sirius/gcloud-lab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(hermes-webui): fsGroup=1000 + PodSecurity compliance for PVC access

Browse source
This commit is contained in:
Hermes Agent 2026-05-06 19:56:22 +00:00
parent b762f345e2
commit 2ff889d297
1 changed files with 11 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
apps/base/customer1/hermes-agent/deployment.yaml
View file

@ -13,8 +13,18 @@ spec:
labels: labels:
app: hermes-agent app: hermes-agent
spec: spec:
securityContext:
fsGroup: 1000
runAsGroup: 1000
containers: containers:
- name: hermes-agent - name: hermes-agent
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
seccompProfile:
type: RuntimeDefault
image: nousresearch/hermes-agent:latest image: nousresearch/hermes-agent:latest
command: ["/bin/bash", "-c"] command: ["/bin/bash", "-c"]
args: args:
@ -121,6 +131,7 @@ spec:
- ALL - ALL
runAsNonRoot: true runAsNonRoot: true
runAsUser: 1000 runAsUser: 1000
runAsGroup: 1000
seccompProfile: seccompProfile:
type: RuntimeDefault type: RuntimeDefault
volumes: volumes: