Merge pull request #2088 from gooddata/lcm-stable-latest-digest

fix(lcm): point stable latest at the promoted version digest

Author: santos1709

.github/workflows/promote-to-stable.yaml

@@ -48,17 +48,24 @@ jobs:
 
       - name: Promote images
         run: |
+          set -euo pipefail
           built_images='${{ inputs.images }}'
           tag=${{ inputs.image_tag }}
           for image in $(echo "$built_images" | jq -r '.[]'); do
             crane cp \
               "${INFRA_REPO_URL}/staging/${image}:${tag}" \
               "${INFRA_REPO_URL}/stable/${image}:${tag}"
-            crane cp \
-              "${INFRA_REPO_URL}/staging/${image}:latest" \
-              "${INFRA_REPO_URL}/stable/${image}:latest"
+            # latest must be the digest just promoted, not whatever staging:latest is now
+            crane tag "${INFRA_REPO_URL}/stable/${image}:${tag}" latest
+
+            promoted=$(crane digest "${INFRA_REPO_URL}/stable/${image}:${tag}")
+            current=$(crane digest "${INFRA_REPO_URL}/stable/${image}:latest")
+            if [[ "${promoted}" != "${current}" ]]; then
+              echo "::error::stable/${image}:latest (${current}) != :${tag} (${promoted})"
+              exit 1
+            fi
 
-            echo "Promoted image ${image} to stable"
+            echo "Promoted image ${image} to stable as ${tag} + latest"
           done
 
       - name: Promote charts