sirius/gcloud-lab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(hermes-webui): webui runAsUser: 0 to trigger image entrypoint chown/gosu

Browse source 
- WANTED_UID=1000 detects root → chowns volumes + gosu 1000 app (runtime non-root)
- Fixes whoami (root phase OK) + double-perm fix w/ init
- PodSecurity OK (per-container fields; pod no runAsNonRoot)
This commit is contained in:
Hermes Agent 2026-05-07 14:36:29 +00:00
parent 8f52cb1c25
commit 560f5b76cf
1 changed files with 2 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
apps/base/customer1/hermes-agent/deployment.yaml
View file

@ -168,13 +168,11 @@ spec:
memory: 512Mi memory: 512Mi
cpu: "500m" cpu: "500m"
securityContext: securityContext:
allowPrivilegeEscalation: false allowPrivilegeEscalation: true
capabilities: capabilities:
drop: drop:
- ALL - ALL
runAsNonRoot: true runAsUser: 0
runAsUser: 1000
runAsGroup: 1000
seccompProfile: seccompProfile:
type: RuntimeDefault type: RuntimeDefault
volumes: volumes: