unkin/pdbmux
4
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

ci: use CA-baked plugin-docker-buildx image for artifactapi push
ci/woodpecker/pr/build Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/test Pipeline was successful
Details

Browse Source 
The upstream woodpeckerci/plugin-docker-buildx image does not trust the
internal CA, so buildx pushes to the artifactapi local docker registry
fail on TLS verification. Switch the docker push step to the CA-baked
plugin-docker-buildx image published to docker-internal, which bundles
the internal CA and pushes cleanly.
This commit is contained in:
unkin-agent
2026-08-15 18:04:23 +10:00
parent c5b8b3824a
commit 3c7251cc1e
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.woodpecker/docker.yaml
+2 -2
View File
@@ -1,6 +1,6 @@
# Build and push the pdbmux container image on a v* tag. pdbmux is a k8s-only # Build and push the pdbmux container image on a v* tag. pdbmux is a k8s-only
# daemon (deployed via argocd-apps), so it ships as an image. Mirrors the estate # daemon (deployed via argocd-apps), so it ships as an image. Mirrors the estate
# convention: the woodpeckerci/plugin-docker-buildx plugin pushes to the # convention: the CA-baked plugin-docker-buildx image pushes to the
# artifactapi local docker registry (unauthenticated in-cluster push). # artifactapi local docker registry (unauthenticated in-cluster push).
when: when:
- event: tag - event: tag
@@ -8,7 +8,7 @@ when:
steps: steps:
- name: docker - name: docker
image: woodpeckerci/plugin-docker-buildx image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest
settings: settings:
registry: artifactapi.k8s.syd1.au.unkin.net registry: artifactapi.k8s.syd1.au.unkin.net
repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/pdbmux repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/pdbmux