OAuth2-Proxy's imagePullPolicy Default to IfNotPresent

[wss29]

Is your feature request related to a problem? Please describe.

Current Implementation Issue:

In templateDeployment.yaml (under org.eclipse.theia.cloud.operator), the default imagePullPolicy for quay.io/oauth2-proxy/oauth2-proxy is set to Always

Why This Is Problematic for Session Pod Startup:

1.Network connectivity issues may prevent access to the image registry, blocking application launch

2.The system unnecessarily pulls the image every time, despite it being already downloaded and available in containerd

Describe the solution you'd like

Proposed Solution:

Change the default imagePullPolicy to IfNotPresent to resolve these issues

Describe alternatives you've considered

Configuration Enhancement Request:

Could the OAuth2-Proxy imagePullPolicy be made configurable in Theia-Cloud's values.yaml? If not currently supported, adding this option would provide valuable flexibility for users to choose their preferred behavior.

Cluster provider

No response

Additional information

No response

[github-actions]

This issue is stale because it has been open for 180 days with no activity.

[lucas-koehler]

Two notes after checking the Kubernetes documentation at https://kubernetes.io/docs/concepts/containers/images/ :

• If the image is already present, the registry is contacted but the image is not redownloaded making this check cheap
• We could omit the imagePullPolicy completely to fall back to Kubernetes defaults resulting in this behavior:

When you (or a controller) submit a new Pod to the API server, your cluster sets the imagePullPolicy field when specific conditions are met:

• if you omit the imagePullPolicy field, and you specify the digest for the container image, the imagePullPolicy is automatically set to IfNotPresent.
• if you omit the imagePullPolicy field, and the tag for the container image is :latest, imagePullPolicy is automatically set to Always.
• if you omit the imagePullPolicy field, and you don't specify the tag for the container image, imagePullPolicy is automatically set to Always.
• if you omit the imagePullPolicy field, and you specify a tag for the container image that isn't :latest, the imagePullPolicy is automatically set to IfNotPresent

To summarize, this would result in latest images always being pulled but specified versions to use IfNotPresent