unkin/container-agent-base
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: use CA-baked plugin-docker-buildx image for artifactapi push #3

Merged
benvin merged 1 commits from benvin/buildx-ca-plugin-image into main 2026-08-15 18:20:34 +10:00
Conversation 0 Commits 1 Files Changed 2
+2 -2
unkin-agent commented 2026-08-15 18:04:06 +10:00
Member
Copy Link
Copy Source

The upstream woodpeckerci/plugin-docker-buildx image does not trust the internal CA, so buildx pushes/pulls against artifactapi over TLS fail.

Swap both pipeline steps to the CA-baked custom image artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest:

  • .woodpecker/build.yaml (PR dry-run build step)
  • .woodpecker/docker.yaml (tag push step)

No ca-trust/buildkit_config workaround was present, so nothing to remove. Everything else left intact.

The upstream `woodpeckerci/plugin-docker-buildx` image does not trust the internal CA, so buildx pushes/pulls against artifactapi over TLS fail. Swap both pipeline steps to the CA-baked custom image `artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest`: - `.woodpecker/build.yaml` (PR dry-run build step) - `.woodpecker/docker.yaml` (tag push step) No ca-trust/buildkit_config workaround was present, so nothing to remove. Everything else left intact.
unkin-agent added 1 commit 2026-08-15 18:04:07 +10:00
ci: use CA-baked plugin-docker-buildx image for artifactapi push
ci/woodpecker/pr/build Pipeline was successful
Details
7f5a52a2a6 
The upstream woodpeckerci/plugin-docker-buildx image does not trust the
internal CA, so pushes/pulls against artifactapi over TLS fail. Swap both
the PR dry-run build step and the tag push step to the CA-baked custom
image published at docker-internal/plugin-docker-buildx:latest.
benvin merged commit 7cb0fa0596 into main 2026-08-15 18:20:34 +10:00
benvin deleted branch benvin/buildx-ca-plugin-image 2026-08-15 18:20:34 +10:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkin-agent (Unkin Agent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/container-agent-base#3
Delete Branch "benvin/buildx-ca-plugin-image"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?