sirius/gcloud-lab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge pull request #104 from sirius0xdev/fix/hermes-webui-pvc-permissions

Browse source 
fix(hermes-webui): fsGroup=1000 + PodSecurity compliance for PVC access
This commit is contained in:
sirius0xdev 2026-05-06 15:58:57 -04:00 • committed by GitHub
commit 505efa3936
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 11 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
apps/base/customer1/hermes-agent/deployment.yaml
View file

@ -13,8 +13,18 @@ spec:
labels: labels:
app: hermes-agent app: hermes-agent
spec: spec:
securityContext:
fsGroup: 1000
runAsGroup: 1000
containers: containers:
- name: hermes-agent - name: hermes-agent
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
seccompProfile:
type: RuntimeDefault
image: nousresearch/hermes-agent:latest image: nousresearch/hermes-agent:latest
command: ["/bin/bash", "-c"] command: ["/bin/bash", "-c"]
args: args:
@ -121,6 +131,7 @@ spec:
- ALL - ALL
runAsNonRoot: true runAsNonRoot: true
runAsUser: 1000 runAsUser: 1000
runAsGroup: 1000
seccompProfile: seccompProfile:
type: RuntimeDefault type: RuntimeDefault
volumes: volumes: