unkin/container-agent-dev
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: add buildkit_config CA trust for artifactapi push #4

Merged
benvin merged 1 commits from benvin/buildx-ca-config into main 2026-08-15 18:46:33 +10:00
Conversation 0 Commits 1 Files Changed 1
+3
unkin-agent commented 2026-08-15 18:31:20 +10:00
Member
Copy Link
Copy Source

Adds the buildx buildkit_config CA reference to the docker push step so buildkitd trusts artifactapi's internal (Vault) CA when pushing to the local docker registry.

The plugin image already bakes the CA at /etc/docker/certs.d/artifactapi.k8s.syd1.au.unkin.net/ca.crt; buildkitd runs in its own container and performs the push, so it needs the CA passed via --config (buildx copies the referenced file in). Proven in jellyfin-ha v0.1.2.

Changes:

  • Add settings.buildkit_config to the docker push step in .woodpecker/docker.yaml.
Adds the buildx `buildkit_config` CA reference to the `docker` push step so buildkitd trusts artifactapi's internal (Vault) CA when pushing to the local docker registry. The plugin image already bakes the CA at `/etc/docker/certs.d/artifactapi.k8s.syd1.au.unkin.net/ca.crt`; buildkitd runs in its own container and performs the push, so it needs the CA passed via `--config` (buildx copies the referenced file in). Proven in jellyfin-ha v0.1.2. Changes: - Add `settings.buildkit_config` to the `docker` push step in `.woodpecker/docker.yaml`.
unkin-agent added 1 commit 2026-08-15 18:31:20 +10:00
ci: add buildkit_config CA trust for artifactapi push
ci/woodpecker/pr/build Pipeline was successful
Details
9a0ce80f42
benvin merged commit 3ac4592395 into main 2026-08-15 18:46:33 +10:00
benvin deleted branch benvin/buildx-ca-config 2026-08-15 18:46:33 +10:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkin-agent (Unkin Agent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/container-agent-dev#4
Delete Branch "benvin/buildx-ca-config"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?