diff --git a/moldes/consolidado/70-runtime-core.yaml b/moldes/consolidado/70-runtime-core.yaml
index 4719fcf..cef0e5e 100644
--- a/moldes/consolidado/70-runtime-core.yaml
+++ b/moldes/consolidado/70-runtime-core.yaml
@@ -47,7 +47,7 @@ spec:
             limits:   { cpu: 100m, memory: 64Mi }
       containers:
         - name: runtime-core
-          image: docker.io/library/runtime-core:1.3-vinculo-keycloak
+          image: docker.io/library/runtime-core:1.4-consentimento-opcional
           # `Never`: a imagem tem de estar no containerd do no ANTES do deploy.
           # "Presente no no" tambem nao e "atual" — conferir a TAG, e nao o nome.
           imagePullPolicy: Never
diff --git a/tenants/acme/65-runtime-core.yaml b/tenants/acme/65-runtime-core.yaml
index 8498031..a4c6868 100644
--- a/tenants/acme/65-runtime-core.yaml
+++ b/tenants/acme/65-runtime-core.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
       - name: runtime-core
-        image: docker.io/library/runtime-core:1.3-vinculo-keycloak
+        image: docker.io/library/runtime-core:1.4-consentimento-opcional
         imagePullPolicy: Never
         ports:
         - containerPort: 8083
diff --git a/tenants/demo/65-runtime-core.yaml b/tenants/demo/65-runtime-core.yaml
index 6995c13..80fb589 100644
--- a/tenants/demo/65-runtime-core.yaml
+++ b/tenants/demo/65-runtime-core.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
       - name: runtime-core
-        image: docker.io/library/runtime-core:1.3-vinculo-keycloak
+        image: docker.io/library/runtime-core:1.4-consentimento-opcional
         imagePullPolicy: Never
         ports:
         - containerPort: 8083
diff --git a/tenants/escolinha-de-teste-2/70-runtime-core.yaml b/tenants/escolinha-de-teste-2/70-runtime-core.yaml
index e9d3b45..984e0c4 100644
--- a/tenants/escolinha-de-teste-2/70-runtime-core.yaml
+++ b/tenants/escolinha-de-teste-2/70-runtime-core.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
         - name: runtime-core
-          image: docker.io/library/runtime-core:1.3-vinculo-keycloak
+          image: docker.io/library/runtime-core:1.4-consentimento-opcional
           # `Never`: a imagem tem de estar no containerd do no ANTES do deploy.
           # "Presente no no" tambem nao e "atual" — conferir a TAG, e nao o nome.
           imagePullPolicy: Never
diff --git a/tenants/escolinha-de-teste/70-runtime-core.yaml b/tenants/escolinha-de-teste/70-runtime-core.yaml
index b61f877..59c8430 100644
--- a/tenants/escolinha-de-teste/70-runtime-core.yaml
+++ b/tenants/escolinha-de-teste/70-runtime-core.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
         - name: runtime-core
-          image: docker.io/library/runtime-core:1.3-vinculo-keycloak
+          image: docker.io/library/runtime-core:1.4-consentimento-opcional
           # `Never`: a imagem tem de estar no containerd do no ANTES do deploy.
           # "Presente no no" tambem nao e "atual" — conferir a TAG, e nao o nome.
           imagePullPolicy: Never
diff --git a/tenants/escolinha/65-runtime-core.yaml b/tenants/escolinha/65-runtime-core.yaml
index 2eaff16..71f7f64 100644
--- a/tenants/escolinha/65-runtime-core.yaml
+++ b/tenants/escolinha/65-runtime-core.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
       - name: runtime-core
-        image: docker.io/library/runtime-core:1.3-vinculo-keycloak
+        image: docker.io/library/runtime-core:1.4-consentimento-opcional
         imagePullPolicy: Never
         ports:
         - containerPort: 8083
diff --git a/tenants/piloto/65-runtime-core.yaml b/tenants/piloto/65-runtime-core.yaml
index 6f4f900..24e5837 100644
--- a/tenants/piloto/65-runtime-core.yaml
+++ b/tenants/piloto/65-runtime-core.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
       - name: runtime-core
-        image: docker.io/library/runtime-core:1.3-vinculo-keycloak
+        image: docker.io/library/runtime-core:1.4-consentimento-opcional
         imagePullPolicy: Never
         ports:
         - containerPort: 8083
diff --git a/tenants/teste5/70-runtime-core.yaml b/tenants/teste5/70-runtime-core.yaml
index 862a808..51eab37 100644
--- a/tenants/teste5/70-runtime-core.yaml
+++ b/tenants/teste5/70-runtime-core.yaml
@@ -47,7 +47,7 @@ spec:
             limits:   { cpu: 100m, memory: 64Mi }
       containers:
         - name: runtime-core
-          image: docker.io/library/runtime-core:1.3-vinculo-keycloak
+          image: docker.io/library/runtime-core:1.4-consentimento-opcional
           # `Never`: a imagem tem de estar no containerd do no ANTES do deploy.
           # "Presente no no" tambem nao e "atual" — conferir a TAG, e nao o nome.
           imagePullPolicy: Never
diff --git a/tenants/zico-0/70-runtime-core.yaml b/tenants/zico-0/70-runtime-core.yaml
index 875f0d8..b0b1350 100644
--- a/tenants/zico-0/70-runtime-core.yaml
+++ b/tenants/zico-0/70-runtime-core.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
         - name: runtime-core
-          image: docker.io/library/runtime-core:1.3-vinculo-keycloak
+          image: docker.io/library/runtime-core:1.4-consentimento-opcional
           # `Never`: a imagem tem de estar no containerd do no ANTES do deploy.
           # "Presente no no" tambem nao e "atual" — conferir a TAG, e nao o nome.
           imagePullPolicy: Never