diff --git a/apis/falcon/v1alpha1/falconnodesensor_types.go b/apis/falcon/v1alpha1/falconnodesensor_types.go
index 3e554dd8..209342ac 100644
--- a/apis/falcon/v1alpha1/falconnodesensor_types.go
+++ b/apis/falcon/v1alpha1/falconnodesensor_types.go
@@ -72,6 +72,7 @@ type FalconNodeSensorConfig struct {
 	// +kubebuilder:default={{key: "node-role.kubernetes.io/master", operator: "Exists", effect: "NoSchedule"}, {key: "node-role.kubernetes.io/control-plane", operator: "Exists", effect: "NoSchedule"}}
 	Tolerations []corev1.Toleration `json:"tolerations,omitempty"`
 	// +kubebuilder:default=Always
+	// +kubebuilder:validation:Enum=Always;IfNotPresent;Never
 	ImagePullPolicy corev1.PullPolicy `json:"imagePullPolicy,omitempty"`
 	// Location of the Falcon Sensor image. Use only in cases when you mirror the original image to your repository/name:tag
 	ImageOverride string `json:"image_override,omitempty"`
diff --git a/bundle/manifests/falcon.crowdstrike.com_falconnodesensors.yaml b/bundle/manifests/falcon.crowdstrike.com_falconnodesensors.yaml
index f6f79ea7..d361b911 100644
--- a/bundle/manifests/falcon.crowdstrike.com_falconnodesensors.yaml
+++ b/bundle/manifests/falcon.crowdstrike.com_falconnodesensors.yaml
@@ -134,6 +134,10 @@ spec:
                     default: Always
                     description: PullPolicy describes a policy for if/when to pull
                       a container image
+                    enum:
+                    - Always
+                    - IfNotPresent
+                    - Never
                     type: string
                   imagePullSecrets:
                     description: ImagePullSecrets is an optional list of references
diff --git a/config/crd/bases/falcon.crowdstrike.com_falconnodesensors.yaml b/config/crd/bases/falcon.crowdstrike.com_falconnodesensors.yaml
index 42298f5f..ebd1964f 100644
--- a/config/crd/bases/falcon.crowdstrike.com_falconnodesensors.yaml
+++ b/config/crd/bases/falcon.crowdstrike.com_falconnodesensors.yaml
@@ -135,6 +135,10 @@ spec:
                     default: Always
                     description: PullPolicy describes a policy for if/when to pull
                       a container image
+                    enum:
+                    - Always
+                    - IfNotPresent
+                    - Never
                     type: string
                   imagePullSecrets:
                     description: ImagePullSecrets is an optional list of references
diff --git a/deploy/falcon-operator.yaml b/deploy/falcon-operator.yaml
index a256014f..9081dd80 100644
--- a/deploy/falcon-operator.yaml
+++ b/deploy/falcon-operator.yaml
@@ -370,6 +370,10 @@ spec:
                     default: Always
                     description: PullPolicy describes a policy for if/when to pull
                       a container image
+                    enum:
+                    - Always
+                    - IfNotPresent
+                    - Never
                     type: string
                   imagePullSecrets:
                     description: ImagePullSecrets is an optional list of references