ci: use CA-baked plugin-docker-buildx image for artifactapi push #4

Merged
benvin merged 1 commits from benvin/buildx-ca-plugin-image into main 2026-08-15 18:21:11 +10:00
Member

The upstream woodpeckerci/plugin-docker-buildx image does not trust the internal CA, so buildx pushes/pulls against artifactapi.k8s.syd1.au.unkin.net fail.

This swaps both buildx image refs to the custom CA-baked image artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest:

  • .woodpecker/docker.yamldocker-encapi push step
  • .woodpecker/build.yaml — PR dry-run step

The RPM upload step in .woodpecker/release.yaml is left untouched.

The upstream `woodpeckerci/plugin-docker-buildx` image does not trust the internal CA, so buildx pushes/pulls against `artifactapi.k8s.syd1.au.unkin.net` fail. This swaps both buildx image refs to the custom CA-baked image `artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest`: - `.woodpecker/docker.yaml` — `docker-encapi` push step - `.woodpecker/build.yaml` — PR dry-run step The RPM upload step in `.woodpecker/release.yaml` is left untouched.
unkin-agent added 1 commit 2026-08-15 18:04:25 +10:00
ci: use CA-baked plugin-docker-buildx image for artifactapi push
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/test Pipeline was successful
ci/woodpecker/pr/build Pipeline was successful
749059d235
The upstream woodpeckerci/plugin-docker-buildx image does not trust the
internal CA, so pushes/pulls against artifactapi.k8s.syd1.au.unkin.net
fail. Swap both the docker.yaml push step (docker-encapi) and the
build.yaml PR dry-run step to the custom CA-baked image published at
artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest.
benvin merged commit e86b24f493 into main 2026-08-15 18:21:11 +10:00
benvin deleted branch benvin/buildx-ca-plugin-image 2026-08-15 18:21:11 +10:00
Sign in to join this conversation.