4beaf45035f7858bb50cf24 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:1baf0b204c70ef606f61550d3c27f8955e0e62fcefe1d28da78d8deccadf7a1b |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5c1c3585ae2e9b96e904df231b6d7e38d2fb875d4736d9ed313313d43034881c |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
