- Aligns with webui sidecar on shared hermes-data PVC (/opt/data == /home/hermeswebui/.hermes) - Previously root:root files blocked webui writes (whoami non-fatal) - Pod securityContext: runAsNonRoot: true + runAsUser: 1000 for restricted:latest compliance - fsGroup:1000 ensures volume g+rw |
||
|---|---|---|
| .. | ||
| base | ||
| staging/customer1 | ||
| vwap-monitor | ||