ci: add woodpecker Kyverno proxy CA policy with NO_PROXY for gRPC

2026-04-19 03:00:06 +00:00
parent 76dd58c1dc
commit 9e39d59afa
3 changed files with 47 additions and 4 deletions
@@ -48,8 +48,7 @@ agent:
  enabled: true
  replicaCount: 2

-  # No proxy CA injection for agents — they only talk to the server internally
-  # Pipeline step pods spawned by the agent inherit the node's proxy config
+  # CA injection handled by woodpecker-proxy-ca Kyverno policy (matches all pods in namespace)

  env:
    WOODPECKER_SERVER: "woodpecker-server:9000"