diff --git a/docker-compose/metrics/docker-compose.yaml b/docker-compose/metrics/docker-compose.yaml
index 79235ce..c587e47 100644
--- a/docker-compose/metrics/docker-compose.yaml
+++ b/docker-compose/metrics/docker-compose.yaml
@@ -18,13 +18,13 @@ services:
     ports:
       - "9090:9090"
   spire-server:
-    image: gcr.io/spiffe-io/spire-server:1.0.0
+    image: gcr.io/spiffe-io/spire-server:1.2.3
     hostname: spire-server
     volumes:
         - ./spire/server:/opt/spire/conf/server
     command: ["-config", "/opt/spire/conf/server/server.conf"]
   spire-agent:
-    image: gcr.io/spiffe-io/spire-agent:1.0.0
+    image: gcr.io/spiffe-io/spire-agent:1.2.3
     depends_on: ["spire-server"]
     hostname: spire-agent
     volumes:
diff --git a/docker-compose/nested-spire/docker-compose.yaml b/docker-compose/nested-spire/docker-compose.yaml
index c8c6779..51ac634 100644
--- a/docker-compose/nested-spire/docker-compose.yaml
+++ b/docker-compose/nested-spire/docker-compose.yaml
@@ -2,7 +2,7 @@ version: '3'
 services:
   # Root
   root-server:
-    image: gcr.io/spiffe-io/spire-server:1.0.0
+    image: gcr.io/spiffe-io/spire-server:1.2.3
     hostname: root-server
     volumes:
       - ./root/server:/opt/spire/conf/server
@@ -10,7 +10,7 @@ services:
   root-agent:
     # Share the host pid namespace so this agent can attest the nested servers
     pid: "host"
-    image: gcr.io/spiffe-io/spire-agent:1.0.0
+    image: gcr.io/spiffe-io/spire-agent:1.2.3
     depends_on: ["root-server"]
     hostname: root-agent
     volumes:
@@ -23,7 +23,7 @@ services:
   nestedA-server:
     # Share the host pid namespace so this server can be attested by the root agent
     pid: "host"
-    image: gcr.io/spiffe-io/spire-server:1.0.0
+    image: gcr.io/spiffe-io/spire-server:1.2.3
     hostname: nestedA-server
     labels:
       # label to attest server against root-agent
@@ -35,7 +35,7 @@ services:
       - ./nestedA/server:/opt/spire/conf/server
     command: ["-config", "/opt/spire/conf/server/server.conf"]
   nestedA-agent:
-    image: gcr.io/spiffe-io/spire-agent:1.0.0
+    image: gcr.io/spiffe-io/spire-agent:1.2.3
     hostname: nestedA-agent
     depends_on: ["nestedA-server"]
     volumes:
@@ -45,7 +45,7 @@ services:
   nestedB-server:
     # Share the host pid namespace so this server can be attested by the root agent
     pid: "host"
-    image: gcr.io/spiffe-io/spire-server:1.0.0
+    image: gcr.io/spiffe-io/spire-server:1.2.3
     hostname: nestedB-server
     depends_on: ["root-server","root-agent"]
     labels:
@@ -57,7 +57,7 @@ services:
       - ./nestedB/server:/opt/spire/conf/server
     command: ["-config", "/opt/spire/conf/server/server.conf"]
   nestedB-agent:
-    image: gcr.io/spiffe-io/spire-agent:1.0.0
+    image: gcr.io/spiffe-io/spire-agent:1.2.3
     hostname: nestedB-agent
     depends_on: ["nestedB-server"]
     volumes:
diff --git a/k8s/oidc-aws/agent-daemonset.yaml b/k8s/oidc-aws/agent-daemonset.yaml
index 1c9353d..dd65efc 100644
--- a/k8s/oidc-aws/agent-daemonset.yaml
+++ b/k8s/oidc-aws/agent-daemonset.yaml
@@ -28,7 +28,7 @@ spec:
           args: ["-t", "30", "spire-server:8081"]
       containers:
         - name: spire-agent
-          image: gcr.io/spiffe-io/spire-agent:1.0.0
+          image: gcr.io/spiffe-io/spire-agent:1.2.3
           args: ["-config", "/run/spire/config/agent.conf"]
           volumeMounts:
             - name: spire-config
diff --git a/k8s/oidc-aws/server-statefulset.yaml b/k8s/oidc-aws/server-statefulset.yaml
index 8dce0ca..07cc123 100644
--- a/k8s/oidc-aws/server-statefulset.yaml
+++ b/k8s/oidc-aws/server-statefulset.yaml
@@ -21,7 +21,7 @@ spec:
       shareProcessNamespace: true
       containers:
         - name: spire-server
-          image: gcr.io/spiffe-io/spire-server:1.0.0
+          image: gcr.io/spiffe-io/spire-server:1.2.3
           args:
             - -config
             - /run/spire/config/server.conf
diff --git a/k8s/oidc-vault/k8s/server-statefulset.yaml b/k8s/oidc-vault/k8s/server-statefulset.yaml
index 8dce0ca..07cc123 100644
--- a/k8s/oidc-vault/k8s/server-statefulset.yaml
+++ b/k8s/oidc-vault/k8s/server-statefulset.yaml
@@ -21,7 +21,7 @@ spec:
       shareProcessNamespace: true
       containers:
         - name: spire-server
-          image: gcr.io/spiffe-io/spire-server:1.0.0
+          image: gcr.io/spiffe-io/spire-server:1.2.3
           args:
             - -config
             - /run/spire/config/server.conf
diff --git a/k8s/quickstart/agent-daemonset.yaml b/k8s/quickstart/agent-daemonset.yaml
index 1c9353d..dd65efc 100644
--- a/k8s/quickstart/agent-daemonset.yaml
+++ b/k8s/quickstart/agent-daemonset.yaml
@@ -28,7 +28,7 @@ spec:
           args: ["-t", "30", "spire-server:8081"]
       containers:
         - name: spire-agent
-          image: gcr.io/spiffe-io/spire-agent:1.0.0
+          image: gcr.io/spiffe-io/spire-agent:1.2.3
           args: ["-config", "/run/spire/config/agent.conf"]
           volumeMounts:
             - name: spire-config
diff --git a/k8s/quickstart/client-deployment.yaml b/k8s/quickstart/client-deployment.yaml
index 6e2e23c..6e6b6b0 100644
--- a/k8s/quickstart/client-deployment.yaml
+++ b/k8s/quickstart/client-deployment.yaml
@@ -18,7 +18,7 @@ spec:
       dnsPolicy: ClusterFirstWithHostNet
       containers:
         - name: client
-          image: gcr.io/spiffe-io/spire-agent:1.0.0
+          image: gcr.io/spiffe-io/spire-agent:1.2.3
           command: ["sleep"]
           args: ["1000000000"]
           volumeMounts:
diff --git a/k8s/quickstart/server-statefulset.yaml b/k8s/quickstart/server-statefulset.yaml
index 3ac9f52..a1dbcd7 100644
--- a/k8s/quickstart/server-statefulset.yaml
+++ b/k8s/quickstart/server-statefulset.yaml
@@ -20,7 +20,7 @@ spec:
       serviceAccountName: spire-server
       containers:
         - name: spire-server
-          image: gcr.io/spiffe-io/spire-server:1.0.0
+          image: gcr.io/spiffe-io/spire-server:1.2.3
           args:
             - -config
             - /run/spire/config/server.conf