- Aligns with webui sidecar on shared hermes-data PVC (/opt/data == /home/hermeswebui/.hermes) - Previously root:root files blocked webui writes (whoami non-fatal) - Pod securityContext: runAsNonRoot: true + runAsUser: 1000 for restricted:latest compliance - fsGroup:1000 ensures volume g+rw |
||
|---|---|---|
| .. | ||
| customer1 | ||
| monitoring/dashboards | ||