Merge pull request #108 from sirius0xdev/fix/hermes-webui-runAsUser

Fix hermes-webui crash: hermes-agent main container non-root (UID/GID 1000)
2026-05-07 10:19:11 -04:00 · 2026-05-07 10:19:11 -04:00 · 556bedfee0
commit 556bedfee0
parent c2e899d56d dfe32018b7
1 changed files with 5 additions and 3 deletions
--- a/apps/base/customer1/hermes-agent/deployment.yaml
+++ b/apps/base/customer1/hermes-agent/deployment.yaml
@ -14,8 +14,10 @@ spec:
        app: hermes-agent
    spec:
      securityContext:
-        fsGroup: 1000
+        runAsNonRoot: true
        runAsUser: 1000
+        runAsGroup: 1000
+        fsGroup: 1000
      containers:
      - name: hermes-agent
        securityContext:
@ -23,8 +25,8 @@ spec:
          capabilities:
            drop:
            - ALL
-          runAsUser: 0
-          runAsGroup: 0
+          runAsUser: 1000
+          runAsGroup: 1000
          seccompProfile:
            type: RuntimeDefault
        image: nousresearch/hermes-agent:latest