- Aligns with webui sidecar on shared hermes-data PVC (/opt/data == /home/hermeswebui/.hermes) - Previously root:root files blocked webui writes (whoami non-fatal) - Pod securityContext: runAsNonRoot: true + runAsUser: 1000 for restricted:latest compliance - fsGroup:1000 ensures volume g+rw |
||
|---|---|---|
| .. | ||
| api-server-configmap.yaml | ||
| configmap.yaml | ||
| deployment.yaml | ||
| hermes-secret.yaml | ||
| hermes-service.yaml | ||
| hermes-webui-service.yaml | ||
| kustomization.yaml | ||
| rays-deployment.yaml | ||
| rays-hermes-secret.yaml | ||