diff --git a/charts/kpack/Chart.yaml b/charts/kpack/Chart.yaml
index 8b510e8..37a1839 100644
--- a/charts/kpack/Chart.yaml
+++ b/charts/kpack/Chart.yaml
@@ -15,10 +15,10 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.2.1
+version: 0.2.2
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "0.12.3"
+appVersion: "0.13.2"
diff --git a/charts/kpack/charts/crds/templates/builder.yaml b/charts/kpack/charts/crds/templates/builder.yaml
index e4441f0..e501030 100644
--- a/charts/kpack/charts/crds/templates/builder.yaml
+++ b/charts/kpack/charts/crds/templates/builder.yaml
@@ -37,6 +37,9 @@ spec:
     - name: Ready
       type: string
       jsonPath: .status.conditions[?(@.type=="Ready")].status
+    - name: UpToDate
+      type: string
+      jsonPath: .status.conditions[?(@.type=="UpToDate")].status
   conversion:
     strategy: Webhook
     webhook:
diff --git a/charts/kpack/charts/crds/templates/cluster-builder.yaml b/charts/kpack/charts/crds/templates/cluster-builder.yaml
index cd5662c..f03e7e2 100644
--- a/charts/kpack/charts/crds/templates/cluster-builder.yaml
+++ b/charts/kpack/charts/crds/templates/cluster-builder.yaml
@@ -37,6 +37,9 @@ spec:
     - name: Ready
       type: string
       jsonPath: .status.conditions[?(@.type=="Ready")].status
+    - name: UpToDate
+      type: string
+      jsonPath: .status.conditions[?(@.type=="UpToDate")].status
   names:
     kind: ClusterBuilder
     listKind: ClusterBuilderList
diff --git a/charts/kpack/templates/cluster-role.yaml b/charts/kpack/templates/cluster-role.yaml
index 4222333..9d52591 100644
--- a/charts/kpack/templates/cluster-role.yaml
+++ b/charts/kpack/templates/cluster-role.yaml
@@ -38,6 +38,8 @@ rules:
   - ""
   resources:
   - secrets
+  - pods/log
+  - namespaces
   verbs:
   - get
 - apiGroups:
diff --git a/charts/kpack/templates/config-map.yaml b/charts/kpack/templates/config-map.yaml
index d97fcf9..5f97292 100644
--- a/charts/kpack/templates/config-map.yaml
+++ b/charts/kpack/templates/config-map.yaml
@@ -30,46 +30,46 @@ kind: ConfigMap
 metadata:
   name: build-init-image
 data:
-  image: gcr.io/cf-build-service-public/kpack/build-init@sha256:92c6835bb9ea48c90042df0f96eef1b34e06ccf593c39ab79831e4b21f374423
+  image: ghcr.io/amphitheatre-app/kpack/build-init@sha256:78937dfcd61aa44da0c2425c6a1357c05142614758538a9643a2b2ec04362b95
 ---
 apiVersion: v1
 kind: ConfigMap
 metadata:
   name: build-init-windows-image
 data:
-  image: gcr.io/cf-build-service-public/kpack/build-init-windows@sha256:c3eb52275df6d6abef7841741cc2106920b4f6f509da2d5d9334aaf671fbe584
+  image: ghcr.io/amphitheatre-app/kpack/build-init-windows@sha256:8ab4d103f61708ee7c5a14f2d2cf948fe63edf1e5d7f76e13e345188b4325f85
 ---
 apiVersion: v1
 kind: ConfigMap
 metadata:
   name: build-waiter-image
 data:
-  image: gcr.io/cf-build-service-public/kpack/build-waiter@sha256:549daf44199a7e94afd8cbbcbe8837185d597d1a61548d27eafafd83bb1fa1bc
+  image: ghcr.io/amphitheatre-app/kpack/build-waiter@sha256:06b5956c9c063f455b941d17da77d3d7e137845cbacdf33cf1fdbfa16be62799
 ---
 apiVersion: v1
 kind: ConfigMap
 metadata:
   name: rebase-image
 data:
-  image: gcr.io/cf-build-service-public/kpack/rebase@sha256:955f76d02b4885d08f25071246021feae1a5622f5f8032ee53b1f23b689c7f2a
+  image: ghcr.io/amphitheatre-app/kpack/rebase@sha256:95c3b80119e188e56811a3f53373b587b0c90f5980ae5a8f2ce38ca05e6a3837
 ---
 apiVersion: v1
 kind: ConfigMap
 metadata:
   name: lifecycle-image
 data:
-  image: gcr.io/cf-build-service-public/kpack/lifecycle@sha256:0b1cd35012f7152053c42e0d6835cbb5b7c9c24207a0627f556bd931e678f8d7
+  image: ghcr.io/amphitheatre-app/kpack/lifecycle@sha256:199043ac6fd40f772decb804ca92cdcbb22b76cf8db622761e25c39c2925d3b7
 ---
 apiVersion: v1
 kind: ConfigMap
 metadata:
   name: completion-image
 data:
-  image: gcr.io/cf-build-service-public/kpack/completion@sha256:9a7b149ec23fa85bee6dbbc5fbc1e6d65228685768e56709967499cc66fe62df
+  image: ghcr.io/amphitheatre-app/kpack/completion@sha256:093a2fa6aecb75f38d967a49f3b761eccf98736c8bfc4397dd1dcc5a71c6e2ce
 ---
 apiVersion: v1
 kind: ConfigMap
 metadata:
   name: completion-windows-image
 data:
-  image: gcr.io/cf-build-service-public/kpack/completion-windows@sha256:82d62a33b017680904975e33f76cd7256f3a987b84bd1e774a4262958ff9c43f
+  image: ghcr.io/amphitheatre-app/kpack/completion-windows@sha256:913526ac02cc7953736f7c3ad901e96dbf081ce3d6cc142522523b4cd923c977
diff --git a/charts/kpack/templates/controller-deployment.yaml b/charts/kpack/templates/controller-deployment.yaml
index ad999e5..a16e176 100644
--- a/charts/kpack/templates/controller-deployment.yaml
+++ b/charts/kpack/templates/controller-deployment.yaml
@@ -11,7 +11,7 @@ spec:
     metadata:
       labels:
         app: kpack-controller
-        version: 0.12.3
+        version: 0.13.2
     spec:
       securityContext:
         runAsNonRoot: true
@@ -32,12 +32,14 @@ spec:
           capabilities:
             drop:
             - ALL
-        image: gcr.io/cf-build-service-public/kpack/controller@sha256:6a6e49d1bed164f151d2f8b9fbe24edd6a99c467fd6a747fb7b061a4c3529fc5
+        image: ghcr.io/amphitheatre-app/kpack/controller@sha256:2e9c10dc51149b5dc7790e2dbbb27411f3ba60d62111f7bc778f4249fdf4c9b2
         env:
         - name: ENABLE_PRIORITY_CLASSES
           value: "false"
         - name: INJECTED_SIDECAR_SUPPORT
           value: "false"
+        - name: EXPERIMENTAL_GENERATE_SLSA_ATTESTATION
+          value: "false"
         - name: INSECURE_SSH_TRUST_UNKNOWN_HOSTS
           value: "true"
         - name: CONFIG_LOGGING_NAME
@@ -50,6 +52,8 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
+        - name: SYSTEM_SERVICE_ACCOUNT
+          value: kpack-controller
         - name: BUILD_INIT_IMAGE
           valueFrom:
             configMapKeyRef:
diff --git a/charts/kpack/templates/webhook-deployment.yaml b/charts/kpack/templates/webhook-deployment.yaml
index a1fd384..d44aeea 100644
--- a/charts/kpack/templates/webhook-deployment.yaml
+++ b/charts/kpack/templates/webhook-deployment.yaml
@@ -12,7 +12,7 @@ spec:
       labels:
         app: kpack-webhook
         role: kpack-webhook
-        version: 0.12.3
+        version: 0.13.2
     spec:
       securityContext:
         runAsNonRoot: true
@@ -33,7 +33,7 @@ spec:
           capabilities:
             drop:
             - ALL
-        image: gcr.io/cf-build-service-public/kpack/webhook@sha256:c5eed46c43ffeed170d4a7047734fb102a8af21681cad66badff578464692eb3
+        image: ghcr.io/amphitheatre-app/kpack/webhook@sha256:81c5597a55259f9be795fe3cb77a9eeda58e0de82854795cd3f4743fc433a758
         ports:
         - name: https-webhook
           containerPort: 8443