github.com/argoproj/argo-cd/v2@v2.10.9/docs/operator-manual/upgrading/2.7-2.8.md (about)

     1  # v2.7 to 2.8
     2  
     3  ## Support dropped for argocd-cm plugins
     4  
     5  Config Management Plugins installed via the argocd-cm ConfigMap will not work starting with v2.8.
     6  
     7  See the [migration guide](https://argo-cd.readthedocs.io/en/stable/operator-manual/config-management-plugins/#migrating-from-argocd-cm-plugins)
     8  to upgrade your plugin.
     9  
    10  ## Tini as entrypoint
    11  
    12  With the 2.8 release `entrypoint.sh` will be removed from the containers,
    13  because starting with 2.7, the implicit entrypoint is set to `tini` in the
    14  `Dockerfile` explicitly, and the Kubernetes manifests has been updated to use
    15  it. Simply updating the containers without updating the deployment manifests
    16  will result in pod startup failures, as the old manifests are relying on
    17  `entrypoint.sh` instead of `tini`. Please make sure the manifests are updated
    18  properly before moving to 2.8.
    19  
    20  ## Filtering applied to cluster `List` API endpoint
    21  
    22  Prior to `v2.8`, the `List` endpoint on the `ClusterService` did **not** filter
    23  clusters when responding, despite accepting query parameters. This bug has
    24  been addressed, and query parameters are now taken into account to filter the
    25  resulting list of clusters.
    26  
    27  ## Configure RBAC to account for new actions
    28  
    29  2.8 introduces three new actions:
    30  
    31  * Create a Job from a CronJob
    32  * Create a Workflow from a CronWorkflow
    33  * Create a Workflow from a WorkflowTemplate
    34  
    35  When you upgrade to 2.8, RBAC policies with `applications` in the *resource*
    36  field and `*` or `action/*` in the action field, it will automatically grant the
    37  ability to use these new actions.
    38  
    39  If you would like to avoid granting these new permissions, you can update your RBAC policies to be more specific.
    40  
    41  ### Example
    42  
    43  Old:
    44  
    45  ```csv
    46  p, role:action-runner, applications, actions/, *, allow
    47  ```
    48  
    49  New:
    50  
    51  ```csv
    52  p, role:action-runner, applications, action/argoproj.io/Rollout/abort, *, allow
    53  p, role:action-runner, applications, action/argoproj.io/Rollout/promote-full, *, allow
    54  p, role:action-runner, applications, action/argoproj.io/Rollout/retry, *, allow
    55  p, role:action-runner, applications, action/argoproj.io/Rollout/resume, *, allow
    56  p, role:action-runner, applications, action/argoproj.io/Rollout/restart, *, allow
    57  p, role:action-runner, applications, action/argoproj.io/AnalysisRun/terminate, *, allow
    58  p, role:action-runner, applications, action/apps/DaemonSet/restart, *, allow
    59  p, role:action-runner, applications, action/apps/StatefulSet/restart, *, allow
    60  p, role:action-runner, applications, action/apps/Deployment/pause, *, allow
    61  p, role:action-runner, applications, action/apps/Deployment/resume, *, allow
    62  p, role:action-runner, applications, action/apps/Deployment/restart, *, allow
    63  
    64  # If you don't want to grant the new permissions, don't include the following lines
    65  p, role:action-runner, applications, action/argoproj.io/WorkflowTemplate/create-workflow, *, allow
    66  p, role:action-runner, applications, action/argoproj.io/CronWorkflow/create-workflow, *, allow
    67  p, role:action-runner, applications, action/batch/CronJob/create-job, *, allow
    68  ```
    69  
    70  ## Change default file open mode
    71  
    72  In version 2.7, the CMP plugin was changed to open Git/Helm files with all executable bits set (unless `preserveFileMode` was specified).  
    73  Version 2.8 removes the executable bits in cases where they are not necessary.