gcloud-lab/apps/base
Hermes Agent 22964a16a8 fix(hermes-webui): remove root initContainer and custom /etc mount to fix read-only fs + sudo error
- Removed initContainer running as root (violates PodSecurity restricted:latest)
- Removed shared emptyDir /etc mount (no longer needed)
- Rely on fsGroup:1000 + runAsUser:1000 for volume ownership and container UID
- Added runAsNonRoot: true to podSecurityContext and both containers for policy compliance

Pod will now start, webui runs as UID 1000 == WANTED_UID, init.bash skips chown/sudo.
2026-05-07 13:14:01 +00:00
..
customer1 fix(hermes-webui): remove root initContainer and custom /etc mount to fix read-only fs + sudo error 2026-05-07 13:14:01 +00:00
monitoring/dashboards add dashboards to namespace 2026-05-04 20:38:22 +00:00