diff --git a/Makefile b/Makefile
index 45d3de8a..0d69f568 100644
--- a/Makefile
+++ b/Makefile
@@ -2,7 +2,7 @@ REGISTRY ?= mcr.microsoft.com/oss/azure/workload-identity
 PROXY_IMAGE_NAME := proxy
 INIT_IMAGE_NAME := proxy-init
 WEBHOOK_IMAGE_NAME := webhook
-IMAGE_VERSION ?= v1.2.1
+IMAGE_VERSION ?= v1.2.2
 
 ORG_PATH := github.com/Azure
 PROJECT_NAME := azure-workload-identity
diff --git a/charts/workload-identity-webhook/Chart.yaml b/charts/workload-identity-webhook/Chart.yaml
index 5812d86f..4b35e12e 100644
--- a/charts/workload-identity-webhook/Chart.yaml
+++ b/charts/workload-identity-webhook/Chart.yaml
@@ -2,8 +2,8 @@ apiVersion: v2
 name: workload-identity-webhook
 description: A Helm chart to install the azure-workload-identity webhook
 type: application
-version: 1.2.1
-appVersion: v1.2.1
+version: 1.2.2
+appVersion: v1.2.2
 home: https://github.com/Azure/azure-workload-identity
 sources:
   - https://github.com/Azure/azure-workload-identity
diff --git a/charts/workload-identity-webhook/README.md b/charts/workload-identity-webhook/README.md
index ffd3d41b..b42be796 100644
--- a/charts/workload-identity-webhook/README.md
+++ b/charts/workload-identity-webhook/README.md
@@ -34,7 +34,7 @@ helm upgrade -n azure-workload-identity-system [RELEASE_NAME] azure-workload-ide
 | replicaCount                       | The number of azure-workload-identity replicas to deploy for the webhook                                                          | `2`                                                     |
 | image.repository                   | Image repository                                                                                                                  | `mcr.microsoft.com/oss/azure/workload-identity/webhook` |
 | image.pullPolicy                   | Image pullPolicy                                                                                                                  | `IfNotPresent`                                          |
-| image.release                      | The image release tag to use                                                                                                      | Current release version: `v1.2.1`                       |
+| image.release                      | The image release tag to use                                                                                                      | Current release version: `v1.2.2`                       |
 | imagePullSecrets                   | Image pull secrets to use for retrieving images from private registries                                                           | `[]`                                                    |
 | nodeSelector                       | The node selector to use for pod scheduling                                                                                       | `kubernetes.io/os: linux`                               |
 | resources                          | The resource request/limits for the container image                                                                               | limits: 100m CPU, 30Mi, requests: 100m CPU, 20Mi        |
diff --git a/charts/workload-identity-webhook/values.yaml b/charts/workload-identity-webhook/values.yaml
index 84e742ca..39052011 100644
--- a/charts/workload-identity-webhook/values.yaml
+++ b/charts/workload-identity-webhook/values.yaml
@@ -7,7 +7,7 @@ image:
   repository: mcr.microsoft.com/oss/azure/workload-identity/webhook
   pullPolicy: IfNotPresent
   # Overrides the image tag whose default is the chart appVersion.
-  release: v1.2.1
+  release: v1.2.2
 imagePullSecrets: []
 nodeSelector:
   kubernetes.io/os: linux
diff --git a/config/manager/kustomization.yaml b/config/manager/kustomization.yaml
index b2e23524..7ac978a0 100644
--- a/config/manager/kustomization.yaml
+++ b/config/manager/kustomization.yaml
@@ -5,7 +5,7 @@ kind: Kustomization
 images:
 - name: manager
   newName: mcr.microsoft.com/oss/azure/workload-identity/webhook
-  newTag: v1.2.1
+  newTag: v1.2.2
 configMapGenerator:
 - literals:
   - AZURE_TENANT_ID="${AZURE_TENANT_ID}"
diff --git a/deploy/azure-wi-webhook.yaml b/deploy/azure-wi-webhook.yaml
index 64d14004..7764fc77 100644
--- a/deploy/azure-wi-webhook.yaml
+++ b/deploy/azure-wi-webhook.yaml
@@ -160,7 +160,7 @@ spec:
         envFrom:
         - configMapRef:
             name: azure-wi-webhook-config
-        image: mcr.microsoft.com/oss/azure/workload-identity/webhook:v1.2.1
+        image: mcr.microsoft.com/oss/azure/workload-identity/webhook:v1.2.2
         imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 6
diff --git a/docs/book/src/installation/mutating-admission-webhook.md b/docs/book/src/installation/mutating-admission-webhook.md
index 32f08e06..cc426baa 100644
--- a/docs/book/src/installation/mutating-admission-webhook.md
+++ b/docs/book/src/installation/mutating-admission-webhook.md
@@ -73,7 +73,7 @@ The deployment YAML contains the environment variables we defined above and we r
 Install the webhook using the deployment YAML via `kubectl apply -f` and `envsubst`:
 
 ```bash
-curl -sL https://github.com/Azure/azure-workload-identity/releases/download/v1.2.1/azure-wi-webhook.yaml | envsubst | kubectl apply -f -
+curl -sL https://github.com/Azure/azure-workload-identity/releases/download/v1.2.2/azure-wi-webhook.yaml | envsubst | kubectl apply -f -
 ```
 
 <details>
diff --git a/examples/migration/pod-with-proxy-init-and-proxy-sidecar.yaml b/examples/migration/pod-with-proxy-init-and-proxy-sidecar.yaml
index c678f18e..2e09d8f2 100644
--- a/examples/migration/pod-with-proxy-init-and-proxy-sidecar.yaml
+++ b/examples/migration/pod-with-proxy-init-and-proxy-sidecar.yaml
@@ -8,7 +8,7 @@ spec:
   serviceAccountName: workload-identity-sa
   initContainers:
   - name: init-networking
-    image: mcr.microsoft.com/oss/azure/workload-identity/proxy-init:v1.2.1
+    image: mcr.microsoft.com/oss/azure/workload-identity/proxy-init:v1.2.2
     securityContext:
       capabilities:
         add:
@@ -26,6 +26,6 @@ spec:
     ports:
     - containerPort: 80
   - name: proxy
-    image: mcr.microsoft.com/oss/azure/workload-identity/proxy:v1.2.1
+    image: mcr.microsoft.com/oss/azure/workload-identity/proxy:v1.2.2
     ports:
     - containerPort: 8000
diff --git a/manifest_staging/charts/workload-identity-webhook/Chart.yaml b/manifest_staging/charts/workload-identity-webhook/Chart.yaml
index 5812d86f..4b35e12e 100644
--- a/manifest_staging/charts/workload-identity-webhook/Chart.yaml
+++ b/manifest_staging/charts/workload-identity-webhook/Chart.yaml
@@ -2,8 +2,8 @@ apiVersion: v2
 name: workload-identity-webhook
 description: A Helm chart to install the azure-workload-identity webhook
 type: application
-version: 1.2.1
-appVersion: v1.2.1
+version: 1.2.2
+appVersion: v1.2.2
 home: https://github.com/Azure/azure-workload-identity
 sources:
   - https://github.com/Azure/azure-workload-identity
diff --git a/manifest_staging/charts/workload-identity-webhook/README.md b/manifest_staging/charts/workload-identity-webhook/README.md
index ffd3d41b..b42be796 100644
--- a/manifest_staging/charts/workload-identity-webhook/README.md
+++ b/manifest_staging/charts/workload-identity-webhook/README.md
@@ -34,7 +34,7 @@ helm upgrade -n azure-workload-identity-system [RELEASE_NAME] azure-workload-ide
 | replicaCount                       | The number of azure-workload-identity replicas to deploy for the webhook                                                          | `2`                                                     |
 | image.repository                   | Image repository                                                                                                                  | `mcr.microsoft.com/oss/azure/workload-identity/webhook` |
 | image.pullPolicy                   | Image pullPolicy                                                                                                                  | `IfNotPresent`                                          |
-| image.release                      | The image release tag to use                                                                                                      | Current release version: `v1.2.1`                       |
+| image.release                      | The image release tag to use                                                                                                      | Current release version: `v1.2.2`                       |
 | imagePullSecrets                   | Image pull secrets to use for retrieving images from private registries                                                           | `[]`                                                    |
 | nodeSelector                       | The node selector to use for pod scheduling                                                                                       | `kubernetes.io/os: linux`                               |
 | resources                          | The resource request/limits for the container image                                                                               | limits: 100m CPU, 30Mi, requests: 100m CPU, 20Mi        |
diff --git a/manifest_staging/charts/workload-identity-webhook/values.yaml b/manifest_staging/charts/workload-identity-webhook/values.yaml
index 84e742ca..39052011 100644
--- a/manifest_staging/charts/workload-identity-webhook/values.yaml
+++ b/manifest_staging/charts/workload-identity-webhook/values.yaml
@@ -7,7 +7,7 @@ image:
   repository: mcr.microsoft.com/oss/azure/workload-identity/webhook
   pullPolicy: IfNotPresent
   # Overrides the image tag whose default is the chart appVersion.
-  release: v1.2.1
+  release: v1.2.2
 imagePullSecrets: []
 nodeSelector:
   kubernetes.io/os: linux
diff --git a/manifest_staging/deploy/azure-wi-webhook.yaml b/manifest_staging/deploy/azure-wi-webhook.yaml
index 64d14004..7764fc77 100644
--- a/manifest_staging/deploy/azure-wi-webhook.yaml
+++ b/manifest_staging/deploy/azure-wi-webhook.yaml
@@ -160,7 +160,7 @@ spec:
         envFrom:
         - configMapRef:
             name: azure-wi-webhook-config
-        image: mcr.microsoft.com/oss/azure/workload-identity/webhook:v1.2.1
+        image: mcr.microsoft.com/oss/azure/workload-identity/webhook:v1.2.2
         imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 6
diff --git a/pkg/cmd/podidentity/detect.go b/pkg/cmd/podidentity/detect.go
index 1aa53813..da2d46a9 100644
--- a/pkg/cmd/podidentity/detect.go
+++ b/pkg/cmd/podidentity/detect.go
@@ -35,7 +35,7 @@ var (
 
 const (
 	imageRepository = "mcr.microsoft.com/oss/azure/workload-identity"
-	imageTag        = "v1.2.1"
+	imageTag        = "v1.2.2"
 
 	proxyInitImageName     = "proxy-init"
 	proxyImageName         = "proxy"
diff --git a/third_party/open-policy-agent/gatekeeper/helmify/static/Chart.yaml b/third_party/open-policy-agent/gatekeeper/helmify/static/Chart.yaml
index 5812d86f..4b35e12e 100644
--- a/third_party/open-policy-agent/gatekeeper/helmify/static/Chart.yaml
+++ b/third_party/open-policy-agent/gatekeeper/helmify/static/Chart.yaml
@@ -2,8 +2,8 @@ apiVersion: v2
 name: workload-identity-webhook
 description: A Helm chart to install the azure-workload-identity webhook
 type: application
-version: 1.2.1
-appVersion: v1.2.1
+version: 1.2.2
+appVersion: v1.2.2
 home: https://github.com/Azure/azure-workload-identity
 sources:
   - https://github.com/Azure/azure-workload-identity
diff --git a/third_party/open-policy-agent/gatekeeper/helmify/static/README.md b/third_party/open-policy-agent/gatekeeper/helmify/static/README.md
index ffd3d41b..b42be796 100644
--- a/third_party/open-policy-agent/gatekeeper/helmify/static/README.md
+++ b/third_party/open-policy-agent/gatekeeper/helmify/static/README.md
@@ -34,7 +34,7 @@ helm upgrade -n azure-workload-identity-system [RELEASE_NAME] azure-workload-ide
 | replicaCount                       | The number of azure-workload-identity replicas to deploy for the webhook                                                          | `2`                                                     |
 | image.repository                   | Image repository                                                                                                                  | `mcr.microsoft.com/oss/azure/workload-identity/webhook` |
 | image.pullPolicy                   | Image pullPolicy                                                                                                                  | `IfNotPresent`                                          |
-| image.release                      | The image release tag to use                                                                                                      | Current release version: `v1.2.1`                       |
+| image.release                      | The image release tag to use                                                                                                      | Current release version: `v1.2.2`                       |
 | imagePullSecrets                   | Image pull secrets to use for retrieving images from private registries                                                           | `[]`                                                    |
 | nodeSelector                       | The node selector to use for pod scheduling                                                                                       | `kubernetes.io/os: linux`                               |
 | resources                          | The resource request/limits for the container image                                                                               | limits: 100m CPU, 30Mi, requests: 100m CPU, 20Mi        |
diff --git a/third_party/open-policy-agent/gatekeeper/helmify/static/values.yaml b/third_party/open-policy-agent/gatekeeper/helmify/static/values.yaml
index 84e742ca..39052011 100644
--- a/third_party/open-policy-agent/gatekeeper/helmify/static/values.yaml
+++ b/third_party/open-policy-agent/gatekeeper/helmify/static/values.yaml
@@ -7,7 +7,7 @@ image:
   repository: mcr.microsoft.com/oss/azure/workload-identity/webhook
   pullPolicy: IfNotPresent
   # Overrides the image tag whose default is the chart appVersion.
-  release: v1.2.1
+  release: v1.2.2
 imagePullSecrets: []
 nodeSelector:
   kubernetes.io/os: linux