chore(deps): update gitlab package dependencies to v17.3.6 (#212)

This PR contains the following updates: | Package | Update | Change | |---|---|---| | ghcr.io/defenseunicorns/packages/uds/valkey | patch | `7.2.6-uds.0-upstream` -> `7.2.7-uds.0-upstream` | | [gitlab](https://about.gitlab.com/) ([source](https://gitlab.com/gitlab-org/charts/gitlab)) | minor | `8.4.2` -> `8.5.1` | | registry.gitlab.com/gitlab-org/build/cng/certificates | minor | `v17.2.9` -> `v17.3.6` | | registry.gitlab.com/gitlab-org/build/cng/cfssl-self-sign | minor | `v17.2.9` -> `v17.3.6` | | registry.gitlab.com/gitlab-org/build/cng/gitaly | minor | `v17.2.9` -> `v17.3.6` | | registry.gitlab.com/gitlab-org/build/cng/gitlab-base | minor | `v17.2.9` -> `v17.3.6` | | registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry | minor | `v17.2.9` -> `v17.3.6` | | registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter | minor | `v17.2.9` -> `v17.3.6` | | registry.gitlab.com/gitlab-org/build/cng/gitlab-pages | minor | `v17.2.9` -> `v17.3.6` | | registry.gitlab.com/gitlab-org/build/cng/gitlab-shell | minor | `v17.2.9` -> `v17.3.6` | | registry.gitlab.com/gitlab-org/build/cng/gitlab-sidekiq-ee | minor | `v17.2.9` -> `v17.3.6` | | registry.gitlab.com/gitlab-org/build/cng/gitlab-toolbox-ee | minor | `v17.2.9` -> `v17.3.6` | | registry.gitlab.com/gitlab-org/build/cng/gitlab-webservice-ee | minor | `v17.2.9` -> `v17.3.6` | | registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee | minor | `v17.2.9` -> `v17.3.6` | | registry.gitlab.com/gitlab-org/build/cng/kubectl | minor | `v17.2.9` -> `v17.3.6` | | [registry1.dso.mil/ironbank/gitlab/gitlab/certificates](https://about.gitlab.com/) ([source](https://repo1.dso.mil/dsop/gitlab/distroless/certificates)) | minor | `17.2.9` -> `17.3.6` | | [registry1.dso.mil/ironbank/gitlab/gitlab/gitaly](https://about.gitlab.com/) ([source](https://repo1.dso.mil/dsop/gitlab/distroless/gitaly)) | minor | `17.2.9` -> `17.3.6` | | [registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-base](https://about.gitlab.com/) ([source](https://repo1.dso.mil/dsop/gitlab/distroless/gitlab-base)) | minor | `17.2.9` -> `17.3.6` | | [registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-container-registry](https://about.gitlab.com/) ([source](https://repo1.dso.mil/dsop/gitlab/distroless/gitlab-container-registry)) | minor | `17.2.9` -> `17.3.6` | | [registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-exporter](https://about.gitlab.com/) ([source](https://repo1.dso.mil/dsop/gitlab/distroless/gitlab-exporter)) | minor | `17.2.9` -> `17.3.6` | | [registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-pages](https://about.gitlab.com/) ([source](https://repo1.dso.mil/dsop/gitlab/distroless/gitlab-pages)) | minor | `17.2.9` -> `17.3.6` | | [registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-shell](https://about.gitlab.com/) ([source](https://repo1.dso.mil/dsop/gitlab/distroless/gitlab-shell)) | minor | `17.2.9` -> `17.3.6` | | [registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-sidekiq](https://about.gitlab.com/) ([source](https://repo1.dso.mil/dsop/gitlab/distroless/gitlab-sidekiq)) | minor | `17.2.9` -> `17.3.6` | | [registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox](https://about.gitlab.com/) ([source](https://repo1.dso.mil/dsop/gitlab/distroless/gitlab-toolbox)) | minor | `17.2.9` -> `17.3.6` | | [registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-webservice](https://about.gitlab.com/) ([source](https://repo1.dso.mil/dsop/gitlab/distroless/gitlab-webservice)) | minor | `17.2.9` -> `17.3.6` | | [registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-workhorse](https://about.gitlab.com/) ([source](https://repo1.dso.mil/dsop/gitlab/distroless/gitlab-workhorse)) | minor | `17.2.9` -> `17.3.6` | | [registry1.dso.mil/ironbank/gitlab/gitlab/kubectl](https://about.gitlab.com/) ([source](https://repo1.dso.mil/dsop/gitlab/distroless/kubectl)) | minor | `17.2.9` -> `17.3.6` | --- ### Release Notes <details> <summary>gitlab-org/charts/gitlab (gitlab)</summary> ### [`v8.5.1`](https://gitlab.com/gitlab-org/charts/gitlab/blob/HEAD/CHANGELOG.md#851-2024-10-22) [Compare Source](https://gitlab.com/gitlab-org/charts/gitlab/compare/v8.5.0...v8.5.1) No changes. ### [`v8.5.0`](https://gitlab.com/gitlab-org/charts/gitlab/blob/HEAD/CHANGELOG.md#850-2024-10-16) [Compare Source](https://gitlab.com/gitlab-org/charts/gitlab/compare/v8.4.3...v8.5.0) ##### Added (3 changes) - [gitaly: Expose max_cgroups_per_repo configuration](https://gitlab.com/gitlab-org/charts/gitlab/-/commit/77a6b3413e322c91263331947cf44cde6296bc40) ([merge request](https://gitlab.com/gitlab-org/charts/gitlab/-/merge_requests/3927)) - [Allow to pass allocateLoadBalancerNodePorts in Service for SSH](https://gitlab.com/gitlab-org/charts/gitlab/-/commit/a37608338ad652b8aaa0501e8c838f6c25ad91de) by [@dabelenda-c2c](https://redirect.github.com/dabelenda-c2c) ([merge request](https://gitlab.com/gitlab-org/charts/gitlab/-/merge_requests/3899)) - [Expose settings for default color mode and syntax highlighting](https://gitlab.com/gitlab-org/charts/gitlab/-/commit/812e3cdf29452118fcbbb3df4a9116f3fb6eb558) by [@FabianPonce](https://redirect.github.com/FabianPonce) ([merge request](https://gitlab.com/gitlab-org/charts/gitlab/-/merge_requests/3914)) ##### Fixed (2 changes) - [Remove RuntimeDefault seccomp profile from Gitaly security context](https://gitlab.com/gitlab-org/charts/gitlab/-/commit/7e5007ae17eda1b4f3311b1c7f1c11379395a7da) ([merge request](https://gitlab.com/gitlab-org/charts/gitlab/-/merge_requests/3941)) - [Remove beta note for registry database](https://gitlab.com/gitlab-org/charts/gitlab/-/commit/3ca9f3b3b37b3ad1b8e218087796073d33c458d9) ([merge request](https://gitlab.com/gitlab-org/charts/gitlab/-/merge_requests/3934)) ##### Changed (7 changes) - [Update dependency gitlab-qa to v14.17.0](https://gitlab.com/gitlab-org/charts/gitlab/-/commit/929c7df5530f3d0651d622c2a118fbddd95b6e64) ([merge request](https://gitlab.com/gitlab-org/charts/gitlab/-/merge_requests/3944)) - [Update dependency container-registry to v4.10.0-gitlab](https://gitlab.com/gitlab-org/charts/gitlab/-/commit/67b675aa014798c37aca3b17ff0239e3aff055be) ([merge request](https://gitlab.com/gitlab-org/charts/gitlab/-/merge_requests/3938)) - [kas: add PodMonitor support](https://gitlab.com/gitlab-org/charts/gitlab/-/commit/58e50f1f17ec167edd005c629b3ed90fa6f4cc71) ([merge request](https://gitlab.com/gitlab-org/charts/gitlab/-/merge_requests/3884)) - [Update dependency gitlab-qa to v14.16.0](https://gitlab.com/gitlab-org/charts/gitlab/-/commit/f13290f27110b59ec823d4512c10a38e4bcfef80) ([merge request](https://gitlab.com/gitlab-org/charts/gitlab/-/merge_requests/3930)) - [Support Pod Security Standards Profile Restricted](https://gitlab.com/gitlab-org/charts/gitlab/-/commit/7e4729c7e15fa5d6f185afd5ce662fa0a3274772) by [@afrimberger](https://redirect.github.com/afrimberger) ([merge request](https://gitlab.com/gitlab-org/charts/gitlab/-/merge_requests/3731)) - [Update dependency gitlab-qa to v14.15.0](https://gitlab.com/gitlab-org/charts/gitlab/-/commit/3b0488eb3367280e46ce8cbf0f9a177203ef36f6) ([merge request](https://gitlab.com/gitlab-org/charts/gitlab/-/merge_requests/3923)) - [Update Helm release gitlab-runner to v0.69.0](https://gitlab.com/gitlab-org/charts/gitlab/-/commit/3ae60617cc32b277f13ce700e93acadc2209c840) ([merge request](https://gitlab.com/gitlab-org/charts/gitlab/-/merge_requests/3921)) ##### Removed (1 change) - [Remove 'ci_jwt_signing_key' secret migrated to ApplicationSetting](https://gitlab.com/gitlab-org/charts/gitlab/-/commit/b23acb2484f63ebb7e0f461033f5a3542519b3c9) ([merge request](https://gitlab.com/gitlab-org/charts/gitlab/-/merge_requests/3910)) ### [`v8.4.3`](https://gitlab.com/gitlab-org/charts/gitlab/blob/HEAD/CHANGELOG.md#843-2024-10-22) [Compare Source](https://gitlab.com/gitlab-org/charts/gitlab/compare/v8.4.2...v8.4.3) No changes. </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 7am and before 9am every weekday" in timezone America/New_York, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/defenseunicorns/uds-package-gitlab).  --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Wayne Starr <[email protected]> Release-As: v17.3.6-uds.0
defenseunicorns · Oct 25, 2024 · ec9b792 · ec9b792
1 parent 301f2e0
commit ec9b792
Show file tree

Hide file tree

Showing 7 changed files with 83 additions and 78 deletions.
diff --git a/bundle/uds-bundle.yaml b/bundle/uds-bundle.yaml
@@ -42,7 +42,7 @@ packages:
 
   - name: valkey
     repository: ghcr.io/defenseunicorns/packages/uds/valkey
-    ref: 7.2.6-uds.0-upstream
+    ref: 7.2.7-uds.0-upstream
     overrides:
       valkey:
         uds-valkey-config:

diff --git a/charts/settings/templates/bot-accounts-job.yaml b/charts/settings/templates/bot-accounts-job.yaml
@@ -64,7 +64,8 @@ spec:
                 log_message "    scope_list=$scope_list"
 
                 local user_exists
-                user_exists=$(curl --silent --header "PRIVATE-TOKEN: $TOKEN" "${gitlab_host}/api/v4/users?username=$username")
+                user_exists=$(kubectl exec -n gitlab deployment/gitlab-toolbox -- \
+                    curl --silent --header "PRIVATE-TOKEN: $TOKEN" "${gitlab_host}/api/v4/users?username=$username")
 
                 if echo "$user_exists" | grep -q '"id":'; then
                     log_message "User already exists"
@@ -73,25 +74,27 @@ spec:
                 fi
 
                 if [ "$service_account" == "true" ]; then
-                    user_response=$(curl --silent --header "PRIVATE-TOKEN: $TOKEN" \
-                        --data "username=$username&name=$name" \
-                        --request POST "${gitlab_host}/api/v4/service_accounts")                
+                    user_response=$(kubectl exec -n gitlab deployment/gitlab-toolbox -- \
+                        curl --silent --header "PRIVATE-TOKEN: $TOKEN" \
+                            --data "username=$username&name=$name" \
+                            --request POST "${gitlab_host}/api/v4/service_accounts")                
                 else
                     # Generate a random password
                     local password
                     password=$(openssl rand -base64 16)
 
                     # Create the user if it doesn't exist
-                    user_response=$(curl --silent --request POST "${gitlab_host}/api/v4/users" \
-                        --header "PRIVATE-TOKEN: $TOKEN" \
-                        --header "Content-Type: application/json" \
-                        --data "{
-                            \"email\": \"$email\",
-                            \"username\": \"$username\",
-                            \"name\": \"$name\",
-                            \"password\": \"$password\",
-                            \"skip_confirmation\": true
-                        }")
+                    user_response=$(kubectl exec -n gitlab deployment/gitlab-toolbox -- \
+                        curl --silent --request POST "${gitlab_host}/api/v4/users" \
+                            --header "PRIVATE-TOKEN: $TOKEN" \
+                            --header "Content-Type: application/json" \
+                            --data "{
+                                \"email\": \"$email\",
+                                \"username\": \"$username\",
+                                \"name\": \"$name\",
+                                \"password\": \"$password\",
+                                \"skip_confirmation\": true
+                            }")
                 fi
 
                 # Check if user creation was successful
@@ -119,9 +122,10 @@ spec:
                 done
 
                 # Create a Personal Access Token (PAT) for the new user with the specified scopes
-                pat_response=$(curl --silent --header "PRIVATE-TOKEN: $TOKEN" \
-                    --data "name=UDS Generated PAT$scope_data" \
-                    --request POST "${gitlab_host}/api/v4/users/$user_id/personal_access_tokens")
+                pat_response=$(kubectl exec -n gitlab deployment/gitlab-toolbox -- \
+                    curl --silent --header "PRIVATE-TOKEN: $TOKEN" \
+                        --data "name=UDS Generated PAT$scope_data" \
+                        --request POST "${gitlab_host}/api/v4/users/$user_id/personal_access_tokens")
 
                 # Check if token creation was successful
                 if [ $? -ne 0 ]; then
@@ -146,7 +150,8 @@ spec:
             gitlab-rails runner -e production \
             "token = User.find_by_username('root').personal_access_tokens.create(scopes: ['api', 'admin_mode'], name: 'Bot Accounts API Token', expires_at: 1.days.from_now); token.save!; puts token.token" | tail -n 1)
 
-            response=$(curl --silent --header "PRIVATE-TOKEN: $TOKEN" "${gitlab_host}/api/v4/license")
+            response=$(kubectl exec -n gitlab deployment/gitlab-toolbox -- \
+                curl --silent --header "PRIVATE-TOKEN: $TOKEN" "${gitlab_host}/api/v4/license")
 
             # Check if the request was successful
             if [ $? -ne 0 ]; then

diff --git a/charts/settings/values.yaml b/charts/settings/values.yaml
@@ -6,8 +6,8 @@ domain: "###ZARF_VAR_DOMAIN###"
 global:
   kubectl:
     image:
-      repository: registry.gitlab.com/gitlab-org/build/cng/kubectl
-      tag: v17.2.9
+      repository: set-by-flavor
+      tag: set-by-flavor
 
 botAccounts:
   enabled: false

diff --git a/common/zarf.yaml b/common/zarf.yaml
@@ -19,7 +19,7 @@ components:
         namespace: gitlab
         url: https://charts.gitlab.io/
         gitPath: chart
-        version: "8.4.2"
+        version: "8.5.1"
         valuesFiles:
           - ../values/common-values.yaml
       - name: uds-gitlab-settings

diff --git a/values/registry1-values.yaml b/values/registry1-values.yaml
@@ -5,62 +5,62 @@ gitlab:
   webservice:
     image:
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-webservice
-      tag: 17.2.9
+      tag: 17.3.6
     workhorse:
       image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-workhorse
       # renovate: datasource=docker depName=registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-workhorse versioning=semver
-      tag: 17.2.9
+      tag: 17.3.6
   sidekiq:
     image:
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-sidekiq
-      tag: 17.2.9
+      tag: 17.3.6
   migrations:
     image:
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox
-      tag: 17.2.9
+      tag: 17.3.6
   gitaly:
     image:
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitaly
-      tag: 17.2.9
+      tag: 17.3.6
   gitlab-exporter:
     image:
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-exporter
-      tag: 17.2.9
+      tag: 17.3.6
   gitlab-pages:
     image:
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-pages
-      tag: 17.2.9
+      tag: 17.3.6
   gitlab-shell:
     image:
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-shell
-      tag: 17.2.9
+      tag: 17.3.6
   praefect:
     image:
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitaly
-      tag: 17.2.9
+      tag: 17.3.6
   toolbox:
     image:
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox
-      tag: 17.2.9
+      tag: 17.3.6
 
 global:
   certificates:
     image:
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/certificates
-      tag: 17.2.9
+      tag: 17.3.6
   gitlabBase:
     image:
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-base
-      tag: 17.2.9
+      tag: 17.3.6
   kubectl:
     image:
       repository: registry1.dso.mil/ironbank/gitlab/gitlab/kubectl
-      tag: 17.2.9
+      tag: 17.3.6
 
 registry:
   image:
     repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-container-registry
-    tag: 17.2.9
+    tag: 17.3.6
 
 shared-secrets:
   selfsign:
@@ -71,4 +71,4 @@ shared-secrets:
 upgradeCheck:
   image:
     repository: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-base
-    tag: 17.2.9
+    tag: 17.3.6
diff --git a/values/upstream-values.yaml b/values/upstream-values.yaml
@@ -5,70 +5,70 @@ gitlab:
   webservice:
     image:
       repository: registry.gitlab.com/gitlab-org/build/cng/gitlab-webservice-ee
-      tag: v17.2.9
+      tag: v17.3.6
     workhorse:
       image: registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee
       # renovate: datasource=docker depName=registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee versioning=semver
-      tag: v17.2.9
+      tag: v17.3.6
   sidekiq:
     image:
       repository: registry.gitlab.com/gitlab-org/build/cng/gitlab-sidekiq-ee
-      tag: v17.2.9
+      tag: v17.3.6
   migrations:
     image:
       repository: registry.gitlab.com/gitlab-org/build/cng/gitlab-toolbox-ee
-      tag: v17.2.9
+      tag: v17.3.6
   gitaly:
     image:
       repository: registry.gitlab.com/gitlab-org/build/cng/gitaly
-      tag: v17.2.9
+      tag: v17.3.6
   gitlab-exporter:
     image:
       repository: registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter
-      tag: v17.2.9
+      tag: v17.3.6
   gitlab-pages:
     image:
       repository: registry.gitlab.com/gitlab-org/build/cng/gitlab-pages
-      tag: v17.2.9
+      tag: v17.3.6
   gitlab-shell:
     image:
       repository: registry.gitlab.com/gitlab-org/build/cng/gitlab-shell
-      tag: v17.2.9
+      tag: v17.3.6
   praefect:
     image:
       repository: registry.gitlab.com/gitlab-org/build/cng/gitaly
-      tag: v17.2.9
+      tag: v17.3.6
   toolbox:
     image:
       repository: registry.gitlab.com/gitlab-org/build/cng/gitlab-toolbox-ee
-      tag: v17.2.9
+      tag: v17.3.6
 
 global:
   certificates:
     image:
       repository: registry.gitlab.com/gitlab-org/build/cng/certificates
-      tag: v17.2.9
+      tag: v17.3.6
   gitlabBase:
     image:
       repository: registry.gitlab.com/gitlab-org/build/cng/gitlab-base
-      tag: v17.2.9
+      tag: v17.3.6
   kubectl:
     image:
       repository: registry.gitlab.com/gitlab-org/build/cng/kubectl
-      tag: v17.2.9
+      tag: v17.3.6
 
 registry:
   image:
     repository: registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry
-    tag: v17.2.9
+    tag: v17.3.6
 
 shared-secrets:
   selfsign:
     image:
       repository: registry.gitlab.com/gitlab-org/build/cng/cfssl-self-sign
-      tag: v17.2.9
+      tag: v17.3.6
 
 upgradeCheck:
   image:
     repository: registry.gitlab.com/gitlab-org/build/cng/gitlab-base
-    tag: v17.2.9
+    tag: v17.3.6
diff --git a/zarf.yaml b/zarf.yaml
@@ -53,19 +53,19 @@ components:
         valuesFiles:
           - values/registry1-values.yaml
     images:
-      - "registry1.dso.mil/ironbank/gitlab/gitlab/certificates:17.2.9"
+      - "registry1.dso.mil/ironbank/gitlab/gitlab/certificates:17.3.6"
       - "registry1.dso.mil/ironbank/gitlab/gitlab/cfssl-self-sign:1.6.1"
-      - "registry1.dso.mil/ironbank/gitlab/gitlab/gitaly:17.2.9"
-      - "registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-container-registry:17.2.9"
-      - "registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-pages:17.2.9"
-      - "registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-shell:17.2.9"
-      - "registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-sidekiq:17.2.9"
-      - "registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox:17.2.9"
-      - "registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-webservice:17.2.9"
-      - "registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-workhorse:17.2.9"
-      - "registry1.dso.mil/ironbank/gitlab/gitlab/kubectl:17.2.9"
-      - "registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-base:17.2.9"
-      - "registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-exporter:17.2.9"
+      - "registry1.dso.mil/ironbank/gitlab/gitlab/gitaly:17.3.6"
+      - "registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-container-registry:17.3.6"
+      - "registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-pages:17.3.6"
+      - "registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-shell:17.3.6"
+      - "registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-sidekiq:17.3.6"
+      - "registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox:17.3.6"
+      - "registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-webservice:17.3.6"
+      - "registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-workhorse:17.3.6"
+      - "registry1.dso.mil/ironbank/gitlab/gitlab/kubectl:17.3.6"
+      - "registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-base:17.3.6"
+      - "registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-exporter:17.3.6"
 
   # Note: upstream flavor is experimental
   - name: gitlab
@@ -83,16 +83,16 @@ components:
         valuesFiles:
           - values/upstream-values.yaml
     images:
-      - "registry.gitlab.com/gitlab-org/build/cng/certificates:v17.2.9"
-      - "registry.gitlab.com/gitlab-org/build/cng/cfssl-self-sign:v17.2.9"
-      - "registry.gitlab.com/gitlab-org/build/cng/gitaly:v17.2.9"
-      - "registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v17.2.9"
-      - "registry.gitlab.com/gitlab-org/build/cng/gitlab-pages:v17.2.9"
-      - "registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v17.2.9"
-      - "registry.gitlab.com/gitlab-org/build/cng/gitlab-sidekiq-ee:v17.2.9"
-      - "registry.gitlab.com/gitlab-org/build/cng/gitlab-toolbox-ee:v17.2.9"
-      - "registry.gitlab.com/gitlab-org/build/cng/gitlab-webservice-ee:v17.2.9"
-      - "registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v17.2.9"
-      - "registry.gitlab.com/gitlab-org/build/cng/kubectl:v17.2.9"
-      - "registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v17.2.9"
-      - "registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:v17.2.9"
+      - "registry.gitlab.com/gitlab-org/build/cng/certificates:v17.3.6"
+      - "registry.gitlab.com/gitlab-org/build/cng/cfssl-self-sign:v17.3.6"
+      - "registry.gitlab.com/gitlab-org/build/cng/gitaly:v17.3.6"
+      - "registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v17.3.6"
+      - "registry.gitlab.com/gitlab-org/build/cng/gitlab-pages:v17.3.6"
+      - "registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v17.3.6"
+      - "registry.gitlab.com/gitlab-org/build/cng/gitlab-sidekiq-ee:v17.3.6"
+      - "registry.gitlab.com/gitlab-org/build/cng/gitlab-toolbox-ee:v17.3.6"
+      - "registry.gitlab.com/gitlab-org/build/cng/gitlab-webservice-ee:v17.3.6"
+      - "registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v17.3.6"
+      - "registry.gitlab.com/gitlab-org/build/cng/kubectl:v17.3.6"
+      - "registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v17.3.6"
+      - "registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:v17.3.6"