Commit graph

576 commits

Author SHA1 Message Date
sirius0xdev
9af70148c5 fix cmd to args 2026-05-08 02:12:37 +00:00
sirius0xdev
be3778ff0b add pvc 2026-05-08 02:07:05 +00:00
sirius0xdev
3fe7b6b66e fix 2026-05-08 02:03:09 +00:00
sirius0xdev
49444f1ee9 fix 2026-05-08 01:59:48 +00:00
sirius0xdev
bfa8daa7db sec context 2026-05-08 01:44:55 +00:00
sirius0xdev
4960af6b88 fix deploy 2026-05-08 01:34:48 +00:00
sirius0xdev
1bbed97053 fix deployment 2026-05-08 01:28:33 +00:00
sirius0xdev
43b2c8919c fix deployment 2026-05-08 01:15:00 +00:00
sirius0xdev
2a9a7e3f3f fix deployment 2026-05-08 01:04:29 +00:00
sirius0xdev
8cbc00538e fix args 2026-05-08 00:52:57 +00:00
sirius0xdev
47f061ad19 update hermes deployment 2026-05-08 00:37:53 +00:00
sirius0xdev
3e2b9e0541 almost 2026-05-08 00:19:50 +00:00
sirius0xdev
9a92097ebf fix 2026-05-08 00:16:27 +00:00
sirius0xdev
48a1d59cd1 fix typos 2026-05-08 00:13:03 +00:00
sirius0xdev
f1418d30a4 test fix hermes webui and hermes 2026-05-08 00:07:16 +00:00
sirius0xdev
f79a0b648c webui dial in 2026-05-07 23:21:56 +00:00
sirius0xdev
24f94ae154
Update deployment.yaml 2026-05-07 18:18:49 -04:00
sirius0xdev
9daa8a3d9c
Update deployment.yaml 2026-05-07 17:21:08 -04:00
sirius0xdev
11fb4b2361
Update deployment.yaml 2026-05-07 16:53:29 -04:00
sirius0xdev
cc78c3dbec
Update deployment.yaml 2026-05-07 16:26:17 -04:00
sirius0xdev
99f9f36670
Update deployment.yaml 2026-05-07 16:04:40 -04:00
sirius0xdev
bc27146148
Update deployment.yaml 2026-05-07 16:03:21 -04:00
sirius0xdev
d651352c6a
Update deployment.yaml 2026-05-07 15:57:24 -04:00
sirius0xdev
a829473d1c
Update deployment.yaml 2026-05-07 15:45:03 -04:00
sirius0xdev
76e1fa10a7
Update deployment.yaml 2026-05-07 15:31:20 -04:00
sirius0xdev
dd23d800b0
Update deployment.yaml 2026-05-07 15:29:13 -04:00
sirius0xdev
84eb6c900a
Update deployment.yaml 2026-05-07 15:18:30 -04:00
sirius0xdev
547bb4d9a8
Update deployment.yaml 2026-05-07 15:07:30 -04:00
sirius0xdev
9fec3dafaa
Update deployment.yaml 2026-05-07 14:42:10 -04:00
sirius0xdev
5f9112fd31
Update deployment.yaml 2026-05-07 14:10:57 -04:00
sirius0xdev
f25820a983
Update rays-deployment.yaml 2026-05-07 14:05:41 -04:00
sirius0xdev
9abcd15012
Update rays-deployment.yaml 2026-05-07 14:04:08 -04:00
sirius0xdev
3e9f23f4ca
Update deployment.yaml 2026-05-07 13:55:01 -04:00
sirius0xdev
f603a4cb8b
Update rays-deployment.yaml 2026-05-07 13:47:39 -04:00
sirius0xdev
a169c809e6
Update deployment.yaml 2026-05-07 13:45:44 -04:00
sirius0xdev
beb3f31f7f
Update deployment.yaml 2026-05-07 13:37:52 -04:00
sirius0xdev
1576d158ae
Update deployment.yaml 2026-05-07 13:29:15 -04:00
sirius0xdev
da7957251f
Update deployment.yaml 2026-05-07 13:23:15 -04:00
sirius0xdev
07bb6c0059
Update deployment.yaml 2026-05-07 13:15:25 -04:00
sirius0xdev
b281e7a4ad
Update deployment.yaml 2026-05-07 13:09:48 -04:00
sirius0xdev
96e68cfa0e
Update deployment.yaml 2026-05-07 13:07:50 -04:00
sirius0xdev
4e403e757d
Update deployment.yaml 2026-05-07 13:00:37 -04:00
sirius0xdev
507189b401
Update deployment.yaml 2026-05-07 12:52:36 -04:00
sirius0xdev
e67a709a53
Update deployment.yaml 2026-05-07 12:43:55 -04:00
sirius0xdev
d19174893a
Update deployment.yaml 2026-05-07 12:38:15 -04:00
sirius0xdev
6dd3d5be0e
Update deployment.yaml 2026-05-07 12:32:35 -04:00
sirius0xdev
d5affa58b9
Update deployment.yaml 2026-05-07 12:26:26 -04:00
sirius0xdev
f7d77a70d5
Update deployment.yaml 2026-05-07 12:14:57 -04:00
sirius0xdev
e012b19ddf
Update deployment.yaml 2026-05-07 12:08:08 -04:00
Hermes Agent
d2f011956e fix: hermes-webui container start failure due to PodSecurity restricted policy
- Updated pod.spec.securityContext and all container/initContainer securityContext to be fully compliant with restricted:latest (runAsNonRoot: true, allowPrivilegeEscalation: false, runAsUser: 1000, capabilities drop ALL, seccomp RuntimeDefault, fsGroup)
- Changed initContainer from root chown to non-root mkdir/chmod relying on fsGroup (avoids PSA violation)
- Updated default model to grok-4.20-0309-reasoning (per xAI switch note)
- Added automountServiceAccountToken: false and imagePullPolicy for best practices (matches openclaw deployment pattern)
- hermes-webui now runs as non-root with WANTED_UID matching

This should resolve the container not starting. Leave PR open for review before merge.
2026-05-07 14:52:13 +00:00