Engineering Blog

                            

What’s New in Argo CD 3.3: PreDelete Hooks, OIDC Refresh & More

The Argo CD community has just unveiled the v3.3 Release Candidate, and it is packed with long-awaited features that solve major pain points for platform engineers and developers alike.

From lifecycle hooks to enhanced RBAC, here is the “TL;DR” of what’s coming in v3.3.

1. The Missing Piece: PreDelete Hooks

You’ve had PreSync, Sync, and PostSync—now the lifecycle is complete. PreDelete hooks allow you to trigger specific Jobs (like data backups or external cleanup) before Argo CD removes an application’s resources. If the cleanup job fails, the deletion is blocked, ensuring a “safety first” approach to infrastructure.

2. No More Session Timeouts

By popular demand, v3.3 introduces OIDC Background Token Refresh. If you use providers like Keycloak, you likely struggled with logouts every 5 minutes. Argo CD now proactively refreshes tokens in the background, keeping your UI sessions alive while you work.

3. Granular RBAC: Resource Name Whitelisting

Until now, clusterResourceWhitelist was a broad brush—if you allowed CRDs, you allowed all CRDs. Now, you can restrict AppProjects to specific resource names.

Example: You can grant a team permission to manage my-app-crd without giving them access to every other CRD in the cluster.

4. Speed & Performance: Shallow Clones

Large monorepos can slow down Git fetch times significantly. You can now use the --depth flag when adding a repository to enable Shallow Clones. This fetches only the required commits, potentially reducing fetch times from minutes to seconds.

5. First-Class KEDA Support

For those using Kubernetes Event-driven Autoscaling (KEDA), this release is a game-changer:

  • Pause Actions: Stop and resume ScaledObjects directly from the Argo CD UI.
  • Health Checks: Native health monitoring for ScaledJobs—no more “Unknown” status icons.

Other Notable Updates:

  • Source Hydrator: Improved monorepo support and inline parameters.
  • Security: Redis credentials can now be managed via volume mounts.
  • UI Enhancements: A new “Hard Refresh” dropdown and icons for application actions.

For the full list of contributors and technical PRs, check out the official release post:

👉 Read the full Argo CD 3.3 Announcement on the Argo Blog

Follow us for more Updates

Previous Post