network=host
is considered insecure. You need to pass
--buildkitd-flags'--allow-insecure-entitlement network.host'
when creating the builder. Examples are as follows:
docker buildx create --name ingress-nginx --buildkitd-flags '--allow-insecure-entitlement network.host'