Should OAuth2-Proxy's imagePullPolicy Default to IfNotPresent?

[wss29]

hi,

Current Implementation Issue:

In templateDeployment.yaml (under org.eclipse.theia.cloud.operator), the default imagePullPolicy for quay.io/oauth2-proxy/oauth2-proxy is set to Always

Why This Is Problematic for Session Pod Startup:

1. Network connectivity issues may prevent access to the image registry, blocking application launch

2. The system unnecessarily pulls the image every time, despite it being already downloaded and available in containerd

Proposed Solution:

Change the default imagePullPolicy to IfNotPresent to resolve these issues

Configuration Enhancement Request:

Could the OAuth2-Proxy imagePullPolicy be made configurable in Theia-Cloud's values.yaml? If not currently supported, adding this option would provide valuable flexibility for users to choose their preferred behavior.

[jfaltermeier]

Hi, thanks, you are right, we should change this. We probably want to make this configurable via the Helm chart values.
Please open a ticket: https://github.com/eclipse-theia/theia-cloud/issues/new/choose

[wss29]

hi @jfaltermeier
I have post a ticket 420

[jfaltermeier]

One additional hint: it should be possible to override these templates:
https://github.com/eclipse-theia/theia-cloud/blob/main/java/operator/org.eclipse.theia.cloud.operator/src/main/java/org/eclipse/theia/cloud/operator/util/JavaResourceUtil.java

Before loading a template from the JAR, the operator will first look for a file with the same name in the /templates directory.

We have an older example of this approach here:
https://github.com/eclipse-theia/theia-cloud/tree/main/demo/dockerfiles/demo-operator-custom-template
https://github.com/eclipse-theia/theia-cloud/blob/main/demo/dockerfiles/demo-operator-custom-template/Dockerfile

So it will be possible to customize this part without any coding, you just have to build a new operator image