add fuse mounts

Author: Ryang20718

kubernetes/worker-ubuntu22-04.yaml

@@ -20,7 +20,7 @@ spec:
     spec:
       containers:
       - args:
-        - /config/worker-ubuntu22-04.jsonnet
+        - /config/worker-fuse.jsonnet
         image: buildbarn/bb-worker:20230125T082650Z-47f8d16
         name: worker
         volumeMounts:
@@ -31,6 +31,11 @@ spec:
           name: worker
         - mountPath: /storage-worker-cas
           name: storage-worker-cas
+        - mountPath: /worker-fuse
+          mountPropagation: Bidirectional
+          name: fuse-worker
+        securityContext:
+          privileged: true
         env:
         - name: NODE_NAME
           valueFrom:
@@ -44,8 +49,7 @@ spec:
         image: ghcr.io/catthehacker/ubuntu:act-22.04@sha256:5f9c35c25db1d51a8ddaae5c0ba8d3c163c5e9a4a6cc97acd409ac7eae239448
         name: runner
         securityContext:
-          runAsUser: 65534
-          allowPrivilegeEscalation: false
+          privileged: true
         volumeMounts:
         - mountPath: /config/
           name: configs
@@ -54,6 +58,9 @@ spec:
           name: worker
         - mountPath: /storage-worker-cas
           name: storage-worker-cas
+        - mountPath: /worker-fuse
+          mountPropagation: HostToContainer
+          name: fuse-worker
         - mountPath: /bb
           name: bb-runner
           readOnly: true
@@ -68,12 +75,17 @@ spec:
         command:
         - sh
         - -c
-        - mkdir -pm 0777 /worker/build && mkdir -pm 0700 /worker/cache && mkdir -pm 0777 /storage-worker-cas/persistent_state && chmod 0777 /worker
+        - mkdir -pm 0777 /worker/build && mkdir -pm 0700 /worker/cache && mkdir -pm 0777 /storage-worker-cas/persistent_state && mkdir -pm 0777 /worker-fuse && chmod 0777 /worker
         volumeMounts:
         - mountPath: /worker
           name: worker
         - mountPath: /storage-worker-cas
           name: storage-worker-cas
+        - mountPath: /worker-fuse
+          mountPropagation: Bidirectional
+          name: fuse-worker
+        securityContext:
+          privileged: true
       volumes:
       - name: bb-runner
         emptyDir: {}
@@ -99,4 +111,5 @@ spec:
         name: worker
       - name: storage-worker-cas
         emptyDir: {}
-        
+      - name: fuse-worker
+        emptyDir: {}