sirius0xdev
4960af6b88
fix deploy
2026-05-08 01:34:48 +00:00
sirius0xdev
1bbed97053
fix deployment
2026-05-08 01:28:33 +00:00
sirius0xdev
43b2c8919c
fix deployment
2026-05-08 01:15:00 +00:00
sirius0xdev
2a9a7e3f3f
fix deployment
2026-05-08 01:04:29 +00:00
sirius0xdev
8cbc00538e
fix args
2026-05-08 00:52:57 +00:00
sirius0xdev
47f061ad19
update hermes deployment
2026-05-08 00:37:53 +00:00
sirius0xdev
3e2b9e0541
almost
2026-05-08 00:19:50 +00:00
sirius0xdev
9a92097ebf
fix
2026-05-08 00:16:27 +00:00
sirius0xdev
48a1d59cd1
fix typos
2026-05-08 00:13:03 +00:00
sirius0xdev
f1418d30a4
test fix hermes webui and hermes
2026-05-08 00:07:16 +00:00
sirius0xdev
f79a0b648c
webui dial in
2026-05-07 23:21:56 +00:00
sirius0xdev
24f94ae154
Update deployment.yaml
2026-05-07 18:18:49 -04:00
sirius0xdev
9daa8a3d9c
Update deployment.yaml
2026-05-07 17:21:08 -04:00
sirius0xdev
11fb4b2361
Update deployment.yaml
2026-05-07 16:53:29 -04:00
sirius0xdev
cc78c3dbec
Update deployment.yaml
2026-05-07 16:26:17 -04:00
sirius0xdev
99f9f36670
Update deployment.yaml
2026-05-07 16:04:40 -04:00
sirius0xdev
bc27146148
Update deployment.yaml
2026-05-07 16:03:21 -04:00
sirius0xdev
d651352c6a
Update deployment.yaml
2026-05-07 15:57:24 -04:00
sirius0xdev
a829473d1c
Update deployment.yaml
2026-05-07 15:45:03 -04:00
sirius0xdev
76e1fa10a7
Update deployment.yaml
2026-05-07 15:31:20 -04:00
sirius0xdev
dd23d800b0
Update deployment.yaml
2026-05-07 15:29:13 -04:00
sirius0xdev
84eb6c900a
Update deployment.yaml
2026-05-07 15:18:30 -04:00
sirius0xdev
547bb4d9a8
Update deployment.yaml
2026-05-07 15:07:30 -04:00
sirius0xdev
9fec3dafaa
Update deployment.yaml
2026-05-07 14:42:10 -04:00
sirius0xdev
5f9112fd31
Update deployment.yaml
2026-05-07 14:10:57 -04:00
sirius0xdev
f25820a983
Update rays-deployment.yaml
2026-05-07 14:05:41 -04:00
sirius0xdev
9abcd15012
Update rays-deployment.yaml
2026-05-07 14:04:08 -04:00
sirius0xdev
3e9f23f4ca
Update deployment.yaml
2026-05-07 13:55:01 -04:00
sirius0xdev
f603a4cb8b
Update rays-deployment.yaml
2026-05-07 13:47:39 -04:00
sirius0xdev
a169c809e6
Update deployment.yaml
2026-05-07 13:45:44 -04:00
sirius0xdev
beb3f31f7f
Update deployment.yaml
2026-05-07 13:37:52 -04:00
sirius0xdev
1576d158ae
Update deployment.yaml
2026-05-07 13:29:15 -04:00
sirius0xdev
da7957251f
Update deployment.yaml
2026-05-07 13:23:15 -04:00
sirius0xdev
07bb6c0059
Update deployment.yaml
2026-05-07 13:15:25 -04:00
sirius0xdev
b281e7a4ad
Update deployment.yaml
2026-05-07 13:09:48 -04:00
sirius0xdev
96e68cfa0e
Update deployment.yaml
2026-05-07 13:07:50 -04:00
sirius0xdev
4e403e757d
Update deployment.yaml
2026-05-07 13:00:37 -04:00
sirius0xdev
507189b401
Update deployment.yaml
2026-05-07 12:52:36 -04:00
sirius0xdev
e67a709a53
Update deployment.yaml
2026-05-07 12:43:55 -04:00
sirius0xdev
d19174893a
Update deployment.yaml
2026-05-07 12:38:15 -04:00
sirius0xdev
6dd3d5be0e
Update deployment.yaml
2026-05-07 12:32:35 -04:00
sirius0xdev
d5affa58b9
Update deployment.yaml
2026-05-07 12:26:26 -04:00
sirius0xdev
f7d77a70d5
Update deployment.yaml
2026-05-07 12:14:57 -04:00
sirius0xdev
e012b19ddf
Update deployment.yaml
2026-05-07 12:08:08 -04:00
sirius0xdev
8c8b2bc597
Merge pull request #109 from sirius0xdev/fix/hermes-webui-init-chown
...
Fix hermes-webui perms crash: root initContainer chown PVC to 1000:1000
2026-05-07 10:57:01 -04:00
Hermes Agent
d2f011956e
fix: hermes-webui container start failure due to PodSecurity restricted policy
...
- Updated pod.spec.securityContext and all container/initContainer securityContext to be fully compliant with restricted:latest (runAsNonRoot: true, allowPrivilegeEscalation: false, runAsUser: 1000, capabilities drop ALL, seccomp RuntimeDefault, fsGroup)
- Changed initContainer from root chown to non-root mkdir/chmod relying on fsGroup (avoids PSA violation)
- Updated default model to grok-4.20-0309-reasoning (per xAI switch note)
- Added automountServiceAccountToken: false and imagePullPolicy for best practices (matches openclaw deployment pattern)
- hermes-webui now runs as non-root with WANTED_UID matching
This should resolve the container not starting. Leave PR open for review before merge.
2026-05-07 14:52:13 +00:00
Hermes Agent
560f5b76cf
fix(hermes-webui): webui runAsUser: 0 to trigger image entrypoint chown/gosu
...
- WANTED_UID=1000 detects root → chowns volumes + gosu 1000 app (runtime non-root)
- Fixes whoami (root phase OK) + double-perm fix w/ init
- PodSecurity OK (per-container fields; pod no runAsNonRoot)
2026-05-07 14:36:29 +00:00
Hermes Agent
8f52cb1c25
fix(hermes-webui): add initContainer root chown for PVC uid perms
...
- Removes pod runAsNonRoot/runAsUser to allow init runAsUser: 0
- chowns PVC to 1000:1000 + g+rwX (fixes legacy root-owned files)
- webui can now mkdir/write state dir
- whoami log non-fatal; runtime non-root
2026-05-07 14:24:25 +00:00
sirius0xdev
556bedfee0
Merge pull request #108 from sirius0xdev/fix/hermes-webui-runAsUser
...
Fix hermes-webui crash: hermes-agent main container non-root (UID/GID 1000)
2026-05-07 10:19:11 -04:00
Hermes Agent
dfe32018b7
fix(hermes-webui): hermes-agent main container non-root (UID/GID 1000)
...
- Aligns with webui sidecar on shared hermes-data PVC (/opt/data == /home/hermeswebui/.hermes)
- Previously root:root files blocked webui writes (whoami non-fatal)
- Pod securityContext: runAsNonRoot: true + runAsUser: 1000 for restricted:latest compliance
- fsGroup:1000 ensures volume g+rw
2026-05-07 14:18:34 +00:00
