diff --git a/ansible/group_vars/all/oas.yml b/ansible/group_vars/all/oas.yml
index 29c6c8e63d58b768ea73bc77e690deb55718be18..09f5968e159890ee563d8bc6faa28d5e6d4951dc 100644
--- a/ansible/group_vars/all/oas.yml
+++ b/ansible/group_vars/all/oas.yml
@@ -14,7 +14,7 @@ collabora_password: "{{ lookup('password', './secrets/collabora_admin_password c
 prometheus_grafana_admin_password: "{{ lookup('password', './secrets/prometheus_grafana_admin_password chars=ascii_letters') }}"
 
 # git repo versions
-git_helmfiles_version: '05041e5a62128633b436e2d9db7c60871d999a30'
+git_helmfiles_version: '2c0fcbeda044d53cf742280936baa87b8b22d139'
 git_charts_version: 'HEAD'
 git_local_storage_version: 'HEAD'
 
diff --git a/ansible/roles/setup/tasks/main.yml b/ansible/roles/setup/tasks/main.yml
index 650ebb6eff2d2aa9c520f5363ca44c314518b893..f72f6164b769e6a1dac978c4ab615c37600b8c57 100644
--- a/ansible/roles/setup/tasks/main.yml
+++ b/ansible/roles/setup/tasks/main.yml
@@ -98,7 +98,7 @@
 - name: Install CRDs for cert-manager
   tags:
     - cert-manager
-  command: /snap/bin/kubectl apply -f https://raw.githubusercontent.com/jetstack/cert-manager/release-0.7/deploy/manifests/00-crds.yaml
+  command: /snap/bin/kubectl apply -f https://raw.githubusercontent.com/jetstack/cert-manager/release-0.8/deploy/manifests/00-crds.yaml
 
 - name: Prevent validation deadlock for cert-manager
   tags: