<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div>Hello Phillipe,</div><div><br data-mce-bogus="1"></div><div>The reason for this change was to keep the images maintained in cases when base image (OS/tools) vulnerability is discovered, but midPoint doesn't need to be patched. Version specific image has the same binary of midPoint and the OS layer is not upgraded, only patched. So it's virtually like updating OS on a VM where you run midPoint.</div><div><br data-mce-bogus="1"></div><div>You're right this makes absolute image pinning more complicated.</div><div><br data-mce-bogus="1"></div><div>Best regards</div><div><br data-mce-bogus="1"></div><div>Richard Richter</div><div>Head of Infrastructure</div><div>evolveum.com</div><div><br></div><hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__"><b>From: </b>"midPoint General Discussion" <midpoint@lists.evolveum.com><br><b>To: </b>"midPoint General Discussion" <midpoint@lists.evolveum.com><br><b>Cc: </b>"HERTZOG Philippe" <Philippe.HERTZOG@groupe.schmidt><br><b>Sent: </b>Monday, July 6, 2026 10:15:34 AM<br><b>Subject: </b>[midPoint] Question about the image tagging strategy<br></div><div><br><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Aptos;}
@font-face
{font-family:Lato;}
@font-face
{font-family:"Century Gothic";
panose-1:2 11 5 2 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:12.0pt;
font-family:"Aptos",sans-serif;
mso-ligatures:standardcontextual;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#467886;
text-decoration:underline;}
span.EmailStyle18
{mso-style-type:personal-compose;
font-family:"Lato",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style></div><div data-marker="__QUOTED_TEXT__">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-family:'lato' , sans-serif">Hello,</span></p>
<p class="MsoNormal"><span style="font-family:'lato' , sans-serif"> </span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:'lato' , sans-serif">On the
</span><span style="font-family:'lato' , sans-serif"><a href="https://hub.docker.com/r/evolveum/midpoint" target="_blank" rel="nofollow noopener noreferrer"><span lang="EN-US">evolveum/midpoint - Docker Image</span></a></span><span style="font-family:'lato' , sans-serif">
<span lang="EN-US">page, there is a note stating “With these images, even the concrete version images (e.g., 4.11.0) are not immutable tags” and “Images released after the </span></span><span style="font-family:'lato' , sans-serif"><a href="https://docs.evolveum.com/midpoint/install/containers/container-image-2026-change/" target="_blank" rel="nofollow noopener noreferrer"><span lang="EN-US">June
2026 change</span></a><span lang="EN-US">, starting with maintenance releases 4.8.12, 4.9.7, 4.10.3 and 4.11.0, are floating tags, just like 4.11 and later releases, and the images are patched on the base image level (OS+Java+deps) as necessary”.</span></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:'lato' , sans-serif"> </span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:'lato' , sans-serif">If I understand this means that if I set un a pod to use image 4.11.x it is possible that between time the pod will run with an image that has changed compared to the time I tested
and validated the version? </span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:'lato' , sans-serif">If so, doesn’t this introduce some complication to take track of the version running in production. Even if I use an internal repo, I will have to find out at what version of the
4.11.x tagged image my local image refers to.</span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:'lato' , sans-serif"> </span></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="margin-left:5.4pt;border-collapse:collapse"><tbody><tr style="height:49.3pt"><td width="261" style="width:195.9pt;padding:0cm 5.4pt 0cm 9.9pt;height:49.3pt">
<p class="MsoNormal" align="center" style="text-align:center"><a href="https://www.groupe.schmidt/" target="_blank" rel="nofollow noopener noreferrer"><span style="font-size:11pt;text-decoration:none"><img border="0" width="241" height="126" style="width:2.5104in;height:1.3125in" id="Image_x0020_1" src="cid:image005.png@01DD0D30.615E6370"></span></a><span style="font-size:11pt"></span></p>
</td><td width="387" valign="top" style="width:290.05pt;padding:0cm 5.4pt 0cm 9.9pt;height:49.3pt">
<p class="MsoNormal"><b><span style="font-size:3pt;font-family:'century gothic' , sans-serif"> </span></b></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10pt;font-family:'calibri' , sans-serif">Philippe Hertzog</span></b></p>
<p class="MsoNormal" style="margin-bottom:12pt"><i><span lang="EN-US" style="font-size:10pt;font-family:'calibri' , sans-serif;color:#a61928">Architecte Cloud</span></i></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:9pt;font-family:'calibri' , sans-serif;color:black">20 Rue Westrich - F 67600 Sélestat</span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:'calibri' , sans-serif"><a href="mailto:philippe.hertzog@groupe.schmidt" target="_blank" rel="nofollow noopener noreferrer">philippe.hertzog@groupe.schmidt</a><br>
Tél : +33 3 88 57 xx xx<br>
Mobile : +33 6 1</span><span style="font-size:11pt">9</span><span style="font-size:9pt;font-family:'calibri' , sans-serif"> 1</span><span style="font-size:11pt">8</span><span style="font-size:9pt;font-family:'calibri' , sans-serif">
3</span><span style="font-size:11pt">2</span><span style="font-size:9pt;font-family:'calibri' , sans-serif"> 7</span><span style="font-size:11pt">8
</span><span style="font-size:9pt;font-family:'calibri' , sans-serif"> </span></p>
<p class="MsoNormal"><span style="font-size:4pt;font-family:'calibri' , sans-serif"> </span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:'calibri' , sans-serif;color:#a61928"><a href="http://www.groupe.schmidt/" target="_blank" rel="nofollow noopener noreferrer"><span lang="EN-US">www.groupe.schmidt</span></a></span><span style="font-size:7pt;font-family:'calibri' , sans-serif;color:#a61928;background:white">
</span><span lang="EN-US" style="font-size:10pt;font-family:'calibri' , sans-serif;color:#a61928;background:white">I
</span><a href="https://fr.linkedin.com/company/schmidt-groupe" target="_blank" rel="nofollow noopener noreferrer"><span style="font-size:18pt;font-family:'calibri' , sans-serif;color:#a61928;text-decoration:none"><img border="0" width="10" height="10" style="width:0.1041in;height:0.1041in" id="Image_x0020_8" src="cid:image003.png@01DD0D2F.F2C71420"></span></a><span lang="EN-US" style="font-size:10pt;font-family:'calibri' , sans-serif;color:#a61928;background:white"> I</span><a href="https://www.facebook.com/SchmidtGroupe" target="_blank" rel="nofollow noopener noreferrer"><span lang="EN-US" style="font-size:14pt;font-family:'calibri' , sans-serif;color:#a61928;background:white;text-decoration:none"><img border="0" width="10" height="10" style="width:0.1041in;height:0.1041in" id="Image_x0020_9" src="cid:image004.png@01DD0D2F.F2C71420"></span></a><span lang="EN-US" style="font-size:10pt;font-family:'calibri' , sans-serif;color:#a61928;background:white">I</span><span lang="EN-US" style="font-size:9pt;font-family:'century gothic' , sans-serif;color:#a61928"></span></p>
</td></tr></tbody></table>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11pt"> </span></p>
<p class="MsoNormal"><span lang="EN-US"> </span></p>
</div>
<br>_______________________________________________<br>midPoint mailing list<br>midPoint@lists.evolveum.com<br>https://lists.evolveum.com/mailman/listinfo/midpoint<br></div></div></body></html>