diff --git a/moldes/consolidado/72-runtime-saude.yaml b/moldes/consolidado/72-runtime-saude.yaml
index 481e0b4..42a55db 100644
--- a/moldes/consolidado/72-runtime-saude.yaml
+++ b/moldes/consolidado/72-runtime-saude.yaml
@@ -47,7 +47,7 @@ spec:
             limits:   { cpu: 100m, memory: 64Mi }
       containers:
         - name: runtime-saude
-          image: docker.io/library/runtime-saude:1.2-demo
+          image: docker.io/library/runtime-saude:1.3-garmin-cifrado
           # `Never`: a imagem tem de estar no containerd do no ANTES do deploy.
           # "Presente no no" tambem nao e "atual" — conferir a TAG, e nao o nome.
           imagePullPolicy: Never
diff --git a/tenants/acme/67-runtime-saude.yaml b/tenants/acme/67-runtime-saude.yaml
index 8b899b8..0c597f1 100644
--- a/tenants/acme/67-runtime-saude.yaml
+++ b/tenants/acme/67-runtime-saude.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
       - name: runtime-saude
-        image: docker.io/library/runtime-saude:1.2-demo
+        image: docker.io/library/runtime-saude:1.3-garmin-cifrado
         imagePullPolicy: Never
         ports:
         - containerPort: 8083
diff --git a/tenants/demo/67-runtime-saude.yaml b/tenants/demo/67-runtime-saude.yaml
index 06ae2fa..53e404a 100644
--- a/tenants/demo/67-runtime-saude.yaml
+++ b/tenants/demo/67-runtime-saude.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
       - name: runtime-saude
-        image: docker.io/library/runtime-saude:1.2-demo
+        image: docker.io/library/runtime-saude:1.3-garmin-cifrado
         imagePullPolicy: Never
         ports:
         - containerPort: 8083
diff --git a/tenants/escolinha/67-runtime-saude.yaml b/tenants/escolinha/67-runtime-saude.yaml
index d55cafd..6bd8466 100644
--- a/tenants/escolinha/67-runtime-saude.yaml
+++ b/tenants/escolinha/67-runtime-saude.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
       - name: runtime-saude
-        image: docker.io/library/runtime-saude:1.2-demo
+        image: docker.io/library/runtime-saude:1.3-garmin-cifrado
         imagePullPolicy: Never
         ports:
         - containerPort: 8083
diff --git a/tenants/piloto/67-runtime-saude.yaml b/tenants/piloto/67-runtime-saude.yaml
index ff05fb7..7e48c25 100644
--- a/tenants/piloto/67-runtime-saude.yaml
+++ b/tenants/piloto/67-runtime-saude.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
       - name: runtime-saude
-        image: docker.io/library/runtime-saude:1.2-demo
+        image: docker.io/library/runtime-saude:1.3-garmin-cifrado
         imagePullPolicy: Never
         ports:
         - containerPort: 8083