From 1892006ab2580fb1b35ca4fc16190ed6c2b760ea Mon Sep 17 00:00:00 2001
From: sirius0xdev <sirius0xdev@proton.me>
Date: Fri, 8 May 2026 03:01:42 +0000
Subject: [PATCH] fix priv issue

---
 apps/base/customer1/hermes-agent/new-deployment.yaml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/apps/base/customer1/hermes-agent/new-deployment.yaml b/apps/base/customer1/hermes-agent/new-deployment.yaml
index 82563cf..2eb0fab 100644
--- a/apps/base/customer1/hermes-agent/new-deployment.yaml
+++ b/apps/base/customer1/hermes-agent/new-deployment.yaml
@@ -126,6 +126,8 @@ spec:
           value: "1024"
         - name: WANTED_GID
           value: "1000"
+        - name: HERMES_SKIP_CHMOD
+          value: "1"
           
         volumeMounts:
         - name: hermes-home
@@ -150,7 +152,7 @@ spec:
           runAsUser: 1024
           runAsGroup: 1000
           runAsNonRoot: true
-          allowPrivilegeEscalation: false
+          allowPrivilegeEscalation: true 
           readOnlyRootFilesystem: false
           seccompProfile:
             type: RuntimeDefault