gcloud-lab/apps/base/customer1
Hermes Agent 22964a16a8 fix(hermes-webui): remove root initContainer and custom /etc mount to fix read-only fs + sudo error
- Removed initContainer running as root (violates PodSecurity restricted:latest)
- Removed shared emptyDir /etc mount (no longer needed)
- Rely on fsGroup:1000 + runAsUser:1000 for volume ownership and container UID
- Added runAsNonRoot: true to podSecurityContext and both containers for policy compliance

Pod will now start, webui runs as UID 1000 == WANTED_UID, init.bash skips chown/sudo.
2026-05-07 13:14:01 +00:00
..
db clean up and add routes to paas site 2026-04-28 03:31:52 +00:00
hermes-agent fix(hermes-webui): remove root initContainer and custom /etc mount to fix read-only fs + sudo error 2026-05-07 13:14:01 +00:00
hermes-db fix(hermes-db): reencrypt with correct SOPS recipient key 2026-05-02 22:14:09 +00:00
n8n clean up and add routes to paas site 2026-04-28 03:31:52 +00:00
news_bot Update kustomization.yaml 2026-04-25 09:59:24 -04:00
openclaw clean up and add routes to paas site 2026-04-28 03:31:52 +00:00
paaas-landing fix deoloyment 2026-05-05 00:51:36 +00:00
trade-dashboard clean up tsproxies 2026-05-04 14:55:37 +00:00
uncensored-bot clean up 2026-04-21 23:01:06 +00:00
http-route.yaml set up customer1 kustomization 2026-01-06 03:30:41 +00:00
kustomization.yaml fix kustomization 2026-04-28 03:40:54 +00:00
namespace.yaml remove pod security from namespace customer1 2026-02-09 22:44:07 +00:00
service.yaml set up customer1 kustomization 2026-01-06 03:30:41 +00:00