Argo CD Image Updater Standard
Image Updater is used for internal Dev, Test, and Prod environments according to branch/tag policy. It must not adopt arbitrary tags.
Recommended tag policy
Section titled “Recommended tag policy”- Dev tracks
develop-<sha>or a constrained develop alias. - Test tracks release-branch tags for the active release.
- Prod tracks final release tags or an explicitly approved main tag.
Use allow-tags rules and an update strategy appropriate to the tag scheme. Registry credentials are read-only. Applications identify images explicitly and avoid ambiguous names.
Where possible, use a Git write-back method so image changes are visible as commits. If application-spec write-back is used, retain controller logs and deployment records. Argo CD remains the deployment authority; Image Updater selects eligible image versions.