From c874776e6ec30d7deef78818d44737594e121ef7 Mon Sep 17 00:00:00 2001
From: Lumpiasty <arek.dzski@gmail.com>
Date: Fri, 29 May 2026 00:46:17 +0200
Subject: [PATCH] allow woodpecker to publish docker images

---
 apps/woodpecker/release.yaml | 1 +
 vault/policy/renovate.hcl    | 4 ++++
 2 files changed, 5 insertions(+)

diff --git a/apps/woodpecker/release.yaml b/apps/woodpecker/release.yaml
index fb7ec7e..5f70b39 100644
--- a/apps/woodpecker/release.yaml
+++ b/apps/woodpecker/release.yaml
@@ -50,6 +50,7 @@ spec:
         WOODPECKER_OPEN: "true"
         # Make lumpiasty admin
         WOODPECKER_ADMIN: GiteaAdmin
+        WOODPECKER_PLUGINS_PRIVILEGED: woodpeckerci/plugin-docker-buildx
 
       createAgentSecret: true
 
diff --git a/vault/policy/renovate.hcl b/vault/policy/renovate.hcl
index 01c980a..b8a26fb 100644
--- a/vault/policy/renovate.hcl
+++ b/vault/policy/renovate.hcl
@@ -1,3 +1,7 @@
 path "secret/data/renovate" {
     capabilities = ["read"]
 }
+
+path "secret/data/container-registry" {
+    capabilities = ["read"]
+}