- WANTED_UID=1000 detects root → chowns volumes + gosu 1000 app (runtime non-root) - Fixes whoami (root phase OK) + double-perm fix w/ init - PodSecurity OK (per-container fields; pod no runAsNonRoot) |
||
|---|---|---|
| .. | ||
| api-server-configmap.yaml | ||
| configmap.yaml | ||
| deployment.yaml | ||
| hermes-secret.yaml | ||
| hermes-service.yaml | ||
| hermes-webui-service.yaml | ||
| kustomization.yaml | ||
| rays-deployment.yaml | ||
| rays-hermes-secret.yaml | ||