diff --git a/kubernetes/worker-ubuntu22-04.yaml b/kubernetes/worker-ubuntu22-04.yaml index 033c06b..bd0e66d 100644 --- a/kubernetes/worker-ubuntu22-04.yaml +++ b/kubernetes/worker-ubuntu22-04.yaml @@ -20,7 +20,7 @@ spec: spec: containers: - args: - - /config/worker-ubuntu22-04.jsonnet + - /config/worker-fuse.jsonnet image: buildbarn/bb-worker:20230125T082650Z-47f8d16 name: worker volumeMounts: @@ -31,6 +31,11 @@ spec: name: worker - mountPath: /storage-worker-cas name: storage-worker-cas + - mountPath: /worker-fuse + mountPropagation: Bidirectional + name: fuse-worker + securityContext: + privileged: true env: - name: NODE_NAME valueFrom: @@ -44,8 +49,7 @@ spec: image: ghcr.io/catthehacker/ubuntu:act-22.04@sha256:5f9c35c25db1d51a8ddaae5c0ba8d3c163c5e9a4a6cc97acd409ac7eae239448 name: runner securityContext: - runAsUser: 65534 - allowPrivilegeEscalation: false + privileged: true volumeMounts: - mountPath: /config/ name: configs @@ -54,6 +58,9 @@ spec: name: worker - mountPath: /storage-worker-cas name: storage-worker-cas + - mountPath: /worker-fuse + mountPropagation: HostToContainer + name: fuse-worker - mountPath: /bb name: bb-runner readOnly: true @@ -68,12 +75,15 @@ spec: command: - sh - -c - - mkdir -pm 0777 /worker/build && mkdir -pm 0700 /worker/cache && mkdir -pm 0777 /storage-worker-cas/persistent_state && chmod 0777 /worker + - mkdir -pm 0777 /worker/build && mkdir -pm 0700 /worker/cache && mkdir -pm 0777 /storage-worker-cas/persistent_state && mkdir -pm 0777 /worker-fuse && chmod 0777 /worker volumeMounts: - mountPath: /worker name: worker - mountPath: /storage-worker-cas name: storage-worker-cas + - mountPath: /worker-fuse + mountPropagation: Bidirectional + name: fuse-worker volumes: - name: bb-runner emptyDir: {} @@ -99,4 +109,5 @@ spec: name: worker - name: storage-worker-cas emptyDir: {} - + - name: fuse-worker + emptyDir: {}