diff --git a/moldes/consolidado/70-runtime-core.yaml b/moldes/consolidado/70-runtime-core.yaml
index a48bf16..30202ee 100644
--- a/moldes/consolidado/70-runtime-core.yaml
+++ b/moldes/consolidado/70-runtime-core.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
         - name: runtime-core
-          image: docker.io/library/runtime-core:1.2-auditoria
+          image: docker.io/library/runtime-core:1.3-vinculo-keycloak
           # `Never`: a imagem tem de estar no containerd do no ANTES do deploy.
           # "Presente no no" tambem nao e "atual" — conferir a TAG, e nao o nome.
           imagePullPolicy: Never
diff --git a/tenants/acme/65-runtime-core.yaml b/tenants/acme/65-runtime-core.yaml
index 30f0048..ff12e38 100644
--- a/tenants/acme/65-runtime-core.yaml
+++ b/tenants/acme/65-runtime-core.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
       - name: runtime-core
-        image: docker.io/library/runtime-core:1.2-auditoria
+        image: docker.io/library/runtime-core:1.3-vinculo-keycloak
         imagePullPolicy: Never
         ports:
         - containerPort: 8083
diff --git a/tenants/demo/65-runtime-core.yaml b/tenants/demo/65-runtime-core.yaml
index 08f2b4d..1916335 100644
--- a/tenants/demo/65-runtime-core.yaml
+++ b/tenants/demo/65-runtime-core.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
       - name: runtime-core
-        image: docker.io/library/runtime-core:1.2-auditoria
+        image: docker.io/library/runtime-core:1.3-vinculo-keycloak
         imagePullPolicy: Never
         ports:
         - containerPort: 8083
diff --git a/tenants/escolinha-de-teste-2/70-runtime-core.yaml b/tenants/escolinha-de-teste-2/70-runtime-core.yaml
index 1d59614..0b5434e 100644
--- a/tenants/escolinha-de-teste-2/70-runtime-core.yaml
+++ b/tenants/escolinha-de-teste-2/70-runtime-core.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
         - name: runtime-core
-          image: docker.io/library/runtime-core:1.2-auditoria
+          image: docker.io/library/runtime-core:1.3-vinculo-keycloak
           # `Never`: a imagem tem de estar no containerd do no ANTES do deploy.
           # "Presente no no" tambem nao e "atual" — conferir a TAG, e nao o nome.
           imagePullPolicy: Never
diff --git a/tenants/escolinha-de-teste/70-runtime-core.yaml b/tenants/escolinha-de-teste/70-runtime-core.yaml
index 0725cc0..22b9963 100644
--- a/tenants/escolinha-de-teste/70-runtime-core.yaml
+++ b/tenants/escolinha-de-teste/70-runtime-core.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
         - name: runtime-core
-          image: docker.io/library/runtime-core:1.2-auditoria
+          image: docker.io/library/runtime-core:1.3-vinculo-keycloak
           # `Never`: a imagem tem de estar no containerd do no ANTES do deploy.
           # "Presente no no" tambem nao e "atual" — conferir a TAG, e nao o nome.
           imagePullPolicy: Never
diff --git a/tenants/escolinha/65-runtime-core.yaml b/tenants/escolinha/65-runtime-core.yaml
index ef46ec1..4c23b19 100644
--- a/tenants/escolinha/65-runtime-core.yaml
+++ b/tenants/escolinha/65-runtime-core.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
       - name: runtime-core
-        image: docker.io/library/runtime-core:1.2-auditoria
+        image: docker.io/library/runtime-core:1.3-vinculo-keycloak
         imagePullPolicy: Never
         ports:
         - containerPort: 8083
diff --git a/tenants/piloto/65-runtime-core.yaml b/tenants/piloto/65-runtime-core.yaml
index 8d0e0c0..407323b 100644
--- a/tenants/piloto/65-runtime-core.yaml
+++ b/tenants/piloto/65-runtime-core.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
       - name: runtime-core
-        image: docker.io/library/runtime-core:1.2-auditoria
+        image: docker.io/library/runtime-core:1.3-vinculo-keycloak
         imagePullPolicy: Never
         ports:
         - containerPort: 8083
diff --git a/tenants/teste5/70-runtime-core.yaml b/tenants/teste5/70-runtime-core.yaml
index 421a8d8..ca69836 100644
--- a/tenants/teste5/70-runtime-core.yaml
+++ b/tenants/teste5/70-runtime-core.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
         - name: runtime-core
-          image: docker.io/library/runtime-core:1.2-auditoria
+          image: docker.io/library/runtime-core:1.3-vinculo-keycloak
           # `Never`: a imagem tem de estar no containerd do no ANTES do deploy.
           # "Presente no no" tambem nao e "atual" — conferir a TAG, e nao o nome.
           imagePullPolicy: Never
diff --git a/tenants/zico-0/70-runtime-core.yaml b/tenants/zico-0/70-runtime-core.yaml
index f190ead..7e71dbb 100644
--- a/tenants/zico-0/70-runtime-core.yaml
+++ b/tenants/zico-0/70-runtime-core.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
         - name: runtime-core
-          image: docker.io/library/runtime-core:1.2-auditoria
+          image: docker.io/library/runtime-core:1.3-vinculo-keycloak
           # `Never`: a imagem tem de estar no containerd do no ANTES do deploy.
           # "Presente no no" tambem nao e "atual" — conferir a TAG, e nao o nome.
           imagePullPolicy: Never