Set ImagePullPolicy to Always
Since the Ironbank is rebuilding images with the latest security fixes, the deployments inside of BigBang should be set to always try and pull newer images if they're available.
As a result all pods should be configured with ImagePullPolicy set to Always.
In addition, there should be an OPA Gatekeeper policy that identifies any pods that are not configured with this and that data should be tracked in ClusterAuditor.