diff --git a/chart/values.yaml b/chart/values.yaml
index b0db25689f63c44b04ebc5c3188d6a5e46eefbf0..e7dc180e4d22046ed0d2f04e73d7ef9284535eed 100644
--- a/chart/values.yaml
+++ b/chart/values.yaml
@@ -480,8 +480,8 @@ global:
   ## kubectl image used by hooks to carry out specific jobs
   kubectl:
     image:
-      repository: registry.gitlab.com/gitlab-org/build/cng/kubectl
-      tag: 1.13.12
+      repository: registry1.dso.mil/ironbank/gitlab/gitlab/kubectl
+      tag: 13.2.0
       pullSecrets: []
     securityContext:
       # in most base images, this is `nobody:nogroup`
@@ -689,6 +689,11 @@ registry:
 ## doc/charts/shared-secrets
 shared-secrets:
   enabled: true
+  # use IronBank image
+  selfsign:
+    image:
+      repository: registry1.dso.mil/ironbank/gitlab/gitlab/cfssl-self-sign
+      tag: 1.4.1
   rbac:
     create: true