unkin/argocd-apps
3
0
Fork 0
Code Issues 7 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

woodpecker: allow CA-baked docker-buildx plugin as privileged (#371)

Browse Source 
Why: pushing in-house images to the internal-CA artifactapi registry fails `x509: certificate signed by unknown authority` with the upstream buildx plugin (and `:latest-insecure` does not fix it — buildkit still verifies the registry cert). The fix is the CA-baked plugin image now published at `artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx` (unkin/plugin-docker-buildx v0.1.0).

How: add that image (bare + `:latest`) to `WOODPECKER_PLUGINS_PRIVILEGED` in the au-syd1 overlay so it may run privileged. Existing upstream entries kept so current repos are unaffected until they switch over.

Next: ghp `.woodpecker` switches its buildx step to this image, then ghp re-tags and its push succeeds.
Reviewed-on: #371
Co-authored-by: unkin-agent <unkin-agent@unkin.net>
Co-committed-by: unkin-agent <unkin-agent@unkin.net>
This commit was merged in pull request #371.
This commit is contained in:
Unkin Agent
2026-08-15 17:04:40 +10:00
committed by BenVincent
parent 31c5ca10e2
commit 7556d08d06
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/overlays/au-syd1/woodpecker/values.yaml
+1 -1
View File
@@ -32,7 +32,7 @@ server:
WOODPECKER_OPEN: "true"
WOODPECKER_ADMIN: "unkinben"
WOODPECKER_DISABLE_USER_AGENT_REGISTRATION: "true"
WOODPECKER_PLUGINS_PRIVILEGED: "woodpeckerci/plugin-docker-buildx,woodpeckerci/plugin-docker-buildx:latest-insecure"
WOODPECKER_PLUGINS_PRIVILEGED: "woodpeckerci/plugin-docker-buildx,woodpeckerci/plugin-docker-buildx:latest-insecure,artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx,artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest"
extraSecretNamesForEnvFrom:
- woodpecker-gitea
- woodpecker-postgres-credentials