fix: Kaniko skip-push-permission-check (#193) #102

Merged

forgejo_admin merged 1 commit from 193-kaniko-skip-push-check into main

2026-03-27 05:20:58 +00:00

forgejo_admin commented

2026-03-27 05:03:31 +00:00

Owner

Summary

Kaniko's push permission check uses a separate HTTPS transport that ignores the insecure-registry setting, causing a timeout when probing port 443 on the internal Harbor registry. Adding --skip-push-permission-check via extra_opts bypasses this probe entirely.

Changes

.woodpecker.yaml: Added extra_opts: "--skip-push-permission-check" to the build-and-push Kaniko step settings

Test Plan

Merge to main and confirm the Woodpecker pipeline completes the build-and-push step without the 30s permission check timeout
Verify the image is pushed successfully to harbor.harbor.svc.cluster.local/westsidekingsandqueens/app

Review Checklist

Single-line YAML change, no logic changes
Validated --skip-push-permission-check flag in a real Kaniko pod before shipping
No secrets or env var changes required

Closes forgejo_admin/pal-e-platform#193

## Summary Kaniko's push permission check uses a separate HTTPS transport that ignores the `insecure-registry` setting, causing a timeout when probing port 443 on the internal Harbor registry. Adding `--skip-push-permission-check` via `extra_opts` bypasses this probe entirely. ## Changes - `.woodpecker.yaml`: Added `extra_opts: "--skip-push-permission-check"` to the `build-and-push` Kaniko step settings ## Test Plan - Merge to main and confirm the Woodpecker pipeline completes the build-and-push step without the 30s permission check timeout - Verify the image is pushed successfully to `harbor.harbor.svc.cluster.local/westsidekingsandqueens/app` ## Review Checklist - [x] Single-line YAML change, no logic changes - [x] Validated `--skip-push-permission-check` flag in a real Kaniko pod before shipping - [x] No secrets or env var changes required ## Related Notes Closes forgejo_admin/pal-e-platform#193

forgejo_admin added 1 commit

2026-03-27 05:03:31 +00:00

fix: add skip-push-permission-check to Kaniko build step

ci/woodpecker/pr/woodpecker Pipeline was successful

Details

89b483d675

The insecure-registry setting does not apply to Kaniko's push permission
check, which uses a separate transport that still probes HTTPS on 443.
Adding --skip-push-permission-check bypasses this entirely. Validated
in a real Kaniko pod before shipping.

Refs: forgejo_admin/pal-e-platform#193

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>