Refactor Woodpecker CI pipeline to use buildx plugin correctly

.woodpecker.yml

@@ -3,25 +3,29 @@ when:
   branch: main
 
 steps:
-  - name: build
+  - name: build-and-push
-    image: woodpeckerci/plugin-docker-buildx
+    image: woodpeckerci/plugin-docker-buildx:4.2.0
+    privileged: true
     settings:
-      registry: harbor.scottyah.com
       repo: harbor.scottyah.com/scottyah/blog
-      tags: latest
       dockerfile: Dockerfile
       context: .
       platforms: linux/amd64
-      insecure: true
+      tags:
-      username:
+        - latest
-        from_secret: harbor_username
+        - ${CI_COMMIT_SHA:0:8}
-      password:
+      logins:
-        from_secret: harbor_password
+        - registry: https://harbor.scottyah.com
+          username:
+            from_secret: harbor_username
+          password:
+            from_secret: harbor_password
 
   - name: deploy
     image: bitnami/kubectl:latest
     commands:
       - kubectl apply -f k8s.yaml -n blog
+      - kubectl rollout restart deployment/blog-dep -n blog
       - kubectl rollout status deployment/blog-dep -n blog
     environment:
       KUBECONFIG:

k8s.yaml

@@ -50,7 +50,7 @@ spec:
   tls:
   - hosts:
     - scottyah.com
-    secretName: blog-tls-cert
+    secretName: scottyah-tls
   rules:
   - host: scottyah.com
     http: