The gatekeeper operator and the gatekeeper deployments use the Always image pull policy.  The best practice is to use the If not present pull policy. 

The best practices analysis discovered this concern and states the following:

Ensure that the containers under test are using IfNotPresent as Image Pull Policy. If there is a situation where the container dies and needs to be restarted, the image pull policy becomes important. PullIfNotPresent is recommended so that a loss of image registry access does not prevent the pod from restarting.