From 7f5a52a2a6f1d17c6a6b290e642d9e32cf583a08 Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Sat, 15 Aug 2026 18:03:57 +1000 Subject: [PATCH] ci: use CA-baked plugin-docker-buildx image for artifactapi push The upstream woodpeckerci/plugin-docker-buildx image does not trust the internal CA, so pushes/pulls against artifactapi over TLS fail. Swap both the PR dry-run build step and the tag push step to the CA-baked custom image published at docker-internal/plugin-docker-buildx:latest. --- .woodpecker/build.yaml | 2 +- .woodpecker/docker.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.woodpecker/build.yaml b/.woodpecker/build.yaml index ba82b4e..fa2f54f 100644 --- a/.woodpecker/build.yaml +++ b/.woodpecker/build.yaml @@ -3,7 +3,7 @@ when: steps: - name: docker-build - image: woodpeckerci/plugin-docker-buildx + image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest settings: repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/agent-base dry_run: true diff --git a/.woodpecker/docker.yaml b/.woodpecker/docker.yaml index 7ed7faa..210599c 100644 --- a/.woodpecker/docker.yaml +++ b/.woodpecker/docker.yaml @@ -4,7 +4,7 @@ when: steps: - name: docker - image: woodpeckerci/plugin-docker-buildx + image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest settings: registry: artifactapi.k8s.syd1.au.unkin.net repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/agent-base