unkin-agent
ec04b35b39
ci/woodpecker/pr/build Pipeline was successful
The v0.1.0 release pipeline built the runtime image fine but failed the push to artifactapi.k8s.syd1.au.unkin.net/docker-internal with a TLS x509 unknown-authority error: buildkit did not trust artifactapi's Vault-signed cert. Stage the internal CA into the shared workspace via the almalinux9-base image (already trusts the unkin CA; same image the RPM release pipelines use to reach artifactapi over HTTPS) and point the docker-buildx plugin at it through buildkit_config. buildx copies the referenced CA into the buildkitd container at builder-create time, so the push handshake now verifies. No credentials needed: anonymous push to docker-internal is allowed for trusted clients.