gitopsMedium
Fix: ArgoCD Image Updater Not Detecting New Images
New container images pushed to registry but ArgoCD doesn't update
!Symptoms
- New container images pushed to registry but ArgoCD doesn't update
- Image updater logs show no new images found
- Deployment stuck on old image tag
- Auto-image update annotations present but not working
?Root Causes
- Image updater not configured with correct registry credentials
- Update strategy annotation incorrect or missing
- Image tag pattern doesn't match pushed tags (semver vs latest)
- Registry rate limiting blocking image list API calls
- Image updater pod not running or in CrashLoopBackOff
#Diagnosis Steps
- 1Check image updater logs: `kubectl logs -n argocd -l app.kubernetes.io/name=argocd-image-updater`
- 2Verify annotations on the ArgoCD Application resource
- 3Test registry access: `argocd-image-updater test <image>`
- 4Check image list API manually: `crane ls <registry>/<image>`
- 5Verify the update strategy matches your tagging convention
>Fix
- 1Configure registry credentials as a Kubernetes secret referenced by image updater
- 2Fix annotations: `argocd-image-updater.argoproj.io/image-list: myapp=registry/image`
- 3Set correct update strategy: `semver`, `latest`, `name`, or `digest`
- 4Increase registry API rate limits or add caching
- 5Restart image updater pod after configuration changes
*Prevention
- Use consistent image tagging conventions (semver recommended)
- Monitor image updater logs for authentication failures
- Use write-back method to commit image updates to Git for audit trail
- Set up alerts for image updater failures
- Test image updater config in a staging environment first
Related Error Messages
rate limit exceededunauthorized: authentication requiredno new image foundcould not get tags from registry