CASMINST-6604 All images should come from csm-stable/sat-stable

[mtupitsyn]

Summary and Scope

With csm build listing images coming from sources other then artifactory.algol60.net/csm-stable, we can't guarantee the image will be available next time when we want to re-use set of images. As of 1.5.0-rc.1, we have 3 images of this type:

docker.io/library/alpine:3.16    artifactory.algol60.net/docker.io/library/alpine@sha256:cbe5d5973103a2d03408d1689a6efde4ea4920bde9f4b51fe7872e60ce2d8e56
docker.io/library/alpine:latest    artifactory.algol60.net/docker.io/library/alpine@sha256:82d1e9d7ed48a7523bdebc18cf6290bdb97b82302a8a9c27d4fe885949ea94d1
quay.io/skopeo/stable:v1.4.1    artifactory.algol60.net/quay.io/skopeo/stable@sha256:0d95e6bce7365c5e8a9de347c2bacd6316d9a2593efd9f8d696545e67f32dcfa 

We need to change physical references to point to csm-stable, where we rebuild images at daily basis and retain digests if they are referenced by potential release bases. I.e. for

docker.io/library/alpine:3.16 

physical reference has to be

artifactory.algol60.net/csm-stable/docker.io/library/alpine@sha256:...

Until this is implemented, builds having CSM_BASE_VERSION will also have to have FAIL_ON_MISSED_IMAGE_DIGEST set to "true". Otherwise, build will fail on alpine:3.16 image digest, which is long gone, because that image was rebuilt externally and digest is not preserved in our cache. In other words, a build generated this way, is not the same as it's base - it has newer "alpine:3.16" image.

Issues and Related PRs

• Resolves CASMINST-6604

Testing

Tested on:

• Local development environment
• Jenkins

Test description:

Tested in different combinations of CSM_BASE_VERSION and FAIL_ON_MISSED_IMAGE_DIGEST inputs.

Risks and Mitigations

Not known atm.

Pull Request Checklist

• Version number(s) incremented, if applicable
• Copyrights updated
• License file intact
• Target branch correct
• CHANGELOG.md updated
• Testing is appropriate and complete, if applicable
• HPC Product Announcement prepared, if applicable

[mtupitsyn]

/backport release/1.6

[github-actions]

Backporting into branch release/1.6 was successful. New PR: #2702