From 561c9cbe78f773ed1f24b453f3a5bab90b653bf9 Mon Sep 17 00:00:00 2001 From: Francesco Romani Date: Wed, 3 Feb 2021 13:26:52 +0100 Subject: [PATCH] must-gather: use 'Always' pull policy Using the 'Always' pull policy improves the security of this flow and cost nothing in the common path, on which must-gather is run rarely if ever - so the first pull need to happen anyway. Signed-off-by: Francesco Romani --- must-gather/node-gather/daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/must-gather/node-gather/daemonset.yaml b/must-gather/node-gather/daemonset.yaml index a70cdba06..b9849a0bb 100644 --- a/must-gather/node-gather/daemonset.yaml +++ b/must-gather/node-gather/daemonset.yaml @@ -22,7 +22,7 @@ spec: - name: node-probe image: MUST_GATHER_IMAGE command: ["/bin/bash", "-c", "echo ok > /tmp/healthy && sleep INF"] - imagePullPolicy: IfNotPresent + imagePullPolicy: Always resources: requests: cpu: "100m"