Koschei: Use tagged upstream releases for deployments

roles/openshift-apps/koschei/templates/backend-deployment.yml

@@ -18,7 +18,7 @@ spec:
     spec:
       containers:
       - name: {{service}}
-        image: quay.io/koschei/koschei:latest
+        image: "{{ koschei_container_image }}"
         command: [/usr/bin/koschei-{{service}}]
         env:
           - name: KRB5_CONFIG

roles/openshift-apps/koschei/templates/cronjob.yml

@@ -11,7 +11,7 @@ spec:
         spec:
           containers:
           - name: "cron-{{name}}"
-            image: quay.io/koschei/koschei:latest
+            image: "{{ koschei_container_image }}"
             command: ["/bin/bash", "-euxc", "{{command}}"]
             env:
               - name: SUDO_USER

roles/openshift-apps/koschei/templates/frontend-deployment.yml

@@ -18,7 +18,7 @@ spec:
     spec:
       containers:
       - name: frontend
-        image: quay.io/koschei/koschei:latest
+        image: "{{ koschei_container_image }}"
         command: [/usr/bin/koschei-frontend]
         ports:
         - containerPort: 8080

roles/openshift-apps/koschei/templates/job.yml

@@ -7,7 +7,7 @@ spec:
     spec:
       containers:
       - name: "job-{{name}}"
-        image: quay.io/koschei/koschei:latest
+        image: "{{ koschei_container_image }}"
         command: ["/bin/bash", "-euxc", "{{command}}"]
         env:
           - name: SUDO_USER

roles/openshift-apps/koschei/vars/production.yml

@@ -1,3 +1,5 @@
+koschei_container_image: quay.io/koschei/koschei:fedora-prod
+
 koschei_topurl: https://koschei.fedoraproject.org
 koschei_pgsql_hostname: db01.phx2.fedoraproject.org
 koschei_koji_hub: koji.fedoraproject.org

roles/openshift-apps/koschei/vars/staging.yml

@@ -1,3 +1,5 @@
+koschei_container_image: quay.io/koschei/koschei:fedora-stage
+
 koschei_topurl: https://koschei.stg.fedoraproject.org
 # koschei database on pgbdr.stg is in inconsistent state, so we're
 # using non-BDR db01.stg for now.