From bc27146148de9f21d0fa065583823aca1198d7e9 Mon Sep 17 00:00:00 2001
From: sirius0xdev <sirius0xdev@proton.me>
Date: Thu, 7 May 2026 16:03:21 -0400
Subject: [PATCH] Update deployment.yaml

---
 apps/base/customer1/hermes-agent/deployment.yaml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/apps/base/customer1/hermes-agent/deployment.yaml b/apps/base/customer1/hermes-agent/deployment.yaml
index 166b46e..a2bb8ee 100644
--- a/apps/base/customer1/hermes-agent/deployment.yaml
+++ b/apps/base/customer1/hermes-agent/deployment.yaml
@@ -27,9 +27,11 @@ spec:
         imagePullPolicy: IfNotPresent
         securityContext:
           runAsNonRoot: false
+          runAsUser: 0
           
           
-          allowPrivilegeEscalation: true
+          
+          allowPrivilegeEscalation: false
           
             
             
@@ -40,7 +42,7 @@ spec:
           - -c
         args:
           - |
-            pk add --no-cache git > /dev/null 2>&1 || true
+             apk add --no-cache git 
              mkdir -p /data/.hermes/webui /data/.cache /data/.config /data/bin
             chmod -R g+rwX,o-rwx /data
             chown -R 1000:1000 /data/.hermes /data/.cache /data/.config /data/bin || true