diff --git a/moldes/consolidado/70-runtime-core.yaml b/moldes/consolidado/70-runtime-core.yaml
index 7184788..2630ed9 100644
--- a/moldes/consolidado/70-runtime-core.yaml
+++ b/moldes/consolidado/70-runtime-core.yaml
@@ -47,7 +47,7 @@ spec:
             limits:   { cpu: 100m, memory: 64Mi }
       containers:
         - name: runtime-core
-          image: docker.io/library/runtime-core:1.13-aluno
+          image: docker.io/library/runtime-core:1.14-permissoes
           # `Never`: a imagem tem de estar no containerd do no ANTES do deploy.
           # "Presente no no" tambem nao e "atual" — conferir a TAG, e nao o nome.
           imagePullPolicy: Never
diff --git a/tenants/acme/65-runtime-core.yaml b/tenants/acme/65-runtime-core.yaml
index 1a01523..e61cdd2 100644
--- a/tenants/acme/65-runtime-core.yaml
+++ b/tenants/acme/65-runtime-core.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
       - name: runtime-core
-        image: docker.io/library/runtime-core:1.13-aluno
+        image: docker.io/library/runtime-core:1.14-permissoes
         imagePullPolicy: Never
         ports:
         - containerPort: 8083
diff --git a/tenants/demo/65-runtime-core.yaml b/tenants/demo/65-runtime-core.yaml
index c82a24f..5771acd 100644
--- a/tenants/demo/65-runtime-core.yaml
+++ b/tenants/demo/65-runtime-core.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
       - name: runtime-core
-        image: docker.io/library/runtime-core:1.13-aluno
+        image: docker.io/library/runtime-core:1.14-permissoes
         imagePullPolicy: Never
         ports:
         - containerPort: 8083
diff --git a/tenants/escolinha/65-runtime-core.yaml b/tenants/escolinha/65-runtime-core.yaml
index 3aea102..6445f6c 100644
--- a/tenants/escolinha/65-runtime-core.yaml
+++ b/tenants/escolinha/65-runtime-core.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
       - name: runtime-core
-        image: docker.io/library/runtime-core:1.13-aluno
+        image: docker.io/library/runtime-core:1.14-permissoes
         imagePullPolicy: Never
         ports:
         - containerPort: 8083
diff --git a/tenants/piloto/65-runtime-core.yaml b/tenants/piloto/65-runtime-core.yaml
index 28d5aa4..706410f 100644
--- a/tenants/piloto/65-runtime-core.yaml
+++ b/tenants/piloto/65-runtime-core.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
       - name: runtime-core
-        image: docker.io/library/runtime-core:1.13-aluno
+        image: docker.io/library/runtime-core:1.14-permissoes
         imagePullPolicy: Never
         ports:
         - containerPort: 8083