{
  "schema_version": 2,
  "id": "operate/kubernetes/security/minimal-base-image",
  "title": "Use the minimal base image",
  "url": "https://redis.io/docs/latest/operate/kubernetes/security/minimal-base-image/",
  "summary": "Run Redis Software for Kubernetes cluster nodes on a container image built from Red Hat UBI 9 Minimal.",
  "tags": [
    "docs",
    "operate",
    "kubernetes"
  ],
  "last_updated": "2026-10-28T14:24:21-05:00",
  "page_type": "content",
  "content_hash": "83a35d5f7dd6ffde97a8b7b8d8e930f6cf1fda0826c6eabf0faa470cc50de0cc",
  "sections": [
    {
      "id": "overview",
      "title": "Overview",
      "role": "overview",
      "text": "You can run your Redis Enterprise cluster (REC) nodes on a Redis Software image built from the Red Hat Universal Base Image (UBI) 9 Minimal instead of the standard UBI 9 image. The minimal base image is available starting with operator version 8.0.18-11.\n\nThe minimal base image installs fewer operating system packages. Fewer packages mean a smaller attack surface and fewer Common Vulnerabilities and Exposures (CVEs) reported against the image by container scanners."
    },
    {
      "id": "use-the-minimal-image",
      "title": "Use the minimal image",
      "role": "content",
      "text": "Minimal images use the same version tag as the standard image, with a `.minimal` suffix. For example, the minimal image for `8.2.0-125.19` is `8.2.0-125.19.minimal`. Find the Redis Software image tag for your operator version in the [release notes](https://redis.io/docs/latest/operate/kubernetes/release-notes).\n\nSet `spec.redisEnterpriseImageSpec.versionTag` on the `RedisEnterpriseCluster` to the minimal tag:\n\n[code example]\n\nThe operator pulls the image from the default repository: `redislabs/redis` on Docker Hub, or `registry.connect.redhat.com/redislabs/redis-enterprise` on OpenShift. To pull from a private registry instead, see [Use a private registry for container images](https://redis.io/docs/latest/operate/kubernetes/deployment/container-images)."
    },
    {
      "id": "fips-mode",
      "title": "FIPS mode",
      "role": "content",
      "text": "Don't add `.minimal` to the version tag if [FIPS mode](https://redis.io/docs/latest/operate/kubernetes/security/fips) is enabled. The operator adds a `.fips` suffix to the version tag, and there is no `<version-tag>.minimal.fips` image. The FIPS-compatible image is already built from UBI 9 Minimal."
    }
  ],
  "examples": [
    {
      "id": "use-the-minimal-image-ex0",
      "language": "yaml",
      "code": "spec:\n  redisEnterpriseImageSpec:\n    versionTag: <version-tag>.minimal",
      "section_id": "use-the-minimal-image"
    }
  ]
}