Because Clair can take a few minutes to initialize and begin serving HTTP traffic, the Quay upgrade pods can enter CrashLoopBackoff when the config tool fails to reach Clair for validation.

Adding an initContainer to block until the Clair Service is responsive will provide a better UX than crashing pods.