fix: add CI_NETRC_MACHINE override for internal Forgejo clone #128

Merged

forgejo_admin merged 4 commits from 121-fix-clone-auth into main

2026-03-21 15:58:21 +00:00

forgejo_admin commented

2026-03-21 15:53:14 +00:00

Owner

Summary

The custom clone step uses forgejo-http.forgejo.svc.cluster.local but the default netrc entry is for the external Tailscale hostname. Git auth fails because the netrc machine doesn't match the remote hostname.

Adds CI_NETRC_MACHINE override so the plugin-git's auto-generated .netrc matches the internal clone URL.

Changes

.woodpecker.yaml — added CI_NETRC_MACHINE: forgejo-http.forgejo.svc.cluster.local to clone step environment

Review Checklist

No secrets committed
No unnecessary file changes
Commit messages are descriptive

Test Plan

Pipeline clone step succeeds on this PR
After merge, apply-on-merge pipeline clone succeeds

Closes #121
Plan: plan-pal-e-platform

## Summary The custom clone step uses `forgejo-http.forgejo.svc.cluster.local` but the default netrc entry is for the external Tailscale hostname. Git auth fails because the netrc machine doesn't match the remote hostname. Adds `CI_NETRC_MACHINE` override so the plugin-git's auto-generated `.netrc` matches the internal clone URL. ## Changes - `.woodpecker.yaml` — added `CI_NETRC_MACHINE: forgejo-http.forgejo.svc.cluster.local` to clone step environment ## Review Checklist - [x] No secrets committed - [x] No unnecessary file changes - [x] Commit messages are descriptive ## Test Plan - [ ] Pipeline clone step succeeds on this PR - [ ] After merge, apply-on-merge pipeline clone succeeds ## Related - Closes #121 - Plan: `plan-pal-e-platform`

forgejo_admin added 1 commit

2026-03-21 15:53:14 +00:00

fix: add CI_NETRC_MACHINE override for internal Forgejo clone URL

ci/woodpecker/manual/woodpecker Pipeline failed

Details

f556b29346

The custom clone step uses forgejo-http.forgejo.svc.cluster.local but
the default netrc entry is for the external Tailscale hostname. Git
auth fails because the netrc machine doesn't match the remote hostname.

Closes #121

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

forgejo_admin added 1 commit

2026-03-21 15:54:36 +00:00

fix: use custom shell clone with token auth for internal Forgejo URL 54674718a1

The plugin-git's netrc machine is locked to the external hostname.
Switching to a direct git clone with token auth embedded in the URL
so the internal Forgejo service URL works for CI clones.

Closes #121

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

forgejo_admin added 1 commit

2026-03-21 15:55:57 +00:00

fix: use plugin-git netrc_machine setting for internal URL auth 22613d18ee

Clone step needs netrc_machine to match the internal hostname so
git auth works with the Woodpecker-provided credentials.

Closes #121

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

forgejo_admin added 1 commit

2026-03-21 15:57:02 +00:00

fix: revert to default Woodpecker clone (remove internal URL override)

ci/woodpecker/push/woodpecker Pipeline was successful

Details

ci/woodpecker/pull_request_closed/woodpecker Pipeline failed

Details

6c320f79bc

The custom clone step with internal URL has auth and config issues.
Reverting to default clone behavior — the original TLS issue (#107)
was with the external Tailscale funnel URL, which may be resolved
by the Forgejo IPv4 fix (PR #124).

Closes #121

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>