bake: fix override value parsing

bake/bake.go

@@ -680,7 +680,7 @@ func (c Config) newOverrides(v []string) (map[string]map[string]Override, error)
 			// IMPORTANT: if you add more fields here, do not forget to update
 			// docs/reference/buildx_bake.md (--set) and https://docs.docker.com/build/bake/overrides/
 			switch keys[1] {
-			case "output", "cache-to", "cache-from", "tags", "platform", "secrets", "ssh", "attest", "entitlements", "network", "annotations", "policy":
+			case "output", "cache-to", "cache-from", "tags", "platform", "secrets", "ssh", "attest", "entitlements", "annotations", "policy", "ulimits", "no-cache-filter":
 				if len(parts) == 2 {
 					override.Append = appendTo
 					override.ArrValue = append(override.ArrValue, parts[1])

bake/bake_test.go

@@ -194,6 +194,12 @@ target "webapp" {
 		require.Equal(t, []string{"webapp"}, g["default"].Targets)
 	})
 
+	t.Run("NoCacheFilterOverride", func(t *testing.T) {
+		m, _, err := ReadTargets(ctx, []File{fp}, []string{"webapp"}, []string{"webapp.no-cache-filter=stage"}, nil, nil, &EntitlementConf{})
+		require.NoError(t, err)
+		require.Equal(t, []string{"stage"}, m["webapp"].NoCacheFilter)
+	})
+
 	t.Run("PlatformOverride", func(t *testing.T) {
 		m, _, err := ReadTargets(ctx, []File{fp}, []string{"webapp"}, []string{"webapp.platform=linux/arm64"}, nil, nil, &EntitlementConf{})
 		require.NoError(t, err)
@@ -286,6 +292,18 @@ target "webapp" {
 		require.Equal(t, "256m", *m["webapp"].ShmSize)
 	})
 
+	t.Run("NetworkOverride", func(t *testing.T) {
+		m, _, err := ReadTargets(ctx, []File{fp}, []string{"webapp"}, []string{"webapp.network=host"}, nil, nil, &EntitlementConf{})
+		require.NoError(t, err)
+		require.Equal(t, "host", *m["webapp"].NetworkMode)
+	})
+
+	t.Run("UlimitsOverride", func(t *testing.T) {
+		m, _, err := ReadTargets(ctx, []File{fp}, []string{"webapp"}, []string{"webapp.ulimits=nofile=2048:2048"}, nil, nil, &EntitlementConf{})
+		require.NoError(t, err)
+		require.Equal(t, []string{"nofile=2048:2048"}, m["webapp"].Ulimits)
+	})
+
 	t.Run("ResourceLimitsOverride", func(t *testing.T) {
 		m, _, err := ReadTargets(ctx, []File{fp}, []string{"webapp"}, []string{
 			"webapp.resources.memory=512m",

docs/reference/buildx_bake.md

@@ -463,16 +463,20 @@ You can override the following fields:
 * `load`
 * `no-cache`
 * `no-cache-filter`
+* `network`
 * `output`
 * `platform`
+* `policy`
 * `pull`
 * `push`
 * `resources`
 * `secret.<id>`
 * `secrets`
+* `shm-size`
 * `ssh`
 * `tags`
 * `target`
+* `ulimits`
 
 You can append using `+=` operator for the following fields:
 
@@ -484,9 +488,11 @@ You can append using `+=` operator for the following fields:
 * `no-cache-filter`
 * `output`
 * `platform`
+* `policy`
 * `secrets`
 * `ssh`
 * `tags`
+* `ulimits`
 
 > [!NOTE]
 > ¹ These fields already append by default.