expose IMAGE_DIGEST to k8ify

Issue: APPX-177

Author: BacLuc

.github/actions/build/action.yml

@@ -8,12 +8,17 @@ inputs:
   TARGET:
     required: false
 name: Build
+outputs:
+  IMAGE_DIGEST:
+    description: image digest
+    value: "${{ steps.build.outputs.digest }}"
 runs:
   steps:
   - run: "yq '.users.0.user.token' \"${KUBECONFIG}\" | docker login -u appflow-deployer --password-stdin '${{ inputs.REGISTRY }}'"
     shell: bash
   - uses: docker/setup-buildx-action@v3
-  - uses: docker/build-push-action@v6
+  - id: build
+    uses: docker/build-push-action@v6
     with:
       provenance: false
       push: true

.github/workflows/prod-deploy.yml

@@ -14,6 +14,7 @@ jobs:
       with:
         KUBECONFIG_DATA: "${{ secrets.KUBECONFIG_PROD }}"
     - env:
+        IMAGE_DIGEST: "${{ steps.build.outputs.IMAGE_DIGEST || 'not built in this job' }}"
         NEWLINE: |2+
 
       name: k8ify deploy

.github/workflows/prod.yml

@@ -11,11 +11,13 @@ jobs:
     - uses: ./.github/actions/setup
       with:
         KUBECONFIG_DATA: "${{ secrets.KUBECONFIG_PROD }}"
-    - uses: ./.github/actions/build
+    - id: build
+      uses: ./.github/actions/build
       with:
         IMGNAME: "${{ env.CI_PROJECT_NAME }}"
         REGISTRY: "${{ env.REGISTRY }}"
     - env:
+        IMAGE_DIGEST: "${{ steps.build.outputs.IMAGE_DIGEST || 'not built in this job' }}"
         NEWLINE: |2+
 
       name: k8ify preview

.github/workflows/test.yml

@@ -11,11 +11,13 @@ jobs:
     - uses: ./.github/actions/setup
       with:
         KUBECONFIG_DATA: "${{ secrets.KUBECONFIG_TEST }}"
-    - uses: ./.github/actions/build
+    - id: build
+      uses: ./.github/actions/build
       with:
         IMGNAME: "${{ env.CI_PROJECT_NAME }}"
         REGISTRY: "${{ env.REGISTRY }}"
     - env:
+        IMAGE_DIGEST: "${{ steps.build.outputs.IMAGE_DIGEST || 'not built in this job' }}"
         NEWLINE: |2+
 
       name: k8ify preview
@@ -26,6 +28,7 @@ jobs:
         rm .composeenv
         kubectl diff -f manifests/ || true
     - env:
+        IMAGE_DIGEST: "${{ steps.build.outputs.IMAGE_DIGEST || 'not built in this job' }}"
         NEWLINE: |2+
 
       name: k8ify deploy

compose.yml

@@ -5,3 +5,5 @@ services:
       - "8080:8080"
     environment:
       - admin_pw=$ADMIN_PW
+    labels:
+      k8ify.annotations.IMAGE_DIGEST: $IMAGE_DIGEST