diff --git a/src/istio/common/zarf.yaml b/src/istio/common/zarf.yaml
index 9aa28cf2b1..7eec2905b7 100644
--- a/src/istio/common/zarf.yaml
+++ b/src/istio/common/zarf.yaml
@@ -9,13 +9,13 @@ components:
     required: true
     charts:
       - name: base
-        namespace: istio-system
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.19.3
-      - name: istiod
+        version: 1.20.2
         namespace: istio-system
+      - name: istiod
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.19.3
+        version: 1.20.2
+        namespace: istio-system
         valuesFiles:
           - "../values/values.yaml"
     manifests:
diff --git a/src/istio/values/registry1-values.yaml b/src/istio/values/registry1-values.yaml
index ba53b4ffa2..b32517c0a8 100644
--- a/src/istio/values/registry1-values.yaml
+++ b/src/istio/values/registry1-values.yaml
@@ -1,11 +1,11 @@
 pilot:
   hub: "registry1.dso.mil/ironbank/tetrate/istio"
-  tag: "1.19.3-tetratefips-v0"
+  tag: "1.20.2-tetratefips-v0"
   image: pilot
 global:
   # #variant: distroless
   hub: "registry1.dso.mil/ironbank/tetrate/istio"
-  tag: "1.19.3-tetratefips-v0"
+  tag: "1.20.2-tetratefips-v0"
   proxy_init:
     # Base name for the proxy_init container, used to configure iptables.
     image: proxyv2
diff --git a/src/istio/values/upstream-values.yaml b/src/istio/values/upstream-values.yaml
index 4d446bb39a..8dd7ddfd72 100644
--- a/src/istio/values/upstream-values.yaml
+++ b/src/istio/values/upstream-values.yaml
@@ -1,11 +1,11 @@
 pilot:
   hub: "docker.io/istio"
-  tag: "1.19.3-distroless"
+  tag: "1.20.2-distroless"
   image: pilot
 global:
   # #variant: distroless
   hub: "docker.io/istio"
-  tag: "1.19.3-distroless"
+  tag: "1.20.2-distroless"
   proxy_init:
     # Base name for the proxy_init container, used to configure iptables.
     image: proxyv2
diff --git a/src/istio/zarf.yaml b/src/istio/zarf.yaml
index 0266a1042a..3725cd89fc 100644
--- a/src/istio/zarf.yaml
+++ b/src/istio/zarf.yaml
@@ -26,8 +26,8 @@ components:
         valuesFiles:
           - "values/upstream-values.yaml"
     images:
-      - "docker.io/istio/pilot:1.19.3-distroless"
-      - "docker.io/istio/proxyv2:1.19.3-distroless"
+      - "docker.io/istio/pilot:1.20.2-distroless"
+      - "docker.io/istio/proxyv2:1.20.2-distroless"
 
   - name: istio-controlplane
     required: true
@@ -40,15 +40,15 @@ components:
         valuesFiles:
           - "values/registry1-values.yaml"
     images:
-      - registry1.dso.mil/ironbank/tetrate/istio/proxyv2:1.19.3-tetratefips-v0
-      - registry1.dso.mil/ironbank/tetrate/istio/pilot:1.19.3-tetratefips-v0
+      - registry1.dso.mil/ironbank/tetrate/istio/proxyv2:1.20.2-tetratefips-v0
+      - registry1.dso.mil/ironbank/tetrate/istio/pilot:1.20.2-tetratefips-v0
 
   - name: istio-admin-gateway
     required: true
     charts:
       - name: gateway
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.19.3
+        version: 1.20.2
         releaseName: admin-ingressgateway
         namespace: istio-admin-gateway
       - name: uds-istio-config
@@ -63,7 +63,7 @@ components:
     charts:
       - name: gateway
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.19.3
+        version: 1.20.2
         releaseName: tenant-ingressgateway
         namespace: istio-tenant-gateway
       - name: uds-istio-config
@@ -78,7 +78,7 @@ components:
     charts:
       - name: gateway
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.19.3
+        version: 1.20.2
         releaseName: passthrough-ingressgateway
         namespace: istio-passthrough-gateway
       - name: uds-istio-config