tag: Argo-Cd · 5 items
- Platform/SRE — Plan: Teams running Argo CD should schedule an upgrade to 3.4.8 this sprint: it patches three CVEs in UI JS dependencies (none KEV-listed, EPSS ≤ 0.01) and fixes an auto-sync regression that silently skips syncs when a newer commit arrives during an active sync. No hard deadline, but the sync bug is a silent correctness risk on busy clusters.
- CI/CD — Skip
- Leader — Skip
- Signals: Argo CD 3.4 supported · CVE-2026-14257 — CISA KEV: not listed, EPSS 0.00 · CVE-2026-49978 — CISA KEV: not listed, EPSS 0.00 · CVE-2026-59869 — CISA KEV: not listed, EPSS 0.01
- Platform/SRE — Plan: The managed EKS Argo CD capability now accepts argocd-cm ConfigMap settings, including custom health checks for CRDs that can hold sync waves until resources finish provisioning. If your clusters use this managed capability, evaluate adding custom health checks for your Custom Resources this quarter.
- CI/CD — Learn: Custom health check logic for CRDs in EKS-managed Argo CD means sync wave advancement can now be gated on actual resource readiness rather than Argo CD’s default no-op behavior; worth factoring into GitOps deployment design if your org uses this specific managed capability.
- Leader — Skip
- Platform/SRE — Plan: v3.3.14 patches CLI secret-mask spoofing and fixes secrets leaking in last-applied-configuration annotations; CVE-2026-49978 (DOMPurify) is not KEV-listed and carries EPSS 0.00, so no emergency — schedule the upgrade within the quarter.
- CI/CD — Plan: Argo CD is explicitly in scope as the GitOps delivery layer; the server-side diff secret-mask spoofing fix could expose sensitive data in pipeline contexts — plan the upgrade to v3.3.14 this quarter.
- Leader — Skip
- Signals: Argo CD 3.3 supported · CVE-2026-49978 — CISA KEV: not listed, EPSS 0.00
- Platform/SRE — Plan: ArgoCD runs as a control-plane component on managed clusters; a new GA minor release warrants scheduling a controller upgrade review this quarter to pick up any stability or feature improvements.
- CI/CD — Plan: ArgoCD 3.5.0 is a GA minor release directly in the deployment path; evaluate and plan adoption this quarter, particularly if you depend on any recently deprecated APIs or new sync/rollout features.
- Leader — Skip
- Signals: Argo CD 3.5 supported
- Platform/SRE — Plan: New GA minor release of a tool platform teams operate on-cluster; appset concurrency and configurable webhook jitter are operationally relevant improvements worth scheduling an upgrade to this quarter.
- CI/CD — Plan: SLSA Level 3 provenance for all container images and CLI binaries and new Source Integrity CLI support are meaningful supply-chain hardening steps worth adopting; plan to upgrade and enable provenance verification in deployment pipelines.
- Leader — Skip
- Signals: Argo CD 3.5 supported