diff --git a/apps/base/customer1/hermes-agent/deployment.yaml b/apps/base/customer1/hermes-agent/deployment.yaml index dccd32d..38c152c 100644 --- a/apps/base/customer1/hermes-agent/deployment.yaml +++ b/apps/base/customer1/hermes-agent/deployment.yaml @@ -16,41 +16,10 @@ spec: securityContext: fsGroup: 1000 - initContainers: - - name: create-webui-user - image: busybox:1.36 - command: - - sh - - -c - - | - set -e - echo "Creating users/groups for hermes-webui..." - - # Root - echo "root:x:0:0:root:/root:/bin/sh" >> /etc/passwd - echo "root:x:0:" >> /etc/group - - # Target user - echo "hermeswebui:x:1000:1000::/home/hermeswebui:/bin/sh" >> /etc/passwd - echo "hermeswebui:x:1000:" >> /etc/group - - # Internal sudo-enabled user the image expects - echo "hermeswebuitoo:x:1025:1025::/home/hermeswebuitoo:/bin/sh" >> /etc/passwd - echo "hermeswebuitoo:x:1025:" >> /etc/group - - # Sudoers - mkdir -p /etc/sudoers.d - echo 'hermeswebuitoo ALL=(ALL) NOPASSWD:ALL' > /etc/sudoers.d/hermeswebuitoo - chmod 0440 /etc/sudoers.d/hermeswebuitoo - - echo "✅ Users and sudoers created" + securityContext: runAsUser: 0 - runAsGroup: 0 - volumeMounts: - - name: webui-etc - mountPath: /etc - + runAsGroup: 0 containers: - name: hermes-agent securityContext: