woodpecker: allow the CA-baked docker-buildx plugin as privileged
ci/woodpecker/pr/vector-test Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/kubeconform Pipeline was successful

Add artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx (built
by unkin/plugin-docker-buildx) to WOODPECKER_PLUGINS_PRIVILEGED so in-house repos
can push to the internal-CA artifactapi registry without the x509 failure. The
upstream entries stay listed so existing repos keep working until they migrate.
This commit is contained in:
2026-08-15 17:02:06 +10:00
parent 31c5ca10e2
commit 93467392c4
+1 -1
View File
@@ -32,7 +32,7 @@ server:
WOODPECKER_OPEN: "true"
WOODPECKER_ADMIN: "unkinben"
WOODPECKER_DISABLE_USER_AGENT_REGISTRATION: "true"
WOODPECKER_PLUGINS_PRIVILEGED: "woodpeckerci/plugin-docker-buildx,woodpeckerci/plugin-docker-buildx:latest-insecure"
WOODPECKER_PLUGINS_PRIVILEGED: "woodpeckerci/plugin-docker-buildx,woodpeckerci/plugin-docker-buildx:latest-insecure,artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx,artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest"
extraSecretNamesForEnvFrom:
- woodpecker-gitea
- woodpecker-postgres-credentials