From 584c38ff38376c4b4ec84e9a87aa1c3bdc444759 Mon Sep 17 00:00:00 2001
From: Hermes Agent <hermes-agent@nousresearch.com>
Date: Sun, 10 May 2026 01:18:34 +0000
Subject: [PATCH] fix: telegram webhook - HTTPRoute structure, kustomization,
 env var

- Fix HTTPRoute: merge backendRefs and matches into a single rule
  (was split across two rules, causing Telegram POSTs to be dropped)
- Add hermes-webhook.yaml to kustomization.yaml resources
  (was not applied during kustomize build at all)
- Clean up TELEGRAM_WEBHOOK_SECRET env var name (leading space)
---
 apps/base/customer1/hermes-agent/kustomization.yaml  |  1 +
 apps/base/customer1/hermes-agent/new-deployment.yaml |  2 +-
 .../gatewayapi/gateway-routes/hermes-webhook.yaml    | 12 ++++++------
 3 files changed, 8 insertions(+), 7 deletions(-)

diff --git a/apps/base/customer1/hermes-agent/kustomization.yaml b/apps/base/customer1/hermes-agent/kustomization.yaml
index e17072f..c539e18 100644
--- a/apps/base/customer1/hermes-agent/kustomization.yaml
+++ b/apps/base/customer1/hermes-agent/kustomization.yaml
@@ -10,3 +10,4 @@ resources:
  # - hermes-service.yaml
   - new-deployment-rays.yaml
   - tele-webhook.yaml
+  - ../../../../infrastructure/gatewayapi/gateway-routes/hermes-webhook.yaml
diff --git a/apps/base/customer1/hermes-agent/new-deployment.yaml b/apps/base/customer1/hermes-agent/new-deployment.yaml
index 2fcece9..8b63d28 100644
--- a/apps/base/customer1/hermes-agent/new-deployment.yaml
+++ b/apps/base/customer1/hermes-agent/new-deployment.yaml
@@ -98,7 +98,7 @@ spec:
         - name: TELEGRAM_WEBHOOK_URL
           value: "https://ws.siriusdevops.com/telegram/webhook/default"  
         
-        - name:  TELEGRAM_WEBHOOK_SECRET 
+        - name: TELEGRAM_WEBHOOK_SECRET
           valueFrom:
             secretKeyRef:
               name: telegram-webhook
diff --git a/infrastructure/gatewayapi/gateway-routes/hermes-webhook.yaml b/infrastructure/gatewayapi/gateway-routes/hermes-webhook.yaml
index a619254..72399aa 100644
--- a/infrastructure/gatewayapi/gateway-routes/hermes-webhook.yaml
+++ b/infrastructure/gatewayapi/gateway-routes/hermes-webhook.yaml
@@ -10,10 +10,10 @@ spec:
   hostnames:
   - "ws.siriusdevops.com"
   rules:
-  - backendRefs:
-    - name: hermes-tele-webhook 
-      port: 8645 
   - matches:
-      - path:
-          type: PathPrefix
-          value: /telegram/webhook
+    - path:
+        type: PathPrefix
+        value: /telegram/webhook
+    backendRefs:
+    - name: hermes-tele-webhook
+      port: 8645