chore: (PSKD-1403) Dependency Version Bumps (#446)

* fix: update versions to address CVEs

Signed-off-by: chjmil <christopher.miller@sas.com>

* chore: more version bumps

Signed-off-by: chjmil <christopher.miller@sas.com>

* chore: update docker image based on new azure linux base image

Signed-off-by: chjmil <christopher.miller@sas.com>

* chore: more version bumps

Signed-off-by: chjmil <christopher.miller@sas.com>

* docs: update versions

Signed-off-by: chjmil <christopher.miller@sas.com>

---------

Signed-off-by: chjmil <christopher.miller@sas.com>

Author: saschjmil

.github/workflows/linter-analysis.yaml

@@ -49,7 +49,7 @@ jobs:
     - name: Setup Terraform
       uses: hashicorp/setup-terraform@v3
       with:
-        terraform_version: "^1.9.8"
+        terraform_version: "^1.10.5"
         terraform_wrapper: false
 
     - name: Setup TFLint

Dockerfile

@@ -1,17 +1,17 @@
-ARG TERRAFORM_VERSION=1.9.6
-ARG AZURECLI_VERSION=2.64.0
+ARG TERRAFORM_VERSION=1.10.5
+ARG AZURECLI_VERSION=2.70.0
 
 FROM hashicorp/terraform:$TERRAFORM_VERSION as terraform
 FROM mcr.microsoft.com/azure-cli:$AZURECLI_VERSION
-ARG KUBECTL_VERSION=1.30.6
+ARG KUBECTL_VERSION=1.30.10
 
 WORKDIR /viya4-iac-azure
 
 COPY --from=terraform /bin/terraform /bin/terraform
 COPY . .
 
-RUN yum -y install git openssh jq which curl \
-  && yum clean all && rm -rf /var/cache/yum \
+RUN tdnf -y install git which \
+  && tdnf clean all && rm -rf /var/cache/tdnf \
   && curl -sLO https://dl.k8s.io/release/v$KUBECTL_VERSION/bin/linux/amd64/kubectl \
   && chmod 755 ./kubectl /viya4-iac-azure/docker-entrypoint.sh \
   && mv ./kubectl /usr/local/bin/kubectl \

README.md

@@ -57,10 +57,10 @@ This project supports two options for running Terraform scripts:
 Access to an **Azure Subscription** and an [**Identity**](./docs/user/TerraformAzureAuthentication.md) with the *Contributor* role are required.
 
 #### Terraform Requirements:
-- [Terraform](https://www.terraform.io/downloads.html) - v1.9.6
-- [kubectl](https://kubernetes.io/docs/tasks/tools/install-kubectl) - v1.30.6
+- [Terraform](https://www.terraform.io/downloads.html) - v1.10.5
+- [kubectl](https://kubernetes.io/docs/tasks/tools/install-kubectl) - v1.30.10
 - [jq](https://stedolan.github.io/jq/) - v1.6
-- [Azure CLI](https://docs.microsoft.com/en-us/cli/azure) - (optional - useful as an alternative to the Azure Portal) - v2.64.0
+- [Azure CLI](https://docs.microsoft.com/en-us/cli/azure) - (optional - useful as an alternative to the Azure Portal) - v2.70.0
 
 #### Docker Requirements:
 - [Docker](https://docs.docker.com/get-docker/)

container-structure-test.yaml

@@ -21,7 +21,7 @@ commandTests:
   - name: "terraform version"
     command: "terraform"
     args: ["--version"]
-    expectedOutput: ["Terraform v1.9.6"]
+    expectedOutput: ["Terraform v1.10.5"]
   - name: "python version"
     command: "python3"
     args: ["--version"]
@@ -32,11 +32,11 @@ commandTests:
       - -c
       - |
         az version -o tsv
-    expectedOutput: ["2.64.0\t2.64.0\t1.1.0"]
+    expectedOutput: ["2.70.0\t2.70.0\t1.1.0"]
   - name: "kubectl version"
     command: "kubectl"
     args: ["version", "--client"]
-    expectedOutput: ["Client Version: v1.30.6"]
+    expectedOutput: ["Client Version: v1.30.10"]
 
 metadataTest:
   workdir: "/viya4-iac-azure"

versions.tf

@@ -3,16 +3,16 @@
 
 terraform {
 
-  required_version = ">= 1.9.6"
+  required_version = ">= 1.10.0"
 
   required_providers {
     azurerm = {
       source  = "hashicorp/azurerm"
-      version = "4.3.0"
+      version = "4.21.1"
     }
     azuread = {
       source  = "hashicorp/azuread"
-      version = "~>2.53"
+      version = "~>3.1"
     }
     external = {
       source  = "hashicorp/external"
@@ -36,7 +36,7 @@ terraform {
     }
     kubernetes = {
       source  = "hashicorp/kubernetes"
-      version = "~>2.32"
+      version = "~>2.36"
     }
   }
 }