ci: use CA-baked plugin-docker-buildx image for artifactapi push #23
Reference in New Issue
Block a user
Delete Branch "benvin/buildx-ca-plugin-image"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Replaces the upstream woodpeckerci/plugin-docker-buildx image with the CA-baked custom image artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest in .woodpecker/build.yaml and .woodpecker/docker.yaml.
Why: the upstream plugin image does not trust the internal CA, so buildx pushes to the artifactapi docker-internal registry fail TLS verification. The custom image bakes in the internal CA, removing the need for any ca-trust workaround.