[midPoint] Question about the image tagging strategy

[Richard Richter]

Hello Phillipe, 

The reason for this change was to keep the images maintained in cases when base image (OS/tools) vulnerability is discovered, but midPoint doesn't need to be patched. Version specific image has the same binary of midPoint and the OS layer is not upgraded, only patched. So it's virtually like updating OS on a VM where you run midPoint. 

You're right this makes absolute image pinning more complicated. 

Best regards 

Richard Richter 
Head of Infrastructure 
evolveum.com 


From: "midPoint General Discussion" <midpoint at lists.evolveum.com> 
To: "midPoint General Discussion" <midpoint at lists.evolveum.com> 
Cc: "HERTZOG Philippe" <Philippe.HERTZOG at groupe.schmidt> 
Sent: Monday, July 6, 2026 10:15:34 AM 
Subject: [midPoint] Question about the image tagging strategy 



Hello, 



On the [ https://hub.docker.com/r/evolveum/midpoint | evolveum/midpoint - Docker Image ] page, there is a note stating “With these images, even the concrete version images (e.g., 4.11.0) are not immutable tags” and “Images released after the [ https://docs.evolveum.com/midpoint/install/containers/container-image-2026-change/ | June
 2026 change ] , starting with maintenance releases 4.8.12, 4.9.7, 4.10.3 and 4.11.0, are floating tags, just like 4.11 and later releases, and the images are patched on the base image level (OS+Java+deps) as necessary”. 



If I understand this means that if I set un a pod to use image 4.11.x it is possible that between time the pod will run with an image that has changed compared to the time I tested and validated the version? 

If so, doesn’t this introduce some complication to take track of the version running in production. Even if I use an internal repo, I will have to find out at what version of the 4.11.x tagged image my local image refers to. 



[ https://www.groupe.schmidt/ ] 	



Philippe Hertzog 

Architecte Cloud 

20 Rue Westrich - F 67600 Sélestat 

[ mailto:philippe.hertzog at groupe.schmidt | philippe.hertzog at groupe.schmidt ] 
Tél : +33 3 88 57 xx xx 
Mobile : +33 6 1 9 1 8 3 2 7 8 



[ http://www.groupe.schmidt/ | www.groupe.schmidt ] I [ https://fr.linkedin.com/company/schmidt-groupe ] I [ https://www.facebook.com/SchmidtGroupe ] I 





_______________________________________________ 
midPoint mailing list 
midPoint at lists.evolveum.com 
https://lists.evolveum.com/mailman/listinfo/midpoint 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20260706/840dc046/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.png
Type: image/png
Size: 22855 bytes
Desc: image005.png
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20260706/840dc046/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 452 bytes
Desc: image003.png
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20260706/840dc046/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 455 bytes
Desc: image004.png
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20260706/840dc046/attachment-0005.png>