Skip to content

0.28.0

Choose a tag to compare

View all tags
@codefresh-v2-pipelines codefresh-v2-pipelines released this 03 Mar 14:26
· 7 commits to stable/0.28 since this release
0.28.0
04e4b5b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Installation

To get Helm chart for this release run:

helm pull oci://quay.io/codefresh/gitops-runtime --version 0.28.0

Breaking Changes

Argo CD v3.3.2 Compatibility

Argo CD has been updated to v3.3.2

Known Issue: Version Validation for BYOA

If you are using BYOA (Bring Your Own Argo) with ArgoCD v3.3.2, you may encounter a version validation error during the upgrade. This is due to a constraint mismatch in the validation hook.

Workaround: Disable the validation by adding the following to your values file:

installer:
  skipValidation: true

This will bypass the version check and allow the installation to proceed. This issue will be addressed in future releases.

⚠️ Important Notice

Users who have an Argo CD Application that manages their Argo CD installation must enable the following configurations for the upgrade to succeed:

  • Sync option: ServerSideApply=true
  • Annotation: argocd.argoproj.io/compare-options: ServerSideDiff=true

Recommendations

Fresh Installation (v0.28+)

If you install cf-gitops-runtime from scratch, the initial commit in your ISC repository will contain all required settings for the self-managing "cf-gitops-runtime" application. No additional action is needed.

Upgrade from v0.27.x or Earlier

If you are upgrading from version < 0.28, perform the following manual actions in your ISC repository:

  1. Update Argo CD Application Configuration

    Edit <path-to-ISC-repo>/resources/codefresh/cf-gitops-runtime.yaml and add:

     metadata:
    annotations:
        argocd.argoproj.io/compare-options: ServerSideDiff=true
    syncPolicy:
    syncOptions:
      - ServerSideApply=true

  2. Update Chart Version

    Edit resources/<runtime_name>/chart/Chart.yaml and update the gitops-runtime version:

    apiVersion: v2
appVersion: 1.0.0
description: Codefresh gitops runtime umbrella chart
name: codefresh-gitops-runtime
version: 0.28.0
dependencies:
  - name: gitops-runtime
    repository: oci://quay.io/codefresh
    version: 0.28.0

Security

Migration to Docker Hardened Images (DHI)

We have migrated our core components to Docker Hardened Images (DHI). This transition significantly improves the overall security posture and performance of the runtime:

Reduced Surface Area — DHI images are more lightweight, containing only the necessary binaries.

Enhanced Security — These images are built with stricter security standards, reducing the number of vulnerabilities.

Components Migrated:

runtime-installer images moved to DHI.

app-proxy-init migrated to the DHI base image.

Assets 2
Loading