gcloud-lab/apps
Hermes Agent 22964a16a8 fix(hermes-webui): remove root initContainer and custom /etc mount to fix read-only fs + sudo error
- Removed initContainer running as root (violates PodSecurity restricted:latest)
- Removed shared emptyDir /etc mount (no longer needed)
- Rely on fsGroup:1000 + runAsUser:1000 for volume ownership and container UID
- Added runAsNonRoot: true to podSecurityContext and both containers for policy compliance

Pod will now start, webui runs as UID 1000 == WANTED_UID, init.bash skips chown/sudo.
2026-05-07 13:14:01 +00:00
..
base fix(hermes-webui): remove root initContainer and custom /etc mount to fix read-only fs + sudo error 2026-05-07 13:14:01 +00:00
staging/customer1 feat: add trade dashboard service (FastAPI + Tailscale) 2026-05-02 21:47:27 +00:00
vwap-monitor feat: add Prometheus, Grafana, and Tailscale monitoring stack 2026-04-26 02:31:53 +00:00