Merge pull request 'ci: add buildkit_config CA trust for artifactapi push' (#4 ) from benvin/buildx-ca-config into main

Reviewed-on: #4
ci: add buildkit_config CA trust for artifactapi push
2026-08-15 18:46:41 +10:00 · 2026-08-15 18:30:53 +10:00 · 2026-08-15 18:20:34 +10:00 · 2026-08-15 18:03:57 +10:00
2 changed files with 5 additions and 2 deletions
@@ -3,7 +3,7 @@ when:

 steps:
  - name: docker-build
-    image: woodpeckerci/plugin-docker-buildx
+    image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest
    settings:
      repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/agent-base
      dry_run: true
@@ -4,10 +4,13 @@ when:

 steps:
  - name: docker
-    image: woodpeckerci/plugin-docker-buildx
+    image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest
    settings:
      registry: artifactapi.k8s.syd1.au.unkin.net
      repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/agent-base
+      buildkit_config: |
+        [registry."artifactapi.k8s.syd1.au.unkin.net"]
+          ca = ["/etc/docker/certs.d/artifactapi.k8s.syd1.au.unkin.net/ca.crt"]
      tags:
        - ${CI_COMMIT_TAG}
        - latest
Author	SHA1	Message	Date
benvin	c1b3f18829	Merge pull request 'ci: add buildkit_config CA trust for artifactapi push' (#4 ) from benvin/buildx-ca-config into main Reviewed-on: #4	2026-08-15 18:46:41 +10:00
unkin-agent	7ae46c4966	ci: add buildkit_config CA trust for artifactapi push ci/woodpecker/pr/build Pipeline was successful Details	2026-08-15 18:30:53 +10:00
benvin	7cb0fa0596	Merge pull request 'ci: use CA-baked plugin-docker-buildx image for artifactapi push' (#3 ) from benvin/buildx-ca-plugin-image into main Reviewed-on: #3	2026-08-15 18:20:34 +10:00
unkin-agent	7f5a52a2a6	ci: use CA-baked plugin-docker-buildx image for artifactapi push ci/woodpecker/pr/build Pipeline was successful Details The upstream woodpeckerci/plugin-docker-buildx image does not trust the internal CA, so pushes/pulls against artifactapi over TLS fail. Swap both the PR dry-run build step and the tag push step to the CA-baked custom image published at docker-internal/plugin-docker-buildx:latest.	2026-08-15 18:03:57 +10:00