ci: add buildkit_config CA trust for artifactapi push

The buildx docker-container builder runs buildkitd in its own container and performs the push. It needs the artifactapi internal (Vault) CA via buildkit_config even though the plugin image already trusts it. Point the builder at the in-image CA baked at /etc/docker/certs.d/<registry>/ca.crt.
2026-08-15 18:30:19 +10:00
parent a7f72af829
commit 539bbc0706
1 changed files with 3 additions and 0 deletions
@@ -8,6 +8,9 @@ steps:
    settings:
      registry: artifactapi.k8s.syd1.au.unkin.net
      repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/age-api
      buildkit_config: |
        [registry."artifactapi.k8s.syd1.au.unkin.net"]
          ca = ["/etc/docker/certs.d/artifactapi.k8s.syd1.au.unkin.net/ca.crt"]
      tags:
        - ${CI_COMMIT_TAG}
        - latest