diff --git a/infrastructure/istio/helmfile.d/05-istio-base.yaml b/infrastructure/istio/helmfile.d/05-istio-base.yaml
index 5446ebfd..b40d0eda 100644
--- a/infrastructure/istio/helmfile.d/05-istio-base.yaml
+++ b/infrastructure/istio/helmfile.d/05-istio-base.yaml
@@ -10,3 +10,4 @@ releases:
   - name: istio-base
     namespace: istio-system
     chart: istio/base
+    version: 1.12.5
diff --git a/infrastructure/istio/helmfile.d/06-istio-cni.yaml b/infrastructure/istio/helmfile.d/06-istio-cni.yaml
index d2c8b009..b7848732 100644
--- a/infrastructure/istio/helmfile.d/06-istio-cni.yaml
+++ b/infrastructure/istio/helmfile.d/06-istio-cni.yaml
@@ -10,4 +10,5 @@ releases:
   - name: istio-cni
     namespace: kube-system
     chart: istio/cni
+    version: 1.12.5
     installed: {{ eq .Environment.Name "cni" | toYaml }}
diff --git a/infrastructure/istio/helmfile.d/10-istiod.yaml b/infrastructure/istio/helmfile.d/10-istiod.yaml
index 8198629d..436cc80b 100644
--- a/infrastructure/istio/helmfile.d/10-istiod.yaml
+++ b/infrastructure/istio/helmfile.d/10-istiod.yaml
@@ -10,6 +10,7 @@ releases:
   - name: istiod
     namespace: istio-system
     chart: istio/istiod
+    version: 1.12.5
     wait: true
     values:
       - ./values/istiod.values.yaml.gotmpl
diff --git a/infrastructure/istio/helmfile.d/11-istio-ingress.yaml b/infrastructure/istio/helmfile.d/11-istio-ingress.yaml
index dc152b2f..8891bb2e 100644
--- a/infrastructure/istio/helmfile.d/11-istio-ingress.yaml
+++ b/infrastructure/istio/helmfile.d/11-istio-ingress.yaml
@@ -12,6 +12,7 @@ releases:
   - name: istio-ingressgateway
     namespace: istio-ingress
     chart: istio/gateway
+    version: 1.12.5
     # this fails the installation because helm waits for the loadbalancer to get an ip.
     # But the IP is not available until someone runs minikube tunnel
     #wait: true
diff --git a/infrastructure/istio/helmfile.d/values/istiod.values.yaml.gotmpl b/infrastructure/istio/helmfile.d/values/istiod.values.yaml.gotmpl
index 04bc38f7..5d43ab6e 100644
--- a/infrastructure/istio/helmfile.d/values/istiod.values.yaml.gotmpl
+++ b/infrastructure/istio/helmfile.d/values/istiod.values.yaml.gotmpl
@@ -1,5 +1,5 @@
 global:
-  tag: 1.12.2
+  tag: 1.12.5
   tracer:
     zipkin:
       address: jaeger-collector.istio-system.svc.cluster.local:9411