Merge pull request 'ci: use CA-baked plugin-docker-buildx image for artifactapi push' (#3 ) from benvin/buildx-ca-plugin-image into main

Reviewed-on: #3
ci: use CA-baked plugin-docker-buildx image for artifactapi push
2026-08-15 18:20:34 +10:00 · 2026-08-15 18:03:57 +10:00 · 2026-07-30 20:54:59 +10:00 · 2026-07-30 00:34:59 +10:00
3 changed files with 7 additions and 10 deletions
@@ -3,7 +3,7 @@ when:

 steps:
  - name: docker-build
-    image: woodpeckerci/plugin-docker-buildx
+    image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest
    settings:
-      repo: git.unkin.net/unkin/agent-base
+      repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/agent-base
      dry_run: true
@@ -4,13 +4,10 @@ when:

 steps:
  - name: docker
-    image: woodpeckerci/plugin-docker-buildx
+    image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest
    settings:
-      registry: git.unkin.net
-      repo: git.unkin.net/unkin/agent-base
-      username: droneci
-      password:
-        from_secret: DRONECI_PASSWORD
+      registry: artifactapi.k8s.syd1.au.unkin.net
+      repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/agent-base
      tags:
        - ${CI_COMMIT_TAG}
        - latest
@@ -3,10 +3,10 @@
 VERSION ?= $(shell git describe --tags --always --dirty 2>/dev/null || echo "0.0.0-dev")

 build:
-	docker build -t git.unkin.net/unkin/agent-base:$(VERSION) .
+	docker build -t artifactapi.k8s.syd1.au.unkin.net/docker-internal/agent-base:$(VERSION) .

 clean:
-	docker rmi git.unkin.net/unkin/agent-base:$(VERSION) 2>/dev/null || true
+	docker rmi artifactapi.k8s.syd1.au.unkin.net/docker-internal/agent-base:$(VERSION) 2>/dev/null || true

 _LATEST := $(shell git tag --sort=-v:refname | grep -E '^v[0-9]+\.[0-9]+\.[0-9]+$$' | head -1)
 _BASE   := $(if $(_LATEST),$(_LATEST),v0.0.0)
Author	SHA1	Message	Date
benvin	7cb0fa0596	Merge pull request 'ci: use CA-baked plugin-docker-buildx image for artifactapi push' (#3 ) from benvin/buildx-ca-plugin-image into main Reviewed-on: #3	2026-08-15 18:20:34 +10:00
unkin-agent	7f5a52a2a6	ci: use CA-baked plugin-docker-buildx image for artifactapi push ci/woodpecker/pr/build Pipeline was successful Details The upstream woodpeckerci/plugin-docker-buildx image does not trust the internal CA, so pushes/pulls against artifactapi over TLS fail. Swap both the PR dry-run build step and the tag push step to the CA-baked custom image published at docker-internal/plugin-docker-buildx:latest.	2026-08-15 18:03:57 +10:00
benvin	c0e85a2d95	Merge pull request 'ci: push images to artifactapi registry instead of gitea' (#2 ) from benvin/push-artifactapi into main Reviewed-on: #2	2026-07-30 20:54:59 +10:00
unkinben	added9ff0b	ci: push images to artifactapi registry instead of gitea ci/woodpecker/pr/build Pipeline was successful Details Hard switch of the docker push target from the Gitea registry to the artifactapi local docker registry (docker-internal); the Gitea VM and its registry are being retired. Drops the droneci/DRONECI_PASSWORD creds since artifactapi accepts unauthenticated in-cluster pushes. Also repoints the Makefile build/rmi tags. Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv	2026-07-30 00:34:59 +10:00