Fix CI deploy release job

.gitlab-ci.yml

@@ -347,6 +347,45 @@ deploy_docker:
     - docker push astronrd/linc:$LINC_TAG
     - docker push astronrd/linc:latest
   rules:
+    # Only run on master
+    - if: '$CI_COMMIT_BRANCH == "master"'
+      when: always
+
+# Deploy a release version
+deploy_release:
+  stage: deploy
+  tags:
+    - dind
+  before_script:
+    - echo $CI_REGISTRY_PASSWORD | docker login -u $CI_REGISTRY_USER --password-stdin $CI_REGISTRY
+    - echo $DH_REGISTRY_PASSWORD | docker login -u $DH_REGISTRY_USER --password-stdin
+    - apk update && apk add git
+    - eval $(ssh-agent -s)
+    - chmod 400 "${SSH_PRIVATE_KEY}"
+    - ssh-add "$SSH_PRIVATE_KEY"
+    - mkdir -p ~/.ssh
+    - ssh-keyscan $CI_SERVER_HOST > ~/.ssh/known_hosts
+    - git config user.email $GITLAB_USER_EMAIL
+    - git config user.name $GITLAB_USER_NAME
+    - git remote set-url origin git@$CI_SERVER_HOST:$CI_PROJECT_PATH.git
+  script:
+    - echo -n "$CI_COMMIT_BRANCH" | sed -e "s/^releases\//export RELEASE=/" > version && source version
+    - docker pull $INTEGRATION_IMAGE
+    - docker tag $INTEGRATION_IMAGE astronrd/linc:$RELEASE
+    - docker push astronrd/linc:$RELEASE
+    # Update docker image in cwl steps by tagged version
+    - sed -i "s/astronrd\/linc/astronrd\/linc:$RELEASE/g" steps/*.cwl
+    # Create and push Git tag
+    - git add steps/*.cwl
+    - git config user.email $GITLAB_USER_EMAIL
+    - git config user.name $GITLAB_USER_NAME
+    # Skip CI on this commit and tag
+    - git commit -m "[SKIP CI] Replace latest with tag $RELEASE"
+    - git tag -a $RELEASE -m "[SKIP CI] Version $RELEASE created by gitlab-ci build"
+    - git push --tags
+  rules:
+    # TODO: check if pushed tag triggers Pipeline
+    # Only run on release branches
     # Run on the default branch or on a release branch
     - if: '$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH'
     - if: '$CI_COMMIT_BRANCH =~ /^releases//'