Upgrade ingress-nginx (#271)

* Upgrade ingress-nginx

Fixes cve-2025-1974
https://kubernetes.io/blog/2025/03/24/ingress-nginx-cve-2025-1974/

* update nginx in developers.md

---------

Co-authored-by: Thomas Michael <[email protected]>

Author: schnatterer

Diff for: docs/developers.md

@@ -568,7 +568,7 @@ skopeo copy docker://ghcr.io/cloudogu/mailhog:v1.0.1 --dest-creds Proxy:Proxy123
 skopeo copy docker://ghcr.io/external-secrets/external-secrets:v0.9.16 --dest-creds Proxy:Proxy12345 --dest-tls-verify=false  docker://localhost:30000/proxy/external-secrets
 skopeo copy docker://hashicorp/vault:1.14.0 --dest-creds Proxy:Proxy12345 --dest-tls-verify=false  docker://localhost:30000/proxy/vault
 skopeo copy docker://bitnami/nginx:1.23.3-debian-11-r8 --dest-creds Proxy:Proxy12345 --dest-tls-verify=false  docker://localhost:30000/proxy/nginx
-skopeo copy docker://registry.k8s.io/ingress-nginx/controller:v1.9.6 --dest-creds Proxy:Proxy12345 --dest-tls-verify=false docker://localhost:30000/proxy/ingress-nginx
+skopeo copy docker://registry.k8s.io/ingress-nginx/controller:v1.12.1 --dest-creds Proxy:Proxy12345 --dest-tls-verify=false docker://localhost:30000/proxy/ingress-nginx
 
 # Monitoring
 # Using latest will lead to failure with

Diff for: src/main/groovy/com/cloudogu/gitops/config/Config.groovy

@@ -649,7 +649,7 @@ class Config {
         IngressNginxHelmSchema helm = new IngressNginxHelmSchema(
                 chart: 'ingress-nginx',
                 repoURL: 'https://kubernetes.github.io/ingress-nginx',
-                version: '4.11.3'
+                version: '4.12.1'
         )
         static class IngressNginxHelmSchema extends HelmConfigWithValues {
             @Option(names = ['--ingress-nginx-image'], description = HELM_CONFIG_IMAGE_DESCRIPTION)

Diff for: src/test/groovy/com/cloudogu/gitops/features/IngressNginxTest.groovy

@@ -41,8 +41,8 @@ class IngressNginxTest {
         def actual = parseActualYaml()
         assertThat(actual['controller']['replicaCount']).isEqualTo(2)
 
-        verify(deploymentStrategy).deployFeature('https://kubernetes.github.io/ingress-nginx', 'ingress-nginx',
-                'ingress-nginx', '4.11.3','ingress-nginx',
+        verify(deploymentStrategy).deployFeature(config.features.ingressNginx.helm.repoURL, 'ingress-nginx',
+                config.features.ingressNginx.helm.chart, config.features.ingressNginx.helm.version,'ingress-nginx',
                 'ingress-nginx', temporaryYamlFile)
         assertThat(parseActualYaml()['controller']['resources']).isNull()
         assertThat(parseActualYaml()['controller']['metrics']).isNull()
@@ -104,9 +104,9 @@ class IngressNginxTest {
 
         def helmConfig = ArgumentCaptor.forClass(Config.HelmConfig)
         verify(airGappedUtils).mirrorHelmRepoToGit(helmConfig.capture())
-        assertThat(helmConfig.value.chart).isEqualTo('ingress-nginx')
-        assertThat(helmConfig.value.repoURL).isEqualTo('https://kubernetes.github.io/ingress-nginx')
-        assertThat(helmConfig.value.version).isEqualTo('4.11.3')
+        assertThat(helmConfig.value.chart).isEqualTo(config.features.ingressNginx.helm.chart)
+        assertThat(helmConfig.value.repoURL).isEqualTo(config.features.ingressNginx.helm.repoURL)
+        assertThat(helmConfig.value.version).isEqualTo(config.features.ingressNginx.helm.version)
         verify(deploymentStrategy).deployFeature(
                 'http://scmm-scm-manager.default.svc.cluster.local/scm/repo/a/b',
                 'ingress-nginx', '.', '1.2.3','ingress-nginx',