From 20f13b3e36937e801638ad52fd152db4884fc96b Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Sat, 15 Aug 2026 18:03:40 +1000 Subject: [PATCH] ci: use CA-baked plugin-docker-buildx image for artifactapi push The upstream woodpeckerci/plugin-docker-buildx image does not trust the internal CA, so buildx pushes to artifactapi fail on TLS verification. Swap it for the CA-baked custom image published in the docker-internal repo, in both the tag push (docker.yaml) and PR dry-run (build.yaml) steps. --- .woodpecker/build.yaml | 2 +- .woodpecker/docker.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.woodpecker/build.yaml b/.woodpecker/build.yaml index 2384ac6..48fbb26 100644 --- a/.woodpecker/build.yaml +++ b/.woodpecker/build.yaml @@ -3,7 +3,7 @@ when: steps: - name: docker-build - image: woodpeckerci/plugin-docker-buildx + image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest settings: repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/age-api dry_run: true diff --git a/.woodpecker/docker.yaml b/.woodpecker/docker.yaml index 9ab5f84..1b2c706 100644 --- a/.woodpecker/docker.yaml +++ b/.woodpecker/docker.yaml @@ -4,7 +4,7 @@ when: steps: - name: docker - image: woodpeckerci/plugin-docker-buildx + image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest settings: registry: artifactapi.k8s.syd1.au.unkin.net repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/age-api