From 9e65bf7c9aed4244507b170ed0167e4f59036be7 Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Sat, 15 Aug 2026 18:03:47 +1000 Subject: [PATCH] ci: use CA-baked plugin-docker-buildx image for artifactapi push Buildkit in the upstream woodpeckerci/plugin-docker-buildx image does not trust the artifactapi internal Vault CA, so pushes to docker-internal fail on TLS. - Switch the docker.yaml push step to the CA-baked custom plugin image - Switch the build.yaml PR dry-run step to the same custom image --- .woodpecker/build.yaml | 2 +- .woodpecker/docker.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.woodpecker/build.yaml b/.woodpecker/build.yaml index 192559b..2ceb816 100644 --- a/.woodpecker/build.yaml +++ b/.woodpecker/build.yaml @@ -3,7 +3,7 @@ when: steps: - name: docker-build - image: woodpeckerci/plugin-docker-buildx + image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest settings: repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/autobackup-operator dockerfile: Dockerfile.operator diff --git a/.woodpecker/docker.yaml b/.woodpecker/docker.yaml index edd014d..27136f0 100644 --- a/.woodpecker/docker.yaml +++ b/.woodpecker/docker.yaml @@ -6,7 +6,7 @@ steps: # No push credentials: the in-cluster runner has push access to the artifactapi # docker-internal registry (same credential-less pattern as jellyfin-ha). - name: docker - image: woodpeckerci/plugin-docker-buildx + image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest settings: registry: artifactapi.k8s.syd1.au.unkin.net repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/autobackup-operator