Merge pull request 'ci: add buildkit_config CA trust for artifactapi push' (#5 ) from benvin/buildx-ca-config into main

Reviewed-on: #5
ci: add buildkit_config CA trust for artifactapi push
2026-08-15 18:47:15 +10:00 · 2026-08-15 18:31:01 +10:00 · 2026-08-15 18:21:10 +10:00 · 2026-08-15 18:04:16 +10:00 · 2026-07-30 20:56:25 +10:00 · 2026-07-30 00:34:59 +10:00
3 changed files with 9 additions and 9 deletions
@@ -3,7 +3,7 @@ when:

 steps:
  - name: docker-build
-    image: woodpeckerci/plugin-docker-buildx
+    image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest
    settings:
-      repo: git.unkin.net/unkin/encapi
+      repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/encapi
      dry_run: true
@@ -4,15 +4,15 @@ when:

 steps:
  - name: docker-encapi
-    image: woodpeckerci/plugin-docker-buildx
+    image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest
    settings:
-      registry: git.unkin.net
-      repo: git.unkin.net/unkin/encapi
+      registry: artifactapi.k8s.syd1.au.unkin.net
+      repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/encapi
      build_args:
        VERSION: ${CI_COMMIT_TAG}
-      username: droneci
-      password:
-        from_secret: DRONECI_PASSWORD
+      buildkit_config: |
+        [registry."artifactapi.k8s.syd1.au.unkin.net"]
+          ca = ["/etc/docker/certs.d/artifactapi.k8s.syd1.au.unkin.net/ca.crt"]
      tags:
        - ${CI_COMMIT_TAG}
        - latest
@@ -93,7 +93,7 @@ make test-short               # skip container-backed DB tests
 ## Releases

 - **`encapi` server image** — tagging `vX.Y.Z` builds and pushes
-  `git.unkin.net/unkin/encapi:{tag,latest}` (distroless).
+  `artifactapi.k8s.syd1.au.unkin.net/docker-internal/encapi:{tag,latest}` (distroless).
 - **`encapi-cli` RPM** — the same tag builds an RPM (nfpm) and publishes it to
  the ArtifactAPI `rpm-internal` repo. Installs `encapi-cli`, the `encapi-enc`
  Puppet wrapper, and `/etc/encapi/enc.conf`.
Author	SHA1	Message	Date
benvin	554e2e4f9c	Merge pull request 'ci: add buildkit_config CA trust for artifactapi push' (#5 ) from benvin/buildx-ca-config into main Reviewed-on: #5	2026-08-15 18:47:15 +10:00
unkin-agent	245a46aa5d	ci: add buildkit_config CA trust for artifactapi push ci/woodpecker/pr/pre-commit Pipeline was successful Details ci/woodpecker/pr/test Pipeline was successful Details ci/woodpecker/pr/build Pipeline was successful Details	2026-08-15 18:31:01 +10:00
benvin	e86b24f493	Merge pull request 'ci: use CA-baked plugin-docker-buildx image for artifactapi push' (#4 ) from benvin/buildx-ca-plugin-image into main Reviewed-on: #4	2026-08-15 18:21:10 +10:00
unkin-agent	749059d235	ci: use CA-baked plugin-docker-buildx image for artifactapi push ci/woodpecker/pr/pre-commit Pipeline was successful Details ci/woodpecker/pr/test Pipeline was successful Details ci/woodpecker/pr/build Pipeline was successful Details The upstream woodpeckerci/plugin-docker-buildx image does not trust the internal CA, so pushes/pulls against artifactapi.k8s.syd1.au.unkin.net fail. Swap both the docker.yaml push step (docker-encapi) and the build.yaml PR dry-run step to the custom CA-baked image published at artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest.	2026-08-15 18:04:16 +10:00
benvin	17f043d856	Merge pull request 'ci: push images to artifactapi registry instead of gitea' (#3 ) from benvin/push-artifactapi into main Reviewed-on: #3	2026-07-30 20:56:25 +10:00
unkinben	4d8ec0f54c	ci: push images to artifactapi registry instead of gitea ci/woodpecker/pr/pre-commit Pipeline was successful Details ci/woodpecker/pr/test Pipeline was successful Details ci/woodpecker/pr/build Pipeline was successful Details Hard switch of the docker push target from the Gitea registry to the artifactapi local docker registry (docker-internal); the Gitea VM and its registry are being retired. Drops the droneci/DRONECI_PASSWORD creds since artifactapi accepts unauthenticated in-cluster pushes. Also updates the README image path. Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv	2026-07-30 00:34:59 +10:00