fix: enable ImageStream local lookup and default pullPolicy to Always

Short image names like "pint:dev" fail to resolve without local lookup
enabled on the ImageStream. Also switch default pullPolicy to Always so
pods pick up new SHAs after trigger-driven rollouts.

Bump chart to 0.3.1.

Author: mbillow

chart/Chart.yaml

@@ -2,5 +2,5 @@ apiVersion: v2
 name: pint
 description: Pouring IPA for Network Trust - CSH WiFi EAP-TLS enrollment and home RadSec management
 type: application
-version: 0.3.0
+version: 0.3.1
 appVersion: "0.1.0"

chart/templates/imagestream.yaml

@@ -8,7 +8,7 @@ metadata:
     {{- include "pint.labels" . | nindent 4 }}
 spec:
   lookupPolicy:
-    local: false
+    local: true
 {{- if .Values.freeradius.enabled }}
 ---
 apiVersion: image.openshift.io/v1
@@ -20,6 +20,6 @@ metadata:
     {{- include "pint.freeradiusLabels" . | nindent 4 }}
 spec:
   lookupPolicy:
-    local: false
+    local: true
 {{- end }}
 {{- end }}

chart/values.schema.json

@@ -180,7 +180,7 @@
             "pullPolicy": {
               "type": "string",
               "enum": ["Always", "IfNotPresent", "Never"],
-              "default": "IfNotPresent"
+              "default": "Always"
             }
           }
         }
@@ -225,7 +225,7 @@
             "pullPolicy": {
               "type": "string",
               "enum": ["Always", "IfNotPresent", "Never"],
-              "default": "IfNotPresent"
+              "default": "Always"
             }
           }
         },

chart/values.yaml

@@ -11,7 +11,7 @@ pint:
   image:
     repository: pint
     tag: "latest"
-    pullPolicy: IfNotPresent
+    pullPolicy: Always
 
 # Non-sensitive PINT application configuration rendered into a ConfigMap.
 # Sensitive values (PINT_CLIENT_SECRET, PINT_IPA_PASSWORD) must still be
@@ -80,7 +80,7 @@ freeradius:
   image:
     repository: pint-freeradius
     tag: "latest"
-    pullPolicy: IfNotPresent
+    pullPolicy: Always
   service:
     type: NodePort
     nodePort: null