Merge pull request #248 from cloudogu/feature/update-helm

Updated helm to v3.16.3

Author: schnatterer

.trivyignore

@@ -0,0 +1,6 @@
+# Right now there is no fix in helm, and it is likely not exploitable via our image,
+# so ignore issue for some time to be able to continue development
+# https://github.com/helm/helm/blob/v3.16.3/go.mod#L36
+# https://github.com/helm/helm/commit/194d989b235cf6f5821f068ce5ba81c55eb6be2f
+# The mean time between the last 10 helm releases is about three weeks. Lets hope for the best.
+CVE-2024-45337 exp:2025-01-15

Dockerfile

@@ -47,8 +47,8 @@ RUN apk add curl grep
 # https://kubernetes.io/blog/2022/12/12/kubernetes-release-artifact-signing/
 ARG K8S_VERSION=1.29.8
 ARG KUBECTL_CHECKSUM=038454e0d79748aab41668f44ca6e4ac8affd1895a94f592b9739a0ae2a5f06a
-# When updating, also upgrade helm image in ApplicationConfigurator
-ARG HELM_VERSION=3.15.4
+# When updating, also upgrade helm image in Config
+ARG HELM_VERSION=3.16.3
 # bash curl unzip required for Jenkins downloader
 RUN apk add --no-cache \
       gnupg \

src/main/groovy/com/cloudogu/gitops/config/Config.groovy

@@ -47,7 +47,7 @@ import static picocli.CommandLine.ScopeType
 class Config {
 
     // When updating please also update in Dockerfile
-    public static final String HELM_IMAGE = "ghcr.io/cloudogu/helm:3.15.4-1"
+    public static final String HELM_IMAGE = "ghcr.io/cloudogu/helm:3.16.3-1"
     // When updating please also adapt in Dockerfile, vars.tf and init-cluster.sh
     public static final String K8S_VERSION = "1.29"
     public static final String DEFAULT_ADMIN_USER = 'admin'