diff --git a/CHANGELOG.md b/CHANGELOG.md
index 992ad04a75a9e6f706cc2c8444a8aa55c01ab001..f8467de024b63abddc198ff4a36dec151fa9afbd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,18 +4,24 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 ---
 
-## [8.8.1-bb.2] (2025-02-18)
-
-### Removed
-
-- Removed reference to unused image - registry1.dso.mil/bigbang-ci/gitlab-tester:0.0.4
-- Removed Dockerfile for unused image - gitlab-tester
-
-## [8.8.1-bb.1] (2025-01-30)
+## [8.8.2-bb.0] (2025-02-24)
 
 ### Changed
 
-- Add deploymentLabels interpolation
+- ironbank/gitlab/gitlab/gitlab-webservice 17.8.1 -> 17.8.2
+- registry1.dso.mil/ironbank/gitlab/gitlab/certificates 17.8.1 -> 17.8.2
+- registry1.dso.mil/ironbank/gitlab/gitlab/gitaly 17.8.1 -> 17.8.2
+- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-base 17.8.1 -> 17.8.2
+- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-container-registry 17.8.1 -> 17.8.2
+- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-exporter 17.8.1 -> 17.8.2
+- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-mailroom 17.8.1 -> 17.8.2
+- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-pages 17.8.1 -> 17.8.2
+- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-shell 17.8.1 -> 17.8.2
+- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-sidekiq 17.8.1 -> 17.8.2
+- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox 17.8.1 -> 17.8.2
+- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-webservice 17.8.1 -> 17.8.2
+- registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-workhorse 17.8.1 -> 17.8.2
+- registry1.dso.mil/ironbank/gitlab/gitlab/kubectl 17.8.1 -> 17.8.2
 
 ## [8.8.1-bb.0] (2025-01-24)
 
@@ -36,7 +42,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 - registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-workhorse 17.7.2 -> 17.8.1  
 - registry1.dso.mil/ironbank/gitlab/gitlab/kubectl 17.7.2 -> 17.8.1  
 
-## [8.7.4-bb.1] (2024-01-22)
+## [8.7.4-bb.1] (2025-01-22)
 
 ### Changed
 
diff --git a/README.md b/README.md
index 3199654652220c716c768d3b72d0cd5d7466a32f..c219cf8bd2b8ad172ad90e881960c52644928eec 100644
--- a/README.md
+++ b/README.md
@@ -1,7 +1,7 @@
 <!-- Warning: Do not manually edit this file. See notes on gluon + helm-docs at the end of this file for more information. -->
 # gitlab
 
-![Version: 8.8.1-bb.2](https://img.shields.io/badge/Version-8.8.1--bb.2-informational?style=flat-square) ![AppVersion: 17.8.1](https://img.shields.io/badge/AppVersion-17.8.1-informational?style=flat-square) ![Maintenance Track: bb_integrated](https://img.shields.io/badge/Maintenance_Track-bb_integrated-green?style=flat-square)
+![Version: 8.8.2-bb.0](https://img.shields.io/badge/Version-8.8.2--bb.0-informational?style=flat-square) ![AppVersion: 17.8.2](https://img.shields.io/badge/AppVersion-17.8.2-informational?style=flat-square) ![Maintenance Track: bb_integrated](https://img.shields.io/badge/Maintenance_Track-bb_integrated-green?style=flat-square)
 
 GitLab is the most comprehensive AI-powered DevSecOps Platform.
 
@@ -48,7 +48,7 @@ helm install gitlab chart/
 | global.image | object | `{}` |  |
 | global.pod.labels | object | `{}` |  |
 | global.edition | string | `"ee"` |  |
-| global.gitlabVersion | string | `"17.8.1"` |  |
+| global.gitlabVersion | string | `"17.8.2"` |  |
 | global.application.create | bool | `false` |  |
 | global.application.links | list | `[]` |  |
 | global.application.allowClusterRoles | bool | `true` |  |
@@ -362,7 +362,7 @@ helm install gitlab chart/
 | global.workhorse.tls.enabled | bool | `false` |  |
 | global.webservice.workerTimeout | int | `60` |  |
 | global.certificates.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/certificates"` |  |
-| global.certificates.image.tag | string | `"17.8.1"` |  |
+| global.certificates.image.tag | string | `"17.8.2"` |  |
 | global.certificates.image.pullSecrets[0].name | string | `"private-registry"` |  |
 | global.certificates.init.securityContext.capabilities.drop[0] | string | `"ALL"` |  |
 | global.certificates.init.securityContext.runAsUser | int | `65534` |  |
@@ -399,13 +399,13 @@ helm install gitlab chart/
 | global.certificates.customCAs[29].secret | string | `"ca-certs-dod-trust-anchors-self-signed"` |  |
 | global.certificates.customCAs[30].secret | string | `"ca-certs-eca"` |  |
 | global.kubectl.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/kubectl"` |  |
-| global.kubectl.image.tag | string | `"17.8.1"` |  |
+| global.kubectl.image.tag | string | `"17.8.2"` |  |
 | global.kubectl.image.pullSecrets[0].name | string | `"private-registry"` |  |
 | global.kubectl.securityContext.runAsUser | int | `65534` |  |
 | global.kubectl.securityContext.fsGroup | int | `65534` |  |
 | global.kubectl.securityContext.seccompProfile.type | string | `"RuntimeDefault"` |  |
 | global.gitlabBase.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-base"` |  |
-| global.gitlabBase.image.tag | string | `"17.8.1"` |  |
+| global.gitlabBase.image.tag | string | `"17.8.2"` |  |
 | global.gitlabBase.image.pullSecrets[0].name | string | `"private-registry"` |  |
 | global.serviceAccount.enabled | bool | `true` |  |
 | global.serviceAccount.create | bool | `true` |  |
@@ -790,7 +790,7 @@ helm install gitlab chart/
 | registry.resources.requests.cpu | string | `"200m"` |  |
 | registry.resources.requests.memory | string | `"1024Mi"` |  |
 | registry.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-container-registry"` |  |
-| registry.image.tag | string | `"17.8.1"` |  |
+| registry.image.tag | string | `"17.8.2"` |  |
 | registry.image.pullSecrets[0].name | string | `"private-registry"` |  |
 | registry.ingress.enabled | bool | `false` |  |
 | registry.metrics.enabled | bool | `true` |  |
@@ -850,7 +850,7 @@ helm install gitlab chart/
 | gitlab.toolbox.replicas | int | `1` |  |
 | gitlab.toolbox.antiAffinityLabels.matchLabels.app | string | `"gitaly"` |  |
 | gitlab.toolbox.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox"` |  |
-| gitlab.toolbox.image.tag | string | `"17.8.1"` |  |
+| gitlab.toolbox.image.tag | string | `"17.8.2"` |  |
 | gitlab.toolbox.image.pullSecrets[0].name | string | `"private-registry"` |  |
 | gitlab.toolbox.init.resources.requests.cpu | string | `"200m"` |  |
 | gitlab.toolbox.init.resources.requests.memory | string | `"200Mi"` |  |
@@ -887,7 +887,7 @@ helm install gitlab chart/
 | gitlab.gitlab-exporter.resources.requests.memory | string | `"200Mi"` |  |
 | gitlab.gitlab-exporter.capabilities.drop[0] | string | `"ALL"` |  |
 | gitlab.gitlab-exporter.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-exporter"` |  |
-| gitlab.gitlab-exporter.image.tag | string | `"17.8.1"` |  |
+| gitlab.gitlab-exporter.image.tag | string | `"17.8.2"` |  |
 | gitlab.gitlab-exporter.image.pullSecrets[0].name | string | `"private-registry"` |  |
 | gitlab.gitlab-exporter.metrics.enabled | bool | `true` |  |
 | gitlab.gitlab-exporter.metrics.port | int | `9168` |  |
@@ -909,7 +909,7 @@ helm install gitlab chart/
 | gitlab.migrations.resources.requests.cpu | string | `"500m"` |  |
 | gitlab.migrations.resources.requests.memory | string | `"1.5G"` |  |
 | gitlab.migrations.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox"` |  |
-| gitlab.migrations.image.tag | string | `"17.8.1"` |  |
+| gitlab.migrations.image.tag | string | `"17.8.2"` |  |
 | gitlab.migrations.image.pullSecrets[0].name | string | `"private-registry"` |  |
 | gitlab.migrations.securityContext.runAsUser | int | `1000` |  |
 | gitlab.migrations.securityContext.runAsGroup | int | `1000` |  |
@@ -933,14 +933,14 @@ helm install gitlab chart/
 | gitlab.webservice.resources.requests.cpu | string | `"300m"` |  |
 | gitlab.webservice.resources.requests.memory | string | `"2.5G"` |  |
 | gitlab.webservice.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-webservice"` |  |
-| gitlab.webservice.image.tag | string | `"17.8.1"` |  |
+| gitlab.webservice.image.tag | string | `"17.8.2"` |  |
 | gitlab.webservice.image.pullSecrets[0].name | string | `"private-registry"` |  |
 | gitlab.webservice.workhorse.resources.limits.cpu | string | `"600m"` |  |
 | gitlab.webservice.workhorse.resources.limits.memory | string | `"2.5G"` |  |
 | gitlab.webservice.workhorse.resources.requests.cpu | string | `"600m"` |  |
 | gitlab.webservice.workhorse.resources.requests.memory | string | `"2.5G"` |  |
 | gitlab.webservice.workhorse.image | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-workhorse"` |  |
-| gitlab.webservice.workhorse.tag | string | `"17.8.1"` |  |
+| gitlab.webservice.workhorse.tag | string | `"17.8.2"` |  |
 | gitlab.webservice.workhorse.pullSecrets[0].name | string | `"private-registry"` |  |
 | gitlab.webservice.workhorse.metrics.enabled | bool | `true` |  |
 | gitlab.webservice.workhorse.metrics.serviceMonitor.enabled | bool | `true` |  |
@@ -951,7 +951,7 @@ helm install gitlab chart/
 | gitlab.webservice.metrics.serviceMonitor.enabled | bool | `true` |  |
 | gitlab.webservice.helmTests.enabled | bool | `false` |  |
 | gitlab.sidekiq.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-sidekiq"` |  |
-| gitlab.sidekiq.image.tag | string | `"17.8.1"` |  |
+| gitlab.sidekiq.image.tag | string | `"17.8.2"` |  |
 | gitlab.sidekiq.image.pullSecrets[0].name | string | `"private-registry"` |  |
 | gitlab.sidekiq.init.resources.limits.cpu | string | `"200m"` |  |
 | gitlab.sidekiq.init.resources.limits.memory | string | `"200Mi"` |  |
@@ -969,7 +969,7 @@ helm install gitlab chart/
 | gitlab.sidekiq.containerSecurityContext.runAsGroup | int | `1000` |  |
 | gitlab.sidekiq.containerSecurityContext.capabilities.drop[0] | string | `"ALL"` |  |
 | gitlab.gitaly.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitaly"` |  |
-| gitlab.gitaly.image.tag | string | `"17.8.1"` |  |
+| gitlab.gitaly.image.tag | string | `"17.8.2"` |  |
 | gitlab.gitaly.image.pullSecrets[0].name | string | `"private-registry"` |  |
 | gitlab.gitaly.init.resources.limits.cpu | string | `"200m"` |  |
 | gitlab.gitaly.init.resources.limits.memory | string | `"200Mi"` |  |
@@ -989,7 +989,7 @@ helm install gitlab chart/
 | gitlab.gitaly.containerSecurityContext.runAsGroup | int | `1000` |  |
 | gitlab.gitaly.containerSecurityContext.capabilities.drop[0] | string | `"ALL"` |  |
 | gitlab.gitlab-shell.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-shell"` |  |
-| gitlab.gitlab-shell.image.tag | string | `"17.8.1"` |  |
+| gitlab.gitlab-shell.image.tag | string | `"17.8.2"` |  |
 | gitlab.gitlab-shell.image.pullSecrets[0].name | string | `"private-registry"` |  |
 | gitlab.gitlab-shell.init.resources.limits.cpu | string | `"200m"` |  |
 | gitlab.gitlab-shell.init.resources.limits.memory | string | `"200Mi"` |  |
@@ -1007,15 +1007,15 @@ helm install gitlab chart/
 | gitlab.gitlab-shell.containerSecurityContext.runAsGroup | int | `1000` |  |
 | gitlab.gitlab-shell.containerSecurityContext.capabilities.drop[0] | string | `"ALL"` |  |
 | gitlab.mailroom.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-mailroom"` |  |
-| gitlab.mailroom.image.tag | string | `"17.8.1"` |  |
+| gitlab.mailroom.image.tag | string | `"17.8.2"` |  |
 | gitlab.mailroom.image.pullSecrets[0].name | string | `"private-registry"` |  |
 | gitlab.mailroom.containerSecurityContext.capabilities.drop[0] | string | `"ALL"` |  |
 | gitlab.gitlab-pages.service.customDomains.type | string | `"ClusterIP"` |  |
 | gitlab.gitlab-pages.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-pages"` |  |
-| gitlab.gitlab-pages.image.tag | string | `"17.8.1"` |  |
+| gitlab.gitlab-pages.image.tag | string | `"17.8.2"` |  |
 | gitlab.gitlab-pages.containerSecurityContext.capabilities.drop[0] | string | `"ALL"` |  |
 | gitlab.praefect.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitaly"` |  |
-| gitlab.praefect.image.tag | string | `"17.8.1"` |  |
+| gitlab.praefect.image.tag | string | `"17.8.2"` |  |
 | gitlab.praefect.init.resources.limits.cpu | string | `"200m"` |  |
 | gitlab.praefect.init.resources.limits.memory | string | `"200Mi"` |  |
 | gitlab.praefect.init.resources.requests.cpu | string | `"200m"` |  |
diff --git a/chart/Chart.yaml b/chart/Chart.yaml
index 20de63ccf8edf384c4d11c249ac5762ca33c70a7..31afc27950466c1597c26b25ed9004f2f3028fcf 100644
--- a/chart/Chart.yaml
+++ b/chart/Chart.yaml
@@ -1,8 +1,8 @@
 ---
 apiVersion: v1
 name: gitlab
-version: 8.8.1-bb.2
-appVersion: 17.8.1
+version: 8.8.2-bb.0
+appVersion: 17.8.2
 description: GitLab is the most comprehensive AI-powered DevSecOps Platform.
 keywords:
 - gitlab
@@ -16,7 +16,7 @@ maintainers:
 annotations:
   bigbang.dev/maintenanceTrack: bb_integrated
   bigbang.dev/applicationVersions: |
-    - Gitlab: 17.8.1
+    - Gitlab: 17.8.2
   bigbang.dev/upstreamReleaseNotesMarkdown: |
     The [upstream chart's release notes](https://gitlab.com/gitlab-org/charts/gitlab/-/blob/master/CHANGELOG.md) may help when reviewing this package.
   helm.sh/images: |
@@ -27,41 +27,44 @@ annotations:
       condition: redis.install
       image: registry1.dso.mil/ironbank/bitnami/redis:7.4.2
     - name: alpine-certificates
-      image: registry1.dso.mil/ironbank/gitlab/gitlab/certificates:17.8.1
+      image: registry1.dso.mil/ironbank/gitlab/gitlab/certificates:17.8.2
     - name: cfssl-self-sign
       condition: shared-secrets.enabled
       image: registry1.dso.mil/ironbank/gitlab/gitlab/cfssl-self-sign:1.6.1
     - name: gitaly
-      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitaly:17.8.1
+      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitaly:17.8.2
     - name: gitlab-container-registry
       condition: registry.enabled
-      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-container-registry:17.8.1
+      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-container-registry:17.8.2
     - name: gitlab-shell
-      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-shell:17.8.1
+      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-shell:17.8.2
     - name: gitlab-sidekiq
-      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-sidekiq:17.8.1
+      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-sidekiq:17.8.2
     - name: gitlab-toolbox
-      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox:17.8.1
+      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox:17.8.2
     - name: gitlab-webservice
-      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-webservice:17.8.1
+      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-webservice:17.8.2
     - name: gitlab-workhorse
-      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-workhorse:17.8.1
+      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-workhorse:17.8.2
     - name: gitlab-pages
-      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-pages:17.8.1
+      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-pages:17.8.2
     - name: kubectl
-      image: registry1.dso.mil/ironbank/gitlab/gitlab/kubectl:17.8.1
+      image: registry1.dso.mil/ironbank/gitlab/gitlab/kubectl:17.8.2
     - name: mc
       image: registry1.dso.mil/ironbank/opensource/minio/mc:RELEASE.2024-10-02T08-27-28Z
     - name: minio
       image: registry1.dso.mil/ironbank/opensource/minio/minio:RELEASE.2024-06-04T19-20-08Z
     - name: postgresql
       condition: postgresql.install
-      image: registry1.dso.mil/ironbank/opensource/postgres/postgresql:14.15
+      image: registry1.dso.mil/ironbank/opensource/postgres/postgresql:14.16
     - name: ubi9
       condition: upgradeCheck.enabled
       image: registry1.dso.mil/ironbank/redhat/ubi/ubi9:9.5
     - name: gitlab-base
-      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-base:17.8.1
+      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-base:17.8.2
     - name: gitlab-exporter
       condition: gitlab.gitlab-exporter.enabled
-      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-exporter:17.8.1
+      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-exporter:17.8.2
+    - name: bbtests
+      condition: bbtests.enabled
+      image: registry1.dso.mil/bigbang-ci/gitlab-tester:0.0.4
diff --git a/chart/Kptfile b/chart/Kptfile
index 322c3cb8f7dead42f9f2f0f921d266429a2a4c5a..4d4e6bddc0e9ec7ec5c86ed5ed2cabcf6628bf92 100644
--- a/chart/Kptfile
+++ b/chart/Kptfile
@@ -5,7 +5,7 @@ metadata:
 upstream:
   type: git
   git:
-    commit: c9cc7286394007b8b8f1e04649658a089aeee4a0
+    commit: 7596b590ab65ab01e6d843ee5a99eb881255ee93
     repo: https://gitlab.com/gitlab-org/charts/gitlab
     directory: /
-    ref: v8.8.1
+    ref: v8.8.2
diff --git a/chart/charts/gitlab/charts/geo-logcursor/Chart.yaml b/chart/charts/gitlab/charts/geo-logcursor/Chart.yaml
index 73a0aec9d58eee964f4ebacc779803a1c2be05b8..4db87a700a2f661dd3a7842e5ffef001eec39ed6 100644
--- a/chart/charts/gitlab/charts/geo-logcursor/Chart.yaml
+++ b/chart/charts/gitlab/charts/geo-logcursor/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: geo-logcursor
-version: 8.8.1
-appVersion: v17.8.1
+version: 8.8.2
+appVersion: v17.8.2
 description: GitLab Geo logcursor
 keywords:
 - gitlab
diff --git a/chart/charts/gitlab/charts/gitaly/Chart.yaml b/chart/charts/gitlab/charts/gitaly/Chart.yaml
index bf5e20bd35a39e8d789d38e9a1cbf026017a4f69..0d1fe500308170fe59fbae86f49d0040ae768fe5 100644
--- a/chart/charts/gitlab/charts/gitaly/Chart.yaml
+++ b/chart/charts/gitlab/charts/gitaly/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: gitaly
-version: 8.8.1
-appVersion: 17.8.1
+version: 8.8.2
+appVersion: 17.8.2
 description: Git RPC service for handling all the git calls made by GitLab
 keywords:
 - gitlab
diff --git a/chart/charts/gitlab/charts/gitlab-exporter/Chart.yaml b/chart/charts/gitlab/charts/gitlab-exporter/Chart.yaml
index 0bd52d6f08bf6a2627ef060433bbf0861e645c6f..52f3f89d98a664c2a445d4300176bc7a4afa833e 100644
--- a/chart/charts/gitlab/charts/gitlab-exporter/Chart.yaml
+++ b/chart/charts/gitlab/charts/gitlab-exporter/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v1
 name: gitlab-exporter
-version: 8.8.1
+version: 8.8.2
 appVersion: 15.1.0
 description: Exporter for GitLab Prometheus metrics (e.g. CI, pull mirrors)
 keywords:
diff --git a/chart/charts/gitlab/charts/gitlab-pages/Chart.yaml b/chart/charts/gitlab/charts/gitlab-pages/Chart.yaml
index d1b8634547f7dc14f724360cf751893cf10b8856..79b29eda30f43ae017af5c1318b58a9817cac791 100644
--- a/chart/charts/gitlab/charts/gitlab-pages/Chart.yaml
+++ b/chart/charts/gitlab/charts/gitlab-pages/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: gitlab-pages
-version: 8.8.1
-appVersion: 17.8.1
+version: 8.8.2
+appVersion: 17.8.2
 description: Daemon for serving static websites from GitLab projects
 keywords:
 - gitlab
diff --git a/chart/charts/gitlab/charts/gitlab-shell/Chart.yaml b/chart/charts/gitlab/charts/gitlab-shell/Chart.yaml
index 1d89b64b91e699605da75ff3675ecdae8fd74814..168a588cf9b2e0c6b4b4b931e06a9dcbd9113ddd 100644
--- a/chart/charts/gitlab/charts/gitlab-shell/Chart.yaml
+++ b/chart/charts/gitlab/charts/gitlab-shell/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v1
 name: gitlab-shell
-version: 8.8.1
+version: 8.8.2
 appVersion: 14.39.0
 description: sshd for Gitlab
 keywords:
diff --git a/chart/charts/gitlab/charts/kas/Chart.yaml b/chart/charts/gitlab/charts/kas/Chart.yaml
index ac5ca7d79b24193fd2075e5e2d50c5b0c43119ba..b431ab0399a25b26e78fc942c9f791a117f6d173 100644
--- a/chart/charts/gitlab/charts/kas/Chart.yaml
+++ b/chart/charts/gitlab/charts/kas/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: kas
-version: 8.8.1
-appVersion: 17.8.1
+version: 8.8.2
+appVersion: 17.8.2
 description: GitLab Agent Server
 keywords:
 - agent
diff --git a/chart/charts/gitlab/charts/mailroom/Chart.yaml b/chart/charts/gitlab/charts/mailroom/Chart.yaml
index 24902cb351102b8d92a3d867b4694751ec9a8432..ff5116a56e06abc44f36a030da9fa2980ac1444a 100644
--- a/chart/charts/gitlab/charts/mailroom/Chart.yaml
+++ b/chart/charts/gitlab/charts/mailroom/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: mailroom
-version: 8.8.1
-appVersion: v17.8.1
+version: 8.8.2
+appVersion: v17.8.2
 description: Handling incoming emails
 keywords:
 - gitlab
diff --git a/chart/charts/gitlab/charts/migrations/Chart.yaml b/chart/charts/gitlab/charts/migrations/Chart.yaml
index 1f4f4bd7bd2158f4faf3c31004a09548e35e8dca..6f1f3e9f596834a08d2f3e9a4e9f2343d0d2bf3c 100644
--- a/chart/charts/gitlab/charts/migrations/Chart.yaml
+++ b/chart/charts/gitlab/charts/migrations/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: migrations
-version: 8.8.1
-appVersion: v17.8.1
+version: 8.8.2
+appVersion: v17.8.2
 description: Database migrations and other versioning tasks for upgrading Gitlab
 keywords:
 - gitlab
diff --git a/chart/charts/gitlab/charts/praefect/Chart.yaml b/chart/charts/gitlab/charts/praefect/Chart.yaml
index 7ee128f082f4702358aa99a47a0366589cc082bc..d5e45ca0d277cbeb996c61d4073de18fc194ace8 100644
--- a/chart/charts/gitlab/charts/praefect/Chart.yaml
+++ b/chart/charts/gitlab/charts/praefect/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: praefect
-version: 8.8.1
-appVersion: 17.8.1
+version: 8.8.2
+appVersion: 17.8.2
 description: Praefect is a router and transaction manager for Gitaly, and a required
   component for running a Gitaly Cluster.
 keywords:
diff --git a/chart/charts/gitlab/charts/sidekiq/Chart.yaml b/chart/charts/gitlab/charts/sidekiq/Chart.yaml
index 38f892a765819734dedfac9c346a51cc32f9662c..ba33ce6cb803f190bf26e488182b430ae522046f 100644
--- a/chart/charts/gitlab/charts/sidekiq/Chart.yaml
+++ b/chart/charts/gitlab/charts/sidekiq/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: sidekiq
-version: 8.8.1
-appVersion: v17.8.1
+version: 8.8.2
+appVersion: v17.8.2
 description: Gitlab Sidekiq for asynchronous task processing in rails
 keywords:
 - gitlab
diff --git a/chart/charts/gitlab/charts/toolbox/Chart.yaml b/chart/charts/gitlab/charts/toolbox/Chart.yaml
index f9a3ed1dc9d21024aa2fb48c881f6882b3f76483..6b63059209f864a4b4772c49876397c71912a382 100644
--- a/chart/charts/gitlab/charts/toolbox/Chart.yaml
+++ b/chart/charts/gitlab/charts/toolbox/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: toolbox
-version: 8.8.1
-appVersion: v17.8.1
+version: 8.8.2
+appVersion: v17.8.2
 description: For manually running rake tasks through kubectl
 keywords:
 - gitlab
diff --git a/chart/charts/gitlab/charts/webservice/Chart.yaml b/chart/charts/gitlab/charts/webservice/Chart.yaml
index 423762d9b4a332eb26d3c6047a765f2c316c91c7..dbfc1974ed63416356850ba19920d320ed5da4fc 100644
--- a/chart/charts/gitlab/charts/webservice/Chart.yaml
+++ b/chart/charts/gitlab/charts/webservice/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: webservice
-version: 8.8.1
-appVersion: v17.8.1
+version: 8.8.2
+appVersion: v17.8.2
 description: HTTP server for Gitlab
 keywords:
 - gitlab
diff --git a/chart/doc/charts/gitlab/sidekiq/index.md b/chart/doc/charts/gitlab/sidekiq/index.md
index db2b55bdd16e7bef639fd35076da75436a3dd09f..fb67aa5e24ee8f926284d13ceaf12094d7d110eb 100644
--- a/chart/doc/charts/gitlab/sidekiq/index.md
+++ b/chart/doc/charts/gitlab/sidekiq/index.md
@@ -601,8 +601,8 @@ places. This examples adds the following network policy:
 
 *Note the example provided is only an example and may not be complete*
 
-*Note that the Sidekiq service requires outbound connectivity to the public
-internet for images on [external object storage](../../../advanced/external-object-storage)*
+_Note that the Sidekiq service requires outbound connectivity to the public
+internet for images on [external object storage](../../../advanced/external-object-storage)_
 
 ```yaml
 networkpolicy:
diff --git a/chart/doc/charts/minio/index.md b/chart/doc/charts/minio/index.md
index 6a5af5ef763bfe38c96844eb34cbf9533d54cd1b..887789d1c286cb5aec9a35e23fc5dd42a8858b3c 100644
--- a/chart/doc/charts/minio/index.md
+++ b/chart/doc/charts/minio/index.md
@@ -258,7 +258,7 @@ defaultBuckets:
 
 | Name     | Type    | Default | Description |
 |:-------- |:-------:|:--------|:------------|
-| `name`   | String  |         | The name of the bucket that is created. The provided value should conform to [AWS bucket naming rules](https://docs.aws.amazon.com/AmazonS3/latest/dev/BucketRestrictions.html), meaning that it should be compliant with DNS and contain only the characters a-z, 0-9, and – (hyphen) in strings between 3 and 63 characters in length. The `name` property is *required* for all entries. |
+| `name`   | String  |         | The name of the bucket that is created. The provided value should conform to [AWS bucket naming rules](https://docs.aws.amazon.com/AmazonS3/latest/dev/BucketRestrictions.html), meaning that it should be compliant with DNS and contain only the characters a-z, 0-9, and – (hyphen) in strings between 3 and 63 characters in length. The `name` property is _required_ for all entries. |
 | `policy` |         | `none`  | The value of `policy` controls the access policy of the bucket on MinIO. The `policy` property is not required, and the default value is `none`. In regards to **anonymous** access, possible values are: `none` (no anonymous access), `download` (anonymous read-only access), `upload` (anonymous write-only access) or `public` (anonymous read/write access). |
 | `purge`  | Boolean |         | The `purge` property is provided as a means to cause any existing bucket to be removed with force, at installation time. This only comes into play when using a pre-existing `PersistentVolume` for the volumeName property of [persistence](#persistence). If you make use of a dynamically created `PersistentVolume`, this will have no valuable effect as it only happens at chart installation and there will be no data in the `PersistentVolume` that was just created. This property is not required, but you may specify this property with a value of `true` in order to cause a bucket to purged with force `mc rm -r --force`. |
 
diff --git a/chart/doc/charts/registry/index.md b/chart/doc/charts/registry/index.md
index 1b6501691bb03df56a8421ad123c2ed795a1ef10..bdafbf0f53b01c6f02df4e4e89bd3527bfa15ad3 100644
--- a/chart/doc/charts/registry/index.md
+++ b/chart/doc/charts/registry/index.md
@@ -76,7 +76,7 @@ registry:
       interval: 24h
       dryrun: false
   image:
-    tag: 'v4.15.0-gitlab'
+    tag: 'v4.15.2-gitlab'
     pullPolicy: IfNotPresent
   annotations:
   service:
@@ -187,7 +187,7 @@ If you chose to deploy this chart as a standalone, remove the `registry` at the
 | `image.pullPolicy`                                       |                                                                      | Pull policy for the registry image                                                                                                                                                                                                                                                                                                                 |
 | `image.pullSecrets`                                      |                                                                      | Secrets to use for image repository                                                                                                                                                                                                                                                                                                                |
 | `image.repository`                                       | `registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry` | Registry image                                                                                                                                                                                                                                                                                                                                     |
-| `image.tag`                                              | `v4.15.0-gitlab`                                                     | Version of the image to use                                                                                                                                                                                                                                                                                                                        |
+| `image.tag`                                              | `v4.15.2-gitlab`                                                     | Version of the image to use                                                                                                                                                                                                                                                                                                                        |
 | `init.image.repository`                                  |                                                                      | initContainer image                                                                                                                                                                                                                                                                                                                                |
 | `init.image.tag`                                         |                                                                      | initContainer image tag                                                                                                                                                                                                                                                                                                                            |
 | `init.containerSecurityContext`                          |                                                                      | initContainer specific [securityContext](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.25/#securitycontext-v1-core)                                                                                                                                                                                                             |
@@ -430,7 +430,7 @@ You can change the included version of the Registry and `pullPolicy`.
 
 Default settings:
 
-- `tag: 'v4.15.0-gitlab'`
+- `tag: 'v4.15.2-gitlab'`
 - `pullPolicy: 'IfNotPresent'`
 
 ## Configuring the `service`
diff --git a/chart/doc/development/index.md b/chart/doc/development/index.md
index 499b93e4312d55bb224f1aee27210ba2e1f0830d..e5c4b3311bc67103fc58ac89563e4d525254cb45 100644
--- a/chart/doc/development/index.md
+++ b/chart/doc/development/index.md
@@ -179,7 +179,7 @@ can not resolve the MinIO domain name and find the correct endpoint (you can see
 
 Developers may encounter unique issues while working on new chart features.
 [Refer to the troubleshooting guide](troubleshooting.md) for
-information if your ***development*** cluster seems to have strange issues.
+information if your **_development_** cluster seems to have strange issues.
 
 NOTE:
 The troubleshooting steps outlined in the link above are for development
diff --git a/chart/requirements.lock b/chart/requirements.lock
index b3a85663b6a1fae42451813b89f70094f6ff6229..9b15b2a410f083229da88b4c1782d73f8fd1daed 100644
--- a/chart/requirements.lock
+++ b/chart/requirements.lock
@@ -45,4 +45,4 @@ dependencies:
   repository: https://haproxytech.github.io/helm-charts
   version: 1.32.0
 digest: sha256:c426626626761ac60ff8acc301c56da4af0a16aaf92c915c0ff04c40a30ea109
-generated: "2025-01-24T17:56:34.90962225-06:00"
+generated: "2025-02-14T16:09:31.555691-05:00"
diff --git a/chart/values.yaml b/chart/values.yaml
index 45f4a3ec3955db9e818b00085cdbe0a34c15994e..616dbca65d4bfbea85f3f110893afaa3990b97b2 100644
--- a/chart/values.yaml
+++ b/chart/values.yaml
@@ -58,7 +58,7 @@ global:
   edition: ee
 
   ## https://docs.gitlab.com/charts/charts/globals#gitlab-version
-  gitlabVersion: "17.8.1"
+  gitlabVersion: "17.8.2"
 
   ## https://docs.gitlab.com/charts/charts/globals#application-resource
   application:
@@ -827,7 +827,7 @@ global:
   certificates:
     image:
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/certificates
-      tag: 17.8.1
+      tag: 17.8.2
       pullSecrets:
       - name: private-registry
     init:
@@ -876,7 +876,7 @@ global:
   kubectl:
     image:
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/kubectl
-      tag: 17.8.1
+      tag: 17.8.2
       pullSecrets:
       - name: private-registry
     securityContext:
@@ -893,7 +893,7 @@ global:
       # 1. UBI does not have the newly required /scripts/set-config template generator in its entrypoint.
       #   a. trying gitlab-base per https://repo1.dso.mil/dsop/gitlab/gitlab/gitlab-base/-/issues/77
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-base
-      tag: "17.8.1"
+      tag: "17.8.2"
       pullSecrets:
       - name: private-registry
 
@@ -1391,7 +1391,7 @@ postgresql:
   image:
     registry: registry1.dso.mil
     repository: ironbank/opensource/postgres/postgresql
-    tag: "14.15"
+    tag: "14.16"
     pullSecrets:
     - private-registry
   auth:
@@ -1480,7 +1480,7 @@ registry:
       memory: 1024Mi
   image:
     repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-container-registry
-    tag: 17.8.1
+    tag: 17.8.2
     pullSecrets:
     - name: private-registry
   ingress:
@@ -1620,7 +1620,7 @@ gitlab:
         app: gitaly
     image:
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox
-      tag: 17.8.1
+      tag: 17.8.2
       pullSecrets:
       - name: private-registry
     init:
@@ -1697,7 +1697,7 @@ gitlab:
         - ALL
     image:
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-exporter
-      tag: 17.8.1
+      tag: 17.8.2
       pullSecrets:
       - name: private-registry
     metrics:
@@ -1742,7 +1742,7 @@ gitlab:
         memory: 1.5G
     image:
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox
-      tag: 17.8.1
+      tag: 17.8.2
       pullSecrets:
       - name: private-registry
     securityContext:
@@ -1791,7 +1791,7 @@ gitlab:
         memory: 2.5G # = 2 * 1.25G assuming there are 2 workerProcesses configured
     image:
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-webservice
-      tag: 17.8.1
+      tag: 17.8.2
       pullSecrets:
       - name: private-registry
     workhorse:
@@ -1804,7 +1804,7 @@ gitlab:
           cpu: 600m
           memory: 2.5G
       image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-workhorse
-      tag: 17.8.1
+      tag: 17.8.2
       pullSecrets:
       - name: private-registry
       metrics:
@@ -1828,7 +1828,7 @@ gitlab:
   sidekiq:
     image:
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-sidekiq
-      tag: 17.8.1
+      tag: 17.8.2
       pullSecrets:
       - name: private-registry
     init:
@@ -1865,7 +1865,7 @@ gitlab:
   gitaly:
     image:
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitaly
-      tag: 17.8.1
+      tag: 17.8.2
       pullSecrets:
       - name: private-registry
     init:
@@ -1906,7 +1906,7 @@ gitlab:
   gitlab-shell:
     image:
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-shell
-      tag: 17.8.1
+      tag: 17.8.2
       pullSecrets:
       - name: private-registry
     init:
@@ -1950,7 +1950,7 @@ gitlab:
   mailroom:
     image:
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-mailroom
-      tag: 17.8.1
+      tag: 17.8.2
       pullSecrets:
         - name: private-registry
     containerSecurityContext:
@@ -1967,7 +1967,7 @@ gitlab:
         type: ClusterIP
     image:
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-pages
-      tag: 17.8.1
+      tag: 17.8.2
     containerSecurityContext:
       capabilities:
         drop:
@@ -1978,7 +1978,7 @@ gitlab:
   praefect:
     image:
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitaly
-      tag: 17.8.1
+      tag: 17.8.2
     init:
       resources:
         limits:
diff --git a/docs/DEVELOPMENT_MAINTENANCE.md b/docs/DEVELOPMENT_MAINTENANCE.md
index 514b4b591d0e254a6fe5ce85e5e2d111e7b711fc..67311f3f067c19864c3a53d29d4a9fa8136a8426 100644
--- a/docs/DEVELOPMENT_MAINTENANCE.md
+++ b/docs/DEVELOPMENT_MAINTENANCE.md
@@ -19,7 +19,7 @@ BigBang makes modifications to the upstream helm chart. The full list of changes
 1. Read release notes from upstream [Gitlab Releases](https://about.gitlab.com/releases/categories/releases/). Be aware of changes that are included in the upgrade, you can find those by [comparing the current and new revision](https://gitlab.com/gitlab-org/charts/gitlab/-/compare?from=master&to=master). Take note of any manual upgrade steps that customers might need to perform, if any.
 1. Do diff of [upstream chart](https://gitlab.com/gitlab-org/charts/gitlab) between old and new release tags to become aware of any significant chart changes. A graphical diff tool such as [Meld](https://meldmerge.org/) is useful. You can see where the current helm chart came from by inspecting `/chart/Kptfile`.
 1. Create a development branch and merge request tied to the Repo1 issue created for the Gitlab package upgrade.  The association between the branch and the issue can be made by prefixing the branch name with the issue number, e.g. `56-update-gitlab-package`. DO NOT create a branch if working `renovate/ironbank`. Continue edits on `renovate/ironbank`.
-1. From the root of this repository, sync the BigBang Gitlab package chart with the upstream Gitlab chart using `kpt pkg update chart@<target version> --strategy alpha-git-patch`.  Please note that `kpt` > v1.0.0 does *NOT* support this update strategy, and the latest `kpt` version that does is `0.39.2`.
+1. From the root of this repository, sync the BigBang Gitlab package chart with the upstream Gitlab chart using `kpt pkg update chart@<target version> --strategy alpha-git-patch`.  Please note that `kpt` > v1.0.0 does *NOT* support this update strategy, and the latest `kpt` version that does is `0.39.2`. If you encounter any issue with `kpt` trying to retrieve the new chart, you may need to clear the `kpt` cache by running `rm -rf ~/.kpt/*`
 1. Resolve any conflicts that may occur during the `kpt pkg update` process. A graphical diff tool like [Meld](https://meldmerge.org/) is useful. Reference the "Modifications made to upstream chart" section below. Be careful not to overwrite Big Bang Package changes that need to be kept. Note that some files will have combinations of changes that you will overwrite and changes that you keep. Stay alert. The hardest file to update is the `/chart/values.yaml` because the changes are many and complicated.  Once conflicts have been resolved, use `git add` to add the files with resolved conflicts before running `git am --continue` to proceed.
 1. Delete all the `/chart/charts/*.tgz` files and the `/chart/requirements.lock`. You will replace these files in a later step.
 1. In `/chart/requirements.yaml` update the gluon library to the latest version.
diff --git a/tests/Dockerfile b/tests/Dockerfile
new file mode 100644
index 0000000000000000000000000000000000000000..525238ba2c3764ca8a7d68632bed60c0ee8357a9
--- /dev/null
+++ b/tests/Dockerfile
@@ -0,0 +1,11 @@
+# Dockerfile for registry1.dso.mil/bigbang-ci/gitlab-tester:0.0.4
+
+FROM registry1.dso.mil/ironbank/google/golang/golang-1.16:1.16
+
+# install crane
+RUN go install github.com/google/go-containerregistry/cmd/crane@v0.8.0
+
+# make crane command world executable
+RUN chmod -R +x /go
+
+CMD ["/bin/bash"]
\ No newline at end of file
diff --git a/tests/images.txt b/tests/images.txt
index a2e288edd45c562991020280dab6459769e588a1..1dc99134108cda670053cc01151eb602205439ca 100644
--- a/tests/images.txt
+++ b/tests/images.txt
@@ -1,2 +1,2 @@
-registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-exporter:17.8.1
-registry1.dso.mil/ironbank/gitlab/gitlab/kubectl:17.8.1
+registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-exporter:17.8.2
+registry1.dso.mil/ironbank/gitlab/gitlab/kubectl:17.8.2