gcloud-lab/apps/base/customer1/hermes-agent
Hermes Agent 22964a16a8 fix(hermes-webui): remove root initContainer and custom /etc mount to fix read-only fs + sudo error
- Removed initContainer running as root (violates PodSecurity restricted:latest)
- Removed shared emptyDir /etc mount (no longer needed)
- Rely on fsGroup:1000 + runAsUser:1000 for volume ownership and container UID
- Added runAsNonRoot: true to podSecurityContext and both containers for policy compliance

Pod will now start, webui runs as UID 1000 == WANTED_UID, init.bash skips chown/sudo.
2026-05-07 13:14:01 +00:00
..
api-server-configmap.yaml feat: add Open WebUI with Tailscale exposure 2026-05-06 15:36:27 +00:00
configmap.yaml fix(hermes-agent): add type: openai to vLLM providers for model listing 2026-04-29 16:18:35 +00:00
deployment.yaml fix(hermes-webui): remove root initContainer and custom /etc mount to fix read-only fs + sudo error 2026-05-07 13:14:01 +00:00
hermes-secret.yaml activate hermes agent 2026-04-25 21:02:14 +00:00
hermes-service.yaml feat: add Open WebUI with Tailscale exposure 2026-05-06 15:36:27 +00:00
hermes-webui-service.yaml feat: replace Open WebUI with native Hermes WebUI 2026-05-06 19:33:38 +00:00
kustomization.yaml feat: replace Open WebUI with native Hermes WebUI 2026-05-06 19:33:38 +00:00
rays-deployment.yaml fix: copy ConfigMap to PVC on startup so Hermes config is writable 2026-05-06 03:07:30 +00:00
rays-hermes-secret.yaml fix node selector for 6000pro 2026-04-28 23:16:51 +00:00