Argo never reaching the desiredRevision

[mymasse]

I'm running into an issue similar to #4020. But I'm starting to wonder how this will ever work:

I have the following wharehouses (note I have remove and obfuscated some fields/values):

---
apiVersion: kargo.akuity.io/v1alpha1
kind: Warehouse
...
spec:
  freightCreationPolicy: Automatic
  interval: 5m0s
  subscriptions:
  - chart:
      discoveryLimit: 20
      repoURL: oci://<HELM CHART>
---
 apiVersion: kargo.akuity.io/v1alpha1
kind: Warehouse
spec:
  freightCreationPolicy: Automatic
  interval: 5m0s
  subscriptions:
  - image:
      cacheByTag: true
      discoveryLimit: 20
      imageSelectionStrategy: SemVer
      repoURL: <IMAGE>
      strictSemvers: true

My stage is the following:

apiVersion: kargo.akuity.io/v1alpha1
kind: Stage
spec:
  promotionTemplate:
    spec:
      steps:
      - config:
          checkout:
          - branch: <BRANCH>
            path: apps
          repoURL: <GIT REPO to update the image value>
        uses: git-clone
      - config:
          path: ./apps/values.yaml
          updates:
          - key: image.tag
            value: ${{ vars.image_tag }}
        if: ${{ ctx.targetFreight.origin.name == "config-server-image" }}
        uses: yaml-update
      - config:
          message: '<MESSAGE>'
          path: ./apps
        uses: git-commit
      - config:
          path: ./apps
        uses: git-push
      - config:
          apps:
          - name: <ARGO APP NAME>
            sources:
            - desiredRevision: ${{ vars.helm_chart_version }}
              repoURL: <OCI CHART FROM WAREHOUSE>
              updateTargetRevision: true
            - desiredRevision: <BRANCH SAME AS THE CLONE>
              repoURL: <GIT REPO SAME AS THE CLONE>
              updateTargetRevision: false
        uses: argocd-update
      vars:
      - name: image_tag
        value: ${{ imageFrom("<IMAGE>", warehouse("<IMAGE WAREHOUSE>")).Tag }}
      - name: helm_chart_version
        value: ${{ chartFrom("<OCI CHART>", warehouse("<CHART WAREHOUSE>")).Version }}
  requestedFreight:
  - origin:
      kind: Warehouse
      name: <IMAGE WAREHOUSE>
    sources:
      autoPromotionOptions:
        selectionPolicy: NewestFreight
      direct: true
  - origin:
      kind: Warehouse
      name: <CHART WAREHOUSE>
    sources:
      autoPromotionOptions:
        selectionPolicy: NewestFreight
      direct: true

My Argo app is the following:

apiVersion: argoproj.io/v1alpha1
kind: Application
spec:
  destination:
    name: <CLUSTER>
    namespace: <NAMESPACE>
  project: <PROJECT>
  sources:
  - helm:
      parameters:
      - name: namespace
        value: <NAMESPACE>
      valueFiles:
      - $values//values.yaml
      - $values//sandbox/values.yaml
    path: .
    repoURL: <OCI CHART>
    targetRevision: 1.0.0
  - ref: values
    repoURL: <REPO URL>
    targetRevision: BRANCH
  syncPolicy:
    automated:
      enabled: true

Now whenever I promote a version (even the same version running) I get into infinite sync of the argo app, looking at the logs in the kargo controller I get this:

performing update of Argo CD Application    {..., "reason": "sync result revisions [sha256:<DIGEST OF 1.0.0> <COMMIT SHA OF BRANCH>[] do not match desired revisions [1.0.0 <BRANC>]"}

What am I doing wrong? Based on the linked issue I don't see how I can ever get it to update the argo app with the desiredRevision

[krancour]

Your source is pointed at a branch. It's a moving target.

[mymasse]

Yeah I get that part but what about the Chart, it's converted to the digest so also a moving target?

I change my promotionTemplate to the following and that also fails.

      - config:
          apps:
          - name: <ARGO APP NAME>
            sources:
            - desiredRevision: ${{ vars.helm_chart_version }}
              repoURL: <OCI CHART FROM WAREHOUSE>
              updateTargetRevision: true
            - repoURL: <GIT REPO SAME AS THE CLONE>
        uses: argocd-update

With performing update of Argo CD Application {..., "reason": "sync result revisions [sha256:<DIGEST OF 1.0.0> <COMMIT SHA OF BRANCH>[] do not match desired revisions [1.0.0 ]"}

Does it not work if we only specify desiredRevision on one source?

Also from the chartFrom function there is no way to get the Chart digest so we couldn't even set the desiredRevision to that.