From 762cfca7a46502e4aef5e09dcec16553f95aef18 Mon Sep 17 00:00:00 2001
From: unkin-agent <unkin-agent@git.unkin.net>
Date: Sat, 15 Aug 2026 18:30:20 +1000
Subject: [PATCH] ci: add buildkit_config CA trust for artifactapi push

---
 .woodpecker/docker.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.woodpecker/docker.yaml b/.woodpecker/docker.yaml
index 27136f0..b744799 100644
--- a/.woodpecker/docker.yaml
+++ b/.woodpecker/docker.yaml
@@ -11,6 +11,11 @@ steps:
       registry: artifactapi.k8s.syd1.au.unkin.net
       repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/autobackup-operator
       dockerfile: Dockerfile.operator
+      # buildkitd runs in its own container and performs the push; point it at the
+      # artifactapi CA baked into the plugin image so it trusts the registry.
+      buildkit_config: |
+        [registry."artifactapi.k8s.syd1.au.unkin.net"]
+          ca = ["/etc/docker/certs.d/artifactapi.k8s.syd1.au.unkin.net/ca.crt"]
       tags:
         - ${CI_COMMIT_TAG}
         - latest