In CRW-1071, it's explained that this snippet of the install guide is wrong:

Download, tag, and push the necessary images. Repeat the step for every image in the following lists:

$ podman pull <image_name>:<image_tag>
$ podman tag <image_name>:<image_tag> ${REGISTRY_ENDPOINT}/<organization>/<image_name>:<image_tag>
$ podman push ${REGISTRY_ENDPOINT}/<organization>/<image_name>:<image_tag>

– https://access.redhat.com/documentation/en-us/red_hat_codeready_workspaces/2.2/html/installation_guide/installing-codeready-workspaces-in-a-restricted-environment#preparing-an-image-registry-for-installing-codeready-workspaces-in-a-restricted-environment

Instead we should tell users to use skopeo copy --all to preserve digests. This is also important for multiarch containers.