From 93467392c44e75e4e9337668657a9e0aa0ba18b2 Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Sat, 15 Aug 2026 17:02:06 +1000 Subject: [PATCH] woodpecker: allow the CA-baked docker-buildx plugin as privileged Add artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx (built by unkin/plugin-docker-buildx) to WOODPECKER_PLUGINS_PRIVILEGED so in-house repos can push to the internal-CA artifactapi registry without the x509 failure. The upstream entries stay listed so existing repos keep working until they migrate. --- apps/overlays/au-syd1/woodpecker/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/overlays/au-syd1/woodpecker/values.yaml b/apps/overlays/au-syd1/woodpecker/values.yaml index a448dfb..e3adc5f 100644 --- a/apps/overlays/au-syd1/woodpecker/values.yaml +++ b/apps/overlays/au-syd1/woodpecker/values.yaml @@ -32,7 +32,7 @@ server: WOODPECKER_OPEN: "true" WOODPECKER_ADMIN: "unkinben" WOODPECKER_DISABLE_USER_AGENT_REGISTRATION: "true" - WOODPECKER_PLUGINS_PRIVILEGED: "woodpeckerci/plugin-docker-buildx,woodpeckerci/plugin-docker-buildx:latest-insecure" + WOODPECKER_PLUGINS_PRIVILEGED: "woodpeckerci/plugin-docker-buildx,woodpeckerci/plugin-docker-buildx:latest-insecure,artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx,artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest" extraSecretNamesForEnvFrom: - woodpecker-gitea - woodpecker-postgres-credentials -- 2.47.3