Hermes Agent
dfe32018b7
fix(hermes-webui): hermes-agent main container non-root (UID/GID 1000)
...
- Aligns with webui sidecar on shared hermes-data PVC (/opt/data == /home/hermeswebui/.hermes)
- Previously root:root files blocked webui writes (whoami non-fatal)
- Pod securityContext: runAsNonRoot: true + runAsUser: 1000 for restricted:latest compliance
- fsGroup:1000 ensures volume g+rw
2026-05-07 14:18:34 +00:00
sirius0xdev
c2e899d56d
Update deployment.yaml
2026-05-07 10:00:49 -04:00
sirius0xdev
c803786611
Update deployment.yaml
2026-05-07 09:58:43 -04:00
Hermes Agent
3c8b617471
fix(hermes-webui): hermes-agent as root (runAsUser:0), webui as uid1000
...
Removed pod runAsUser/runAsNonRoot to allow hermes-agent root.
Hermes-agent: runAsUser:0 runAsGroup:0 (root).
Hermes-webui: runAsUser:1000 runAsGroup:1000 (non-root, matches WANTED_UID).
2026-05-07 13:45:42 +00:00
sirius0xdev
7a76e088e4
Update deployment.yaml
2026-05-07 09:30:15 -04:00
sirius0xdev
84305d3605
Update deployment.yaml
2026-05-07 09:29:48 -04:00
sirius0xdev
2f09278164
Merge branch 'master' into fix/hermes-webui-container-init-error
2026-05-07 09:15:52 -04:00
Hermes Agent
22964a16a8
fix(hermes-webui): remove root initContainer and custom /etc mount to fix read-only fs + sudo error
...
- Removed initContainer running as root (violates PodSecurity restricted:latest)
- Removed shared emptyDir /etc mount (no longer needed)
- Rely on fsGroup:1000 + runAsUser:1000 for volume ownership and container UID
- Added runAsNonRoot: true to podSecurityContext and both containers for policy compliance
Pod will now start, webui runs as UID 1000 == WANTED_UID, init.bash skips chown/sudo.
2026-05-07 13:14:01 +00:00
sirius0xdev
bbc662cd85
plz
2026-05-07 02:22:18 +00:00
sirius0xdev
bdcaf9f8f6
fix webui
2026-05-07 02:16:48 +00:00
sirius0xdev
d87f5963d3
webui fix
2026-05-07 01:43:57 +00:00
sirius0xdev
d187eae375
fix priv escalation
2026-05-07 01:32:24 +00:00
sirius0xdev
c84ef732f8
fix hermes webui
2026-05-07 01:28:39 +00:00
Hermes Agent
a893406374
fix(hermes-webui): add init container to create webui user entry
2026-05-06 21:21:11 +00:00
sirius0xdev
f886934963
Update deployment.yaml
2026-05-06 17:11:07 -04:00
sirius0xdev
adce52ad8b
Update deployment.yaml
2026-05-06 17:05:07 -04:00
sirius0xdev
4b81e2310f
Update deployment.yaml
2026-05-06 17:03:42 -04:00
sirius0xdev
e79afb4c7b
Update deployment.yaml
2026-05-06 16:56:47 -04:00
sirius0xdev
9500d6d248
Update deployment.yaml
2026-05-06 16:51:45 -04:00
sirius0xdev
2ed7ac55dc
Update deployment.yaml
2026-05-06 16:43:30 -04:00
sirius0xdev
235a42cb2b
Update deployment.yaml
2026-05-06 16:26:34 -04:00
sirius0xdev
1ccfb45263
Update deployment.yaml
2026-05-06 16:15:06 -04:00
Hermes Agent
2ff889d297
fix(hermes-webui): fsGroup=1000 + PodSecurity compliance for PVC access
2026-05-06 19:56:22 +00:00
Hermes Agent
84b3d2436e
feat: replace Open WebUI with native Hermes WebUI
...
Swap the generic Open WebUI frontend for the purpose-built
hermes-webui (nesquena) with full CLI parity:
- 3-panel layout: sessions, chat, workspace file browser
- Native session, cron, skills, memory, profile management
- Themes (dark/light/slate/solarized/monokai/nord/oled)
- Mobile responsive
- Sidecar container sharing the hermes-agent PVC
- Exposed via Tailscale on port 8787 (plain HTTP)
Access: http://hermes-webui.tail14a963.ts.net:8787
2026-05-06 19:33:38 +00:00
Hermes Agent
214133d062
feat: add Open WebUI with Tailscale exposure
...
- Enable Hermes API Server (port 8642) in gateway deployment
- Add Open WebUI deployment connected to Hermes API Server
- Expose Open WebUI via Tailscale using Service annotations
- Create ClusterIP Service for Hermes Agent API Server
- All deployments follow PodSecurity restricted policy
2026-05-06 15:36:27 +00:00
Hermes Agent
8b6edd3c6a
fix: copy ConfigMap to PVC on startup so Hermes config is writable
2026-05-06 03:07:30 +00:00
sirius0xdev
bb31aaceeb
Update deployment.yaml
2026-05-05 22:46:15 -04:00
sirius0xdev
ce26d0aaee
change pvc name
2026-05-06 01:47:59 +00:00
sirius0xdev
862c8c0f19
Update deployment.yaml
2026-04-29 12:59:21 -04:00
sirius0xdev
37a4179f96
Update deployment.yaml
2026-04-29 09:22:34 -04:00
sirius0xdev
9e5eea2cd1
feat(hermes-agent): add hermes-config ConfigMap and mount to deployment
...
- hermes-config::ConfigMap with current /opt/data/config.yaml (models incl. vLLM, agent/tool settings)
- deployment.yaml: volume + subPath mountPath=/opt/data/config.yaml (overrides PVC)
- kustomization.yaml: include configmap.yaml
Standardizes Hermes config via K8s ConfigMap for easier management.
2026-04-29 04:45:18 +00:00
sirius0xdev
bb7dcd5651
fix node selector for 6000pro
2026-04-28 23:16:51 +00:00
sirius0xdev
b4ffa0c238
add wellness probes to vllm and activate keda
2026-04-25 23:23:48 +00:00
sirius0xdev
ed165b9cc4
add xai to hermes
2026-04-25 21:26:54 +00:00
sirius0xdev
33570bd137
fix typo
2026-04-25 21:11:57 +00:00
sirius0xdev
dc1afb1472
activate hermes agent
2026-04-25 21:02:14 +00:00
sirius0xdev
3ff531dc6e
Update deployment.yaml
2026-04-25 11:25:23 -04:00
sirius0xdev
956ae90794
change model
2026-04-21 02:35:17 +00:00
Sirius Claw
ca2f14f25b
Add Hermes Agent deployment to customer1 namespace
2026-04-20 19:20:15 +00:00
