ci: use CA-baked plugin-docker-buildx image for artifactapi push #2

Merged
benvin merged 1 commits from benvin/buildx-ca-plugin-image into main 2026-08-15 18:20:51 +10:00
Member

Buildkit in the upstream woodpeckerci/plugin-docker-buildx image does not trust the artifactapi internal Vault CA, so pushes to the docker-internal registry fail on TLS verification.

  • Switch the docker.yaml push step to the CA-baked custom plugin image (artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest)
  • Switch the build.yaml PR dry-run step to the same CA-baked image
  • Keep repo/tags/settings, serviceAccountName, and resources unchanged
Buildkit in the upstream woodpeckerci/plugin-docker-buildx image does not trust the artifactapi internal Vault CA, so pushes to the docker-internal registry fail on TLS verification. - Switch the docker.yaml push step to the CA-baked custom plugin image (artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest) - Switch the build.yaml PR dry-run step to the same CA-baked image - Keep repo/tags/settings, serviceAccountName, and resources unchanged
unkin-agent added 1 commit 2026-08-15 18:04:04 +10:00
ci: use CA-baked plugin-docker-buildx image for artifactapi push
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/build Pipeline was successful
ci/woodpecker/push/test Pipeline was successful
ci/woodpecker/pr/test Pipeline was successful
9e65bf7c9a
Buildkit in the upstream woodpeckerci/plugin-docker-buildx image does not trust the artifactapi internal Vault CA, so pushes to docker-internal fail on TLS.

- Switch the docker.yaml push step to the CA-baked custom plugin image
- Switch the build.yaml PR dry-run step to the same custom image
benvin merged commit 7c27bd914b into main 2026-08-15 18:20:51 +10:00
benvin deleted branch benvin/buildx-ca-plugin-image 2026-08-15 18:20:51 +10:00
Sign in to join this conversation.