What are the tag names for icr.io/appcafe/open-liberty?

I need to use the 23.0.0.3 or 23.0.0.4 builds of OpenLiberty as Docker image from icr.io/appcafe.

But docker search icr.io/appcafe/open-liberty (returns http status 404) does not work, and icr.io/appcafe/open-liberty:23.0.0.4-full-java11-openj9 does not exist (using the naming convention for the previous versions)

And you cannot use icr.io/appcafe/open-liberty:latest as that is not stable and no repeatable builds can be created.

So what is the tagname for a Java 11 OpenJ9 based image?

The images on icr.io are UBI based and they end with -ubi. Therefore, the image is located at icr.io/appcafe/open-liberty:23.0.0.4-full-java11-openj9-ubi.

For a full list of available images, reference the Open Liberty container images page.

As a side note, 23.0.0.4-full-java11-openj9-ubi is just a tag like latest and should not be used if you want to ensure repeatable builds. Whenever you want to ensure the same container image is being used, you should always pin the image using the SHA256 digest of the image. For example, for the above image, that would be icr.io/appcafe/open-liberty@sha256:2e3e80c26892b29aa42b8f87f1827f59ae46fbad0df65413f6612e3650c5f84b