hermes helm

No introduction found. Create it?

Install

Install with:

helm repo add hermes oci://ghcr.io/bjw-s-labs/charts/
helm install hermes hermes/hermes -f values.yaml

Examples

See examples from other people.

Top Repositories (2 out of 14)

NameRepoStarsVersionTimestamp
hermesjoryirving/home-ops2235.1.015 hours ago
hermesmirceanton/home-ops1135.1.07 days ago

Values

See the most popular values for this chart:

KeyTypes
controllers.hermes.annotations."reloader.stakater.com/auto" (13)
true
string
controllers.hermes.containers.app.args[] (11)
- gateway
- run
string
controllers.hermes.containers.app.env.HERMES_HOME (11)
/opt/data
string
controllers.hermes.containers.app.env.HOME (11)
/opt/data
string
controllers.hermes.containers.app.env.API_SERVER_ENABLED (9)
true
string, boolean
controllers.hermes.containers.app.env.API_SERVER_HOST (8)
0.0.0.0
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD (8)
1
string
controllers.hermes.containers.app.env.PATH (8)
/opt/hermes/.venv/bin:/opt/data/.local/bin:/opt/data/.local/go/bin:/opt/data/.local/homebrew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
string
controllers.hermes.containers.app.env.TZ (8)
${TZ}
string
controllers.hermes.containers.app.env.GOPATH (7)
/opt/data/go
string
controllers.hermes.containers.app.env.HOMEBREW_CELLAR (7)
/opt/data/.local/homebrew/Cellar
string
controllers.hermes.containers.app.env.HOMEBREW_PREFIX (7)
/opt/data/.local/homebrew
string
controllers.hermes.containers.app.env.PIP_BREAK_SYSTEM_PACKAGES (7)
1
string
controllers.hermes.containers.app.env.SEARXNG_URL (7)
http://searxng.selfhosted.svc.cluster.local:8080
string
controllers.hermes.containers.app.env.HOMEBREW_REPOSITORY (6)
/opt/data/.local/homebrew
string
controllers.hermes.containers.app.env.TERM (6)
xterm-256color
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_ISSUER (5)
https://id.dcunha.io
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_PUBLIC_URL (5)
https://hermes.dcunha.io
string
controllers.hermes.containers.app.env.MEMINI_NAMESPACE (5)
hermes
string
controllers.hermes.containers.app.env.MEMINI_URL (5)
http://memini.ai.svc.cluster.local:8080
string
controllers.hermes.containers.app.env.API_SERVER_PORT (4)
8642
number
controllers.hermes.containers.app.env.HERMES_GID (4)
1000
string
controllers.hermes.containers.app.env.HERMES_UID (4)
1000
string
controllers.hermes.containers.app.env.HERMES_CRON_TIMEOUT (3)
0
string, number
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_ID.valueFrom.secretKeyRef.key (1)
client-id
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_ID.valueFrom.secretKeyRef.name (1)
kanidm-hermes-oidc
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_ID (3)
hermes
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_SECRET.valueFrom.secretKeyRef.key (3)
client-secret
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_SECRET.valueFrom.secretKeyRef.name (3)
hermes-config
string
controllers.hermes.containers.app.env.LITELLM_API_KEY.valueFrom.secretKeyRef.key (3)
LITELLM_API_KEY
string
controllers.hermes.containers.app.env.LITELLM_API_KEY.valueFrom.secretKeyRef.name (3)
hermes-config
string
controllers.hermes.containers.app.env.MEMINI_API_KEY.valueFrom.secretKeyRef.key (3)
MEMINI_API_KEY
string
controllers.hermes.containers.app.env.MEMINI_API_KEY.valueFrom.secretKeyRef.name (3)
hermes-config
string
controllers.hermes.containers.app.env.SUMMARY_LLM_API_KEY.valueFrom.secretKeyRef.key (3)
LITELLM_API_KEY
string
controllers.hermes.containers.app.env.SUMMARY_LLM_API_KEY.valueFrom.secretKeyRef.name (3)
hermes-config
string
controllers.hermes.containers.app.env.SUMMARY_LLM_MODEL (3)
opencode-go/qwen3.6-plus
string
controllers.hermes.containers.app.env.SUMMARY_LLM_URL (3)
http://litellm.ai:4000/v1
string
controllers.hermes.containers.app.env.TERMINAL_MAX_FOREGROUND_TIMEOUT (3)
1800
string
controllers.hermes.containers.app.env.AGENT_BROWSER_ARGS (2)
--no-sandbox,--disable-dev-shm-usage
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_TUI (2)
1
string
controllers.hermes.containers.app.env.HOMELAB_GH_TOKEN.valueFrom.secretKeyRef.key (2)
GH_TOKEN
string
controllers.hermes.containers.app.env.HOMELAB_GH_TOKEN.valueFrom.secretKeyRef.name (2)
hermes-config
string
controllers.hermes.containers.app.env.AGENTMEMORY_URL (1)
http://agentmemory.ai.svc.cluster.local:3111
string
controllers.hermes.containers.app.env.API_SERVER_CORS_ORIGINS (1)
http://localhost:3000,http://127.0.0.1:3000
string
controllers.hermes.containers.app.env.API_SERVER_KEY.valueFrom.secretKeyRef.key (1)
API_SERVER_KEY
string
controllers.hermes.containers.app.env.API_SERVER_KEY.valueFrom.secretKeyRef.name (1)
hermes-config
string
controllers.hermes.containers.app.env.API_SERVER_KEY (1)
CFE1B842-AEF8-4704-A51D-1E885A5C7967
string
controllers.hermes.containers.app.env.BLUEBUBBLES_REQUIRE_MENTION (1)
true
string
controllers.hermes.containers.app.env.BLUEBUBBLES_SERVER_URL (1)
http://bluebubbles.internal:1234
string
controllers.hermes.containers.app.env.BLUEBUBBLES_WEBHOOK_HOST (1)
0.0.0.0
string
controllers.hermes.containers.app.env.BLUEBUBBLES_WEBHOOK_PATH (1)
/bluebubbles-webhook
string
controllers.hermes.containers.app.env.BLUEBUBBLES_WEBHOOK_PORT (1)
8645
string
controllers.hermes.containers.app.env.CODEX_HOME (1)
/opt/data/.codex
string
controllers.hermes.containers.app.env.DISCORD_WEBHOOK.valueFrom.secretKeyRef.key (1)
DISCORD_WEBHOOK
string
controllers.hermes.containers.app.env.DISCORD_WEBHOOK.valueFrom.secretKeyRef.name (1)
hermes-config
string
controllers.hermes.containers.app.env.DOCKER_CERT_PATH (1)
/certs/client
string
controllers.hermes.containers.app.env.DOCKER_HOST (1)
tcp://localhost:2376
string
controllers.hermes.containers.app.env.DOCKER_TLS_VERIFY (1)
1
string
controllers.hermes.containers.app.env.FORGEJO_PAT.valueFrom.secretKeyRef.key (1)
FORGEJO_PAT
string
controllers.hermes.containers.app.env.FORGEJO_PAT.valueFrom.secretKeyRef.name (1)
hermes-config
string
controllers.hermes.containers.app.env.GATEWAY_ALLOW_ALL_USERS (1)
false
boolean
controllers.hermes.containers.app.env.GATEWAY_ALLOWED_USERS (1)
exikle
string
controllers.hermes.containers.app.env.GH_CONFIG_DIR (1)
/opt/data/.gh
string
controllers.hermes.containers.app.env.GIT_AUTHOR_EMAIL (1)
585808+tscibilia@users.noreply.github.com
string
controllers.hermes.containers.app.env.GIT_AUTHOR_NAME (1)
hermes
string
controllers.hermes.containers.app.env.GIT_COMMITTER_EMAIL (1)
585808+tscibilia@users.noreply.github.com
string
controllers.hermes.containers.app.env.GIT_COMMITTER_NAME (1)
hermes
string
controllers.hermes.containers.app.env.GIT_CONFIG_COUNT (1)
5
string
controllers.hermes.containers.app.env.GIT_CONFIG_KEY_0 (1)
gpg.format
string
controllers.hermes.containers.app.env.GIT_CONFIG_KEY_1 (1)
user.signingkey
string
controllers.hermes.containers.app.env.GIT_CONFIG_KEY_2 (1)
commit.gpgsign
string
controllers.hermes.containers.app.env.GIT_CONFIG_KEY_3 (1)
tag.gpgsign
string
controllers.hermes.containers.app.env.GIT_CONFIG_KEY_4 (1)
url.git@github.com:.insteadOf
string
controllers.hermes.containers.app.env.GIT_CONFIG_VALUE_0 (1)
ssh
string
controllers.hermes.containers.app.env.GIT_CONFIG_VALUE_1 (1)
/opt/data/.ssh/hermes_signing
string
controllers.hermes.containers.app.env.GIT_CONFIG_VALUE_2 (1)
true
string
controllers.hermes.containers.app.env.GIT_CONFIG_VALUE_3 (1)
true
string
controllers.hermes.containers.app.env.GIT_CONFIG_VALUE_4 (1)
https://github.com/
string
controllers.hermes.containers.app.env.GIT_SSH_COMMAND (1)
ssh -i /opt/data/.ssh/hermes_signing -o IdentitiesOnly=yes -o StrictHostKeyChecking=accept-new
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_INSECURE (1)
1
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_REDIRECT_URI (1)
https://hermes.rnatr.com/api/auth/oidc/callback
string
controllers.hermes.containers.app.env.HOMEBREW_NO_ANALYTICS (1)
1
string
controllers.hermes.containers.app.env.HOMEBREW_NO_AUTO_UPDATE (1)
1
string
controllers.hermes.containers.app.env.HONCHO_WORKSPACE_ID (1)
hermes
string
controllers.hermes.containers.app.env.LM_BASE_URL (1)
http://10.50.0.81:1234/v1
string
controllers.hermes.containers.app.env.MATRIX_ALLOWED_USERS (1)
@andrew:goyangi.io
string
controllers.hermes.containers.app.env.MATRIX_E2EE_MODE (1)
required
string
controllers.hermes.containers.app.env.MATRIX_HOMESERVER (1)
https://matrix.goyangi.io
string
controllers.hermes.containers.app.env.MATRIX_USER_ID (1)
@hawow:goyangi.io
string
controllers.hermes.containers.app.env.MEMINI_BASE_URL (1)
http://memini.ai.svc.cluster.local:8080
string
controllers.hermes.containers.app.env.MEMINI_HOME (1)
personal/jan
string
controllers.hermes.containers.app.env.OPENCODE_GO_BASE_URL (1)
https://opencode.ai/zen/go/v1
string
controllers.hermes.containers.app.env.PYTHONPATH (1)
/opt/hermes/.venv/lib/python3.13/site-packages/
string
controllers.hermes.containers.app.image.repository (11)
nousresearch/hermes-agent
string
controllers.hermes.containers.app.image.tag (11)
v2026.8.27@sha256:e0df6adebddf29b91112aefc999d4aaf6846c9eb544faca5672a16a13590ff79
string
controllers.hermes.containers.app.resources.limits.memory (11)
2Gi
string
controllers.hermes.containers.app.resources.limits.cpu (2)
4
number
controllers.hermes.containers.app.resources.requests.cpu (11)
500m
string
controllers.hermes.containers.app.resources.requests.memory (10)
1Gi
string
controllers.hermes.containers.app.envFrom[].secretRef.name (9)
hermes-secret
string
controllers.hermes.containers.app.securityContext.allowPrivilegeEscalation (8)
false
boolean
controllers.hermes.containers.app.securityContext.readOnlyRootFilesystem (8)
false
boolean
controllers.hermes.containers.app.securityContext.capabilities.drop[] (6)
- ALL
string
controllers.hermes.containers.app.securityContext.capabilities.add[] (5)
- CHOWN
- DAC_OVERRIDE
- FOWNER
- FSETID
- SETGID
- SETUID
string
controllers.hermes.containers.app.securityContext.runAsGroup (5)
0
number
controllers.hermes.containers.app.securityContext.runAsUser (5)
0
number
controllers.hermes.containers.app.securityContext.runAsNonRoot (3)
false
boolean
controllers.hermes.containers.app.probes.liveness.enabled (6)
true
boolean
controllers.hermes.containers.app.probes.liveness.custom (5)
true
boolean
controllers.hermes.containers.app.probes.liveness.spec.periodSeconds (5)
30
number
controllers.hermes.containers.app.probes.liveness.spec.failureThreshold (4)
6
number
controllers.hermes.containers.app.probes.liveness.spec.httpGet.path (4)
/health
string
controllers.hermes.containers.app.probes.liveness.spec.httpGet.port (4)
8642
number
controllers.hermes.containers.app.probes.liveness.spec.timeoutSeconds (4)
5
number
controllers.hermes.containers.app.probes.liveness.spec.initialDelaySeconds (3)
30
number
controllers.hermes.containers.app.probes.liveness.spec.tcpSocket.port (1)
8642
number
controllers.hermes.containers.app.probes.readiness.enabled (6)
true
boolean
controllers.hermes.containers.app.probes.readiness.custom (5)
true
boolean
controllers.hermes.containers.app.probes.readiness.spec.periodSeconds (5)
10
number
controllers.hermes.containers.app.probes.readiness.spec.failureThreshold (4)
3
number
controllers.hermes.containers.app.probes.readiness.spec.httpGet.path (4)
/health
string
controllers.hermes.containers.app.probes.readiness.spec.httpGet.port (4)
8642
number
controllers.hermes.containers.app.probes.readiness.spec.timeoutSeconds (4)
5
number
controllers.hermes.containers.app.probes.readiness.spec.initialDelaySeconds (3)
5
number
controllers.hermes.containers.app.probes.readiness.spec.tcpSocket.port (1)
8642
number
controllers.hermes.containers.app.probes.startup.enabled (6)
false
boolean
controllers.hermes.containers.app.probes.startup.custom (2)
true
boolean
controllers.hermes.containers.app.probes.startup.spec.failureThreshold (2)
60
number
controllers.hermes.containers.app.probes.startup.spec.httpGet.path (2)
/health
string
controllers.hermes.containers.app.probes.startup.spec.httpGet.port (2)
8642
number
controllers.hermes.containers.app.probes.startup.spec.periodSeconds (2)
10
number
controllers.hermes.containers.app.probes.startup.spec.timeoutSeconds (1)
5
number
controllers.hermes.containers.app.ports[].containerPort (3)
8642
9119
number
controllers.hermes.containers.app.ports[].name (3)
http
dashboard
string
controllers.hermes.containers.app.ports[].protocol (3)
TCP
TCP
string
controllers.hermes.containers.app.command[] (1)
- /opt/hermes/bin/hermes
string
controllers.hermes.containers.codeserver.args[] (5)
- --auth
- none
- --user-data-dir
- /opt/data/.vscode
- --extensions-dir
- /opt/data/.vscode
- --port
- "12321"
- /opt/data
string
controllers.hermes.containers.codeserver.image.repository (5)
ghcr.io/coder/code-server
string
controllers.hermes.containers.codeserver.image.tag (5)
4.135.0@sha256:ccd326184d71efc5ebb94155eda7bb30153902342a35dbc8525450d81aa55012
string
controllers.hermes.containers.codeserver.resources.limits.memory (5)
1Gi
string
controllers.hermes.containers.codeserver.resources.requests.cpu (5)
10m
string
controllers.hermes.containers.codeserver.securityContext.allowPrivilegeEscalation (4)
false
boolean
controllers.hermes.containers.codeserver.securityContext.capabilities.drop[] (4)
- ALL
string
controllers.hermes.containers.codeserver.env.GH_TOKEN.valueFrom.secretKeyRef.key (2)
GH_TOKEN
string
controllers.hermes.containers.codeserver.env.GH_TOKEN.valueFrom.secretKeyRef.name (2)
hermes-config
string
controllers.hermes.containers.codeserver.env.TZ (2)
Europe/Paris
string
controllers.hermes.containers.codeserver.env.DISCORD_WEBHOOK.valueFrom.secretKeyRef.key (1)
DISCORD_WEBHOOK
string
controllers.hermes.containers.codeserver.env.DISCORD_WEBHOOK.valueFrom.secretKeyRef.name (1)
hermes-config
string
controllers.hermes.containers.codeserver.env.GITHUB_TOKEN.valueFrom.secretKeyRef.key (1)
GITHUB_TOKEN
string
controllers.hermes.containers.codeserver.env.GITHUB_TOKEN.valueFrom.secretKeyRef.name (1)
hermes-secret
string
controllers.hermes.containers.codeserver.ports[].containerPort (1)
12321
number
controllers.hermes.containers.codeserver.ports[].name (1)
codeserver
string
controllers.hermes.containers.codeserver.ports[].protocol (1)
TCP
string
controllers.hermes.containers.dashboard.args[] (3)
- dashboard
- --host
- "0.0.0.0"
string
controllers.hermes.containers.dashboard.env.GATEWAY_HEALTH_URL (3)
http://localhost:8642
string
controllers.hermes.containers.dashboard.env.TZ (2)
America/Edmonton
string
controllers.hermes.containers.dashboard.env.HERMES_DASHBOARD_OIDC_SCOPES (1)
openid profile email offline_access
string
controllers.hermes.containers.dashboard.env.HERMES_DASHBOARD_PUBLIC_URL (1)
https://${APP}.${SECRET_DOMAIN}
string
controllers.hermes.containers.dashboard.image.repository (3)
nousresearch/hermes-agent
string
controllers.hermes.containers.dashboard.image.tag (3)
v2026.8.27@sha256:e0df6adebddf29b91112aefc999d4aaf6846c9eb544faca5672a16a13590ff79
string
controllers.hermes.containers.dashboard.resources.limits.memory (3)
1Gi
string
controllers.hermes.containers.dashboard.resources.requests.cpu (2)
500m
string
controllers.hermes.containers.dashboard.resources.requests.memory (1)
256Mi
string
controllers.hermes.containers.dashboard.envFrom[].secretRef.name (2)
hermes-dashboard
string
controllers.hermes.containers.dashboard.ports[].containerPort (2)
9119
number
controllers.hermes.containers.dashboard.ports[].name (2)
http
string
controllers.hermes.containers.dashboard.ports[].protocol (2)
TCP
string
controllers.hermes.containers.dashboard.command[] (1)
- /opt/hermes/bin/hermes
string
controllers.hermes.containers.dashboard.securityContext.runAsGroup (1)
10000
number
controllers.hermes.containers.dashboard.securityContext.runAsUser (1)
10000
number
controllers.hermes.containers.hermes.args[] (2)
- gateway
- run
string
controllers.hermes.containers.hermes.env.HERMES_DASHBOARD (2)
1
string
controllers.hermes.containers.hermes.env.HERMES_DASHBOARD_HOST (2)
0.0.0.0
string
controllers.hermes.containers.hermes.env.HERMES_DASHBOARD_OIDC_ISSUER (2)
https://idm.whoverse.nexus/oauth2/openid/hermes
string
controllers.hermes.containers.hermes.env.HERMES_DASHBOARD_PUBLIC_URL (2)
https://hermes.whoverse.dev
string
controllers.hermes.containers.hermes.env.TZ (2)
America/Chicago
string
controllers.hermes.containers.hermes.env.API_SERVER_ENABLED (1)
false
string
controllers.hermes.containers.hermes.env.HERMES_CONFIG (1)
/etc/hermes/config.yaml
string
controllers.hermes.containers.hermes.env.HERMES_DASHBOARD_OIDC_CLIENT_ID.valueFrom.secretKeyRef.key (1)
OIDC_CLIENT_ID
string
controllers.hermes.containers.hermes.env.HERMES_DASHBOARD_OIDC_CLIENT_ID.valueFrom.secretKeyRef.name (1)
hermes-oidc-credentials
string
controllers.hermes.containers.hermes.env.HERMES_DASHBOARD_OIDC_CLIENT_ID (1)
hermes
string
controllers.hermes.containers.hermes.env.HERMES_DASHBOARD_OIDC_CLIENT_SECRET.valueFrom.secretKeyRef.key (1)
OIDC_CLIENT_SECRET
string
controllers.hermes.containers.hermes.env.HERMES_DASHBOARD_OIDC_CLIENT_SECRET.valueFrom.secretKeyRef.name (1)
hermes-oidc-credentials
string
controllers.hermes.containers.hermes.env.HERMES_DASHBOARD_PORT (1)
9119
number
controllers.hermes.containers.hermes.env.HERMES_SKIP_CONFIG_MIGRATION (1)
1
string
controllers.hermes.containers.hermes.env.HERMES_WRITE_SAFE_ROOT (1)
/opt/data:/tmp
string
controllers.hermes.containers.hermes.env.MEMINI_BASE_URL (1)
http://moltbot-egress.network.svc.cluster.local:8081
string
controllers.hermes.containers.hermes.env.MEMINI_HOME (1)
personal/hermes
string
controllers.hermes.containers.hermes.env.MEMINI_NAMESPACE (1)
home-ops/hermes
string
controllers.hermes.containers.hermes.env.S6_READ_ONLY_ROOT (1)
1
string
controllers.hermes.containers.hermes.env.S6_YES_I_WANT_A_WORLD_WRITABLE_RUN_BECAUSE_KUBERNETES (1)
1
string
controllers.hermes.containers.hermes.image.repository (2)
ghcr.io/alinanova21/hermes-agent
string
controllers.hermes.containers.hermes.image.tag (2)
latest
string
controllers.hermes.containers.hermes.image.pullPolicy (1)
Always
string
controllers.hermes.containers.hermes.probes.liveness.enabled (2)
true
boolean
controllers.hermes.containers.hermes.probes.liveness.custom (1)
true
boolean
controllers.hermes.containers.hermes.probes.liveness.spec.failureThreshold (1)
3
number
controllers.hermes.containers.hermes.probes.liveness.spec.periodSeconds (1)
30
number
controllers.hermes.containers.hermes.probes.liveness.spec.tcpSocket.port (1)
9119
number
controllers.hermes.containers.hermes.probes.liveness.spec.timeoutSeconds (1)
5
number
controllers.hermes.containers.hermes.probes.startup.enabled (2)
true
boolean
controllers.hermes.containers.hermes.probes.startup.custom (1)
true
boolean
controllers.hermes.containers.hermes.probes.startup.spec.failureThreshold (1)
30
number
controllers.hermes.containers.hermes.probes.startup.spec.initialDelaySeconds (1)
15
number
controllers.hermes.containers.hermes.probes.startup.spec.periodSeconds (1)
10
number
controllers.hermes.containers.hermes.probes.startup.spec.tcpSocket.port (1)
9119
number
controllers.hermes.containers.hermes.probes.startup.spec.timeoutSeconds (1)
5
number
controllers.hermes.containers.hermes.probes.readiness.custom (1)
true
boolean
controllers.hermes.containers.hermes.probes.readiness.enabled (1)
true
boolean
controllers.hermes.containers.hermes.probes.readiness.spec.failureThreshold (1)
3
number
controllers.hermes.containers.hermes.probes.readiness.spec.periodSeconds (1)
30
number
controllers.hermes.containers.hermes.probes.readiness.spec.tcpSocket.port (1)
9119
number
controllers.hermes.containers.hermes.probes.readiness.spec.timeoutSeconds (1)
5
number
controllers.hermes.containers.hermes.resources.limits.memory (2)
2Gi
string
controllers.hermes.containers.hermes.resources.limits.cpu (1)
4
string
controllers.hermes.containers.hermes.resources.requests.cpu (2)
500m
string
controllers.hermes.containers.hermes.resources.requests.memory (2)
1Gi
string
controllers.hermes.containers.hermes.securityContext.capabilities.drop[] (2)
- NET_RAW
- MKNOD
string
controllers.hermes.containers.hermes.securityContext.allowPrivilegeEscalation (1)
false
boolean
controllers.hermes.containers.hermes.securityContext.readOnlyRootFilesystem (1)
true
boolean
controllers.hermes.containers.hermes.envFrom[].secretRef.name (1)
hermes-secrets
string
controllers.hermes.containers.hermes.ports[].containerPort (1)
9119
number
controllers.hermes.containers.hermes.ports[].name (1)
http
string
controllers.hermes.containers.gateway.args[] (1)
- gateway
- run
string
controllers.hermes.containers.gateway.env._HERMES_FORCE_GITHUB_TOKEN.valueFrom.secretKeyRef.key (1)
GITHUB_TOKEN
string
controllers.hermes.containers.gateway.env._HERMES_FORCE_GITHUB_TOKEN.valueFrom.secretKeyRef.name (1)
hermes-secrets
string
controllers.hermes.containers.gateway.env.API_SERVER_ENABLED (1)
true
boolean
controllers.hermes.containers.gateway.env.API_SERVER_HOST (1)
0.0.0.0
string
controllers.hermes.containers.gateway.env.API_SERVER_PORT (1)
8642
string
controllers.hermes.containers.gateway.env.CRAWL4AI_API_URL (1)
http://crawl4ai.ai.svc.cluster.local:11235
string
controllers.hermes.containers.gateway.env.HERMES_HOME (1)
/opt/data
string
controllers.hermes.containers.gateway.env.HERMES_STREAM_READ_TIMEOUT (1)
300
string
controllers.hermes.containers.gateway.env.HERMES_STREAM_STALE_TIMEOUT (1)
300
string
controllers.hermes.containers.gateway.env.HOME (1)
/opt/data/home
string
controllers.hermes.containers.gateway.env.HOMEBREW_NO_ANALYTICS (1)
1
string
controllers.hermes.containers.gateway.env.HOMEBREW_NO_AUTO_UPDATE (1)
1
string
controllers.hermes.containers.gateway.env.HOMEBREW_NO_ENV_HINTS (1)
1
string
controllers.hermes.containers.gateway.env.MEMINI_BASE_URL (1)
http://memini.ai.svc.cluster.local:8080
string
controllers.hermes.containers.gateway.env.MEMINI_NAMESPACE (1)
hermes
string
controllers.hermes.containers.gateway.env.OPENAI_BASE_URL (1)
http://bifrost.ai.svc.cluster.local:8080/v1
string
controllers.hermes.containers.gateway.env.PATH (1)
/opt/data/bin:/home/linuxbrew/.linuxbrew/bin:/opt/hermes/.venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
string
controllers.hermes.containers.gateway.env.S6_READ_ONLY_ROOT (1)
1
string
controllers.hermes.containers.gateway.env.S6_YES_I_WANT_A_WORLD_WRITABLE_RUN_BECAUSE_KUBERNETES (1)
1
string
controllers.hermes.containers.gateway.env.SEARXNG_URL (1)
http://searxng.tools.svc.cluster.local:8080
string
controllers.hermes.containers.gateway.env.TZ (1)
Europe/Berlin
string
controllers.hermes.containers.gateway.envFrom[].secretRef.name (1)
hermes-secrets
string
controllers.hermes.containers.gateway.image.repository (1)
ghcr.io/gabrielcosi/hermes-agent
string
controllers.hermes.containers.gateway.image.tag (1)
v2026.8.27@sha256:090fd615ec2193b7d089cc4fe46b246d52fba8d0e33184ef1feedf98d50f97e9
string
controllers.hermes.containers.gateway.resources.limits.memory (1)
2Gi
string
controllers.hermes.containers.gateway.resources.requests.cpu (1)
50m
string
controllers.hermes.containers.gateway.resources.requests.memory (1)
512Mi
string
controllers.hermes.containers.gateway.securityContext.allowPrivilegeEscalation (1)
false
boolean
controllers.hermes.containers.gateway.securityContext.capabilities.drop[] (1)
- ALL
string
controllers.hermes.containers.gateway.securityContext.readOnlyRootFilesystem (1)
true
boolean
controllers.hermes.containers.serve.args[] (1)
- serve
- --host
- "0.0.0.0"
- --port
- "9120"
string
controllers.hermes.containers.serve.command[] (1)
- /opt/hermes/bin/hermes
string
controllers.hermes.containers.serve.env.HERMES_DASHBOARD_OIDC_CLIENT_ID (1)
hermes-serve
string
controllers.hermes.containers.serve.env.HERMES_DASHBOARD_PUBLIC_URL (1)
https://hermes-serve.goyangi.io
string
controllers.hermes.containers.serve.env.HERMES_HOME (1)
/opt/data
string
controllers.hermes.containers.serve.env.HOME (1)
/opt/data
string
controllers.hermes.containers.serve.env.HOMEBREW_CELLAR (1)
/opt/data/homebrew/.linuxbrew/Cellar
string
controllers.hermes.containers.serve.env.HOMEBREW_NO_ANALYTICS (1)
1
string
controllers.hermes.containers.serve.env.HOMEBREW_NO_AUTO_UPDATE (1)
1
string
controllers.hermes.containers.serve.env.HOMEBREW_PREFIX (1)
/opt/data/homebrew/.linuxbrew
string
controllers.hermes.containers.serve.env.PATH (1)
/opt/data/homebrew/.linuxbrew/bin:/opt/data/homebrew/.linuxbrew/sbin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
string
controllers.hermes.containers.serve.env.TZ (1)
Australia/Sydney
string
controllers.hermes.containers.serve.envFrom[].secretRef.name (1)
hermes
string
controllers.hermes.containers.serve.image.repository (1)
nousresearch/hermes-agent
string
controllers.hermes.containers.serve.image.tag (1)
v2026.8.18@sha256:22e37bb4ed1b0f50cb6bd991dca7ecacd6c9f29df9b4a20fc989d32bc763ccf6
string
controllers.hermes.containers.serve.resources.limits.memory (1)
512Mi
string
controllers.hermes.containers.serve.resources.requests.cpu (1)
100m
string
controllers.hermes.containers.serve.resources.requests.memory (1)
512Mi
string
controllers.hermes.containers.serve.securityContext.runAsGroup (1)
10000
number
controllers.hermes.containers.serve.securityContext.runAsUser (1)
10000
number
controllers.hermes.initContainers.init.command[] (9)
- sh
- -c
- set -euo pipefail mkdir -p /opt/data mkdir -p /opt/data/skills/operations/cluster-health/references mkdir -p /opt/data/skills/operations/cluster-health/scripts mkdir -p /opt/data/skills/devops/forgejo-pr-review/references mkdir -p /opt/data/skills/operations/readme-sync cp /run/config/config.yaml /opt/data/config.yaml cp /run/config/env /opt/data/.env chmod 600 /opt/data/.env # Three-way sync so a git update never silently destroys a # self-patch the agent made in place. Compares the incoming git # copy, the live copy, and a marker recording the git content # installed last time: # live == git -> already in sync, refresh marker # live == marker -> untouched since last sync, install git # otherwise -> locally modified, KEEP live, park the # git copy at .git-incoming/ and log drift # Rationale and the reconcile procedure live in # .agents/references/hermes-deployment.md. SYNC=/opt/data/skills/.git-sync SNAP="$SYNC/superseded/$(date -u +%Y%m%dT%H%M%SZ)" mkdir -p "$SYNC" : > "$SYNC/drift.current" sync_skill() { src="$1"; dst="$2"; name="$3" mark="$SYNC/$name.sha" park="$SYNC/incoming/$name.SKILL.md" rm -rf "$(dirname "$dst")/.git-incoming" gsha="$(sha256sum "$src" | cut -d' ' -f1)" if [ ! -f "$dst" ]; then cp "$src" "$dst"; echo "$gsha" > "$mark"; return 0 fi lsha="$(sha256sum "$dst" | cut -d' ' -f1)" if [ "$lsha" = "$gsha" ]; then echo "$gsha" > "$mark" rm -f "$park" return 0 fi psha="$(cat "$mark" 2>/dev/null || true)" if [ -z "$psha" ] || [ "$lsha" = "$psha" ]; then mkdir -p "$SNAP" cp "$dst" "$SNAP/$name.SKILL.md" cp "$src" "$dst" echo "$gsha" > "$mark" rm -f "$park" else mkdir -p "$SYNC/incoming" cp "$src" "$park" echo "$name: local self-patch kept; git version parked at $park" >> "$SYNC/drift.current" echo "$(date -u +%Y-%m-%dT%H:%M:%SZ) $name local=$lsha git=$gsha" >> "$SYNC/drift.log" fi } sync_skill /run/skills/cluster-health/SKILL.md /opt/data/skills/operations/cluster-health/SKILL.md cluster-health sync_skill /run/skills/forgejo-pr-review/SKILL.md /opt/data/skills/devops/forgejo-pr-review/SKILL.md forgejo-pr-review sync_skill /run/skills/readme-sync/SKILL.md /opt/data/skills/operations/readme-sync/SKILL.md readme-sync if [ -d "$SYNC/superseded" ]; then ls -1dt "$SYNC"/superseded/*/ 2>/dev/null | tail -n +11 | xargs -r rm -rf || true fi cp /run/skills/cluster-health/scripts/targetdown-check.sh /opt/data/skills/operations/cluster-health/scripts/targetdown-check.sh cp -n /run/skills/cluster-health/references/targetdown-triage.md /opt/data/skills/operations/cluster-health/references/targetdown-triage.md || true cp -n /run/skills/cluster-health/references/node-baselines.md /opt/data/skills/operations/cluster-health/references/node-baselines.md || true cp -n /run/skills/forgejo-pr-review/references/forgejo-api-quirks.md /opt/data/skills/devops/forgejo-pr-review/references/forgejo-api-quirks.md || true # Recurse ownership over /opt/data so codeserver (UID 1000) # can read JSON files the app previously wrote root:root 600 # (e.g. cron/jobs.json, skills/.usage.json). CHOWN capability # added below; tolerate the rare permission-denied on locked # inodes the way copy-agent-source does. chown -R 1000:1000 /opt/data 2>/tmp/chown.err || true if grep -vE 'Permission denied|Operation not permitted' /tmp/chown.err; then exit 1; fi find /opt/data -user 1000 -type d -exec chmod 2775 {} + find /opt/data -user 1000 -type f -exec chmod 0664 {} + find /opt/data/skills -type f -name '*.sh' -exec chmod 0775 {} + # Pre-create the cron dir/files at permissive perms so the # in-pod cron scheduler (UID 1000 hermes) can read jobs.json # even after the agent recreates it later. Without this, # hermes-agent creates /opt/data/cron as hermes:hermes 700 # and jobs.json as hermes:hermes 600; the scheduler is fine # in that case, but a UID-0 `hermes cron run` from kubectl # exec rewrites jobs.json as root:hermes 600 which the # scheduler then can't read. These pre-creations + 755/644 # defaults survive that scenario at next pod restart. mkdir -p /opt/data/cron /opt/data/cron/output chmod 755 /opt/data/cron /opt/data/cron/output for f in jobs.json .jobs.lock .tick.lock ticker_heartbeat ticker_last_success; do [ -e /opt/data/cron/$f ] && chmod 664 /opt/data/cron/$f || true done
string
controllers.hermes.initContainers.init.image.repository (9)
docker.io/library/alpine
string
controllers.hermes.initContainers.init.image.tag (9)
3.24
string
controllers.hermes.initContainers.init.securityContext.allowPrivilegeEscalation (5)
false
boolean
controllers.hermes.initContainers.init.securityContext.runAsGroup (5)
1000
number
controllers.hermes.initContainers.init.securityContext.runAsUser (5)
1000
number
controllers.hermes.initContainers.init.securityContext.capabilities.drop[] (4)
- ALL
string
controllers.hermes.initContainers.init.securityContext.capabilities.add[] (1)
- CHOWN
string
controllers.hermes.initContainers.init.resources.requests.cpu (1)
10m
string
controllers.hermes.initContainers.init.resources.requests.memory (1)
32Mi
string
controllers.hermes.initContainers.install-tools.command[] (6)
- /bin/sh
- -c
- set -e mkdir -p /opt/data/.local/bin /opt/data/.local/go rm -f /opt/data/.local/bin/hermes /opt/data/.local/bin/docker if [ ! -f /opt/data/.local/bin/gh ]; then cd /tmp curl -fsSL https://github.com/cli/cli/releases/download/v2.61.0/gh_2.61.0_linux_amd64.tar.gz -o gh.tar.gz tar xzf gh.tar.gz cp gh_2.61.0_linux_amd64/bin/gh /opt/data/.local/bin/ rm -rf gh.tar.gz gh_2.61.0_linux_amd64 fi if [ ! -f /opt/data/.local/go/bin/go ]; then cd /tmp curl -fsSL https://go.dev/dl/go1.23.5.linux-amd64.tar.gz -o go.tar.gz tar xzf go.tar.gz mv go /opt/data/.local/ rm -rf go.tar.gz fi if [ ! -f /opt/data/.local/homebrew/bin/brew ]; then export HOMEBREW_PREFIX=/opt/data/.local/homebrew mkdir -p $HOMEBREW_PREFIX git clone --depth 1 https://github.com/Homebrew/brew $HOMEBREW_PREFIX fi
string
controllers.hermes.initContainers.install-tools.image.repository (6)
nousresearch/hermes-agent
string
controllers.hermes.initContainers.install-tools.image.tag (6)
v2026.8.16.2@sha256:a39fc11620213e3669a327aff5c6cb1eb2b8a238c6044e33e7ef8885833d89a7
string
controllers.hermes.initContainers.install-tools.securityContext.allowPrivilegeEscalation (4)
false
boolean
controllers.hermes.initContainers.install-tools.securityContext.capabilities.drop[] (3)
- ALL
string
controllers.hermes.initContainers.install-tools.securityContext.runAsGroup (3)
1000
number
controllers.hermes.initContainers.install-tools.securityContext.runAsUser (3)
1000
number
controllers.hermes.initContainers.install-tools.resources.requests.cpu (1)
25m
string
controllers.hermes.initContainers.install-tools.resources.requests.memory (1)
128Mi
string
controllers.hermes.initContainers.copy-agent-source.command[] (3)
- /bin/sh
- -c
- set -e # hermes-agent >= v2026.7.x ships root-only playwright .deps files; # tolerate those but still fail on any other copy error. cp -r /opt/hermes/. /agent-src/ 2>/tmp/cp.err || true if grep -v 'Permission denied' /tmp/cp.err; then exit 1; fi test -e /agent-src/.venv
string
controllers.hermes.initContainers.copy-agent-source.image.repository (3)
nousresearch/hermes-agent
string
controllers.hermes.initContainers.copy-agent-source.image.tag (3)
v2026.8.16.2@sha256:a39fc11620213e3669a327aff5c6cb1eb2b8a238c6044e33e7ef8885833d89a7
string
controllers.hermes.initContainers.copy-agent-source.securityContext.allowPrivilegeEscalation (3)
false
boolean
controllers.hermes.initContainers.copy-agent-source.securityContext.capabilities.drop[] (3)
- ALL
string
controllers.hermes.initContainers.copy-agent-source.securityContext.runAsGroup (3)
1000
number
controllers.hermes.initContainers.copy-agent-source.securityContext.runAsUser (3)
1000
number
controllers.hermes.initContainers.fix-run.command[] (2)
- sh
- -c
- chown 10000:10000 /run && chmod 755 /run
string
controllers.hermes.initContainers.fix-run.image.repository (2)
docker.io/library/busybox
string
controllers.hermes.initContainers.fix-run.image.tag (2)
latest
string
controllers.hermes.initContainers.fix-run.securityContext.runAsGroup (2)
0
number
controllers.hermes.initContainers.fix-run.securityContext.runAsNonRoot (2)
false
boolean
controllers.hermes.initContainers.fix-run.securityContext.runAsUser (2)
0
number
controllers.hermes.initContainers.fix-run.securityContext.allowPrivilegeEscalation (1)
false
boolean
controllers.hermes.initContainers.fix-run.resources.requests.cpu (1)
10m
string
controllers.hermes.initContainers.fix-run.resources.requests.memory (1)
16Mi
string
controllers.hermes.initContainers.01-agent-source.command[] (1)
- /bin/sh
- -c
- set -e cp -r /opt/hermes/. /agent-src/ chown -R 10000:10000 /agent-src/ chmod -R u+rwX /agent-src/plugins/
string
controllers.hermes.initContainers.01-agent-source.image.repository (1)
docker.io/nousresearch/hermes-agent
string
controllers.hermes.initContainers.01-agent-source.image.tag (1)
v2026.8.27@sha256:e0df6adebddf29b91112aefc999d4aaf6846c9eb544faca5672a16a13590ff79
string
controllers.hermes.initContainers.01-agent-source.securityContext.allowPrivilegeEscalation (1)
true
boolean
controllers.hermes.initContainers.01-agent-source.securityContext.runAsGroup (1)
0
number
controllers.hermes.initContainers.01-agent-source.securityContext.runAsUser (1)
0
number
controllers.hermes.initContainers.02-init-config.command[] (1)
- sh
- -c
- set -euo pipefail mkdir -p /opt/data cp /run/config/config.yaml /opt/data/config.yaml sed -i "s|\${LITELLM_API_KEY}|$LITELLM_API_KEY|g" /opt/data/config.yaml sed -i "s|\${SECRET_DOMAIN}|$SECRET_DOMAIN|g" /opt/data/config.yaml chown 10000:10000 /opt/data/config.yaml # Overwrites any agent self-edit — SOUL.md is GitOps-owned. cp /run/config/SOUL.md /opt/data/SOUL.md chown 10000:10000 /opt/data/SOUL.md # SSH commit-signing key. ssh-keygen refuses a key that is group # or world readable, so 0600 is load-bearing, not hygiene. mkdir -p /opt/data/.ssh chmod 700 /opt/data/.ssh printf '%s\n' "$GH_HERMES_SIGNING_KEY" > /opt/data/.ssh/hermes_signing chmod 600 /opt/data/.ssh/hermes_signing
string
controllers.hermes.initContainers.02-init-config.envFrom[].secretRef.name (1)
{{ .Release.Name }}-secret
string
controllers.hermes.initContainers.02-init-config.image.repository (1)
docker.io/library/alpine
string
controllers.hermes.initContainers.02-init-config.image.tag (1)
3.24
string
controllers.hermes.initContainers.02-init-config.securityContext.allowPrivilegeEscalation (1)
false
boolean
controllers.hermes.initContainers.02-init-config.securityContext.capabilities.drop[] (1)
- ALL
string
controllers.hermes.initContainers.02-init-config.securityContext.runAsGroup (1)
10000
number
controllers.hermes.initContainers.02-init-config.securityContext.runAsUser (1)
10000
number
controllers.hermes.initContainers.03-install-tools.command[] (1)
- /bin/sh
- -c
- set -e mkdir -p /opt/data/.local/bin /opt/data/.local/go rm -f /opt/data/.local/bin/hermes /opt/data/.local/bin/docker if [ ! -f /opt/data/.local/bin/gh ]; then cd /tmp curl -fsSL https://github.com/cli/cli/releases/download/v2.61.0/gh_2.61.0_linux_amd64.tar.gz -o gh.tar.gz tar xzf gh.tar.gz cp gh_2.61.0_linux_amd64/bin/gh /opt/data/.local/bin/ rm -rf gh.tar.gz gh_2.61.0_linux_amd64 fi if [ ! -f /opt/data/.local/go/bin/go ]; then cd /tmp curl -fsSL https://go.dev/dl/go1.23.5.linux-amd64.tar.gz -o go.tar.gz tar xzf go.tar.gz mv go /opt/data/.local/ rm -rf go.tar.gz fi if [ ! -f /opt/data/.local/homebrew/bin/brew ]; then export HOMEBREW_PREFIX=/opt/data/.local/homebrew mkdir -p $HOMEBREW_PREFIX git clone --depth 1 https://github.com/Homebrew/brew $HOMEBREW_PREFIX fi if [ -f /opt/hermes/plugins/platforms/photon/sidecar/package.json ]; then cd /opt/hermes/plugins/platforms/photon/sidecar && npm ci 2>/dev/null || npm install fi # The agent's shell never sees GITHUB_TOKEN, so gh needs it on # disk. `env -u` is required — gh refuses --with-token while # GITHUB_TOKEN is set. Re-runs each boot to pick up rotation. if [ -n "$GITHUB_TOKEN" ]; then printf '%s' "$GITHUB_TOKEN" \ | env -u GITHUB_TOKEN -u GH_TOKEN /opt/data/.local/bin/gh auth login --with-token fi
string
controllers.hermes.initContainers.03-install-tools.env.GH_CONFIG_DIR (1)
/opt/data/.gh
string
controllers.hermes.initContainers.03-install-tools.envFrom[].secretRef.name (1)
{{ .Release.Name }}-secret
string
controllers.hermes.initContainers.03-install-tools.image.repository (1)
docker.io/nousresearch/hermes-agent
string
controllers.hermes.initContainers.03-install-tools.image.tag (1)
v2026.8.27@sha256:e0df6adebddf29b91112aefc999d4aaf6846c9eb544faca5672a16a13590ff79
string
controllers.hermes.initContainers.03-install-tools.securityContext.allowPrivilegeEscalation (1)
false
boolean
controllers.hermes.initContainers.03-install-tools.securityContext.capabilities.drop[] (1)
- ALL
string
controllers.hermes.initContainers.03-install-tools.securityContext.runAsGroup (1)
10000
number
controllers.hermes.initContainers.03-install-tools.securityContext.runAsUser (1)
10000
number
controllers.hermes.initContainers.copy-config.command[] (1)
- sh
- -c
- set -euo pipefail mkdir -p /opt/data cp /run/config/config.yaml /opt/data/config.yaml chown 10000:10000 /opt/data/config.yaml
string
controllers.hermes.initContainers.copy-config.image.repository (1)
docker.io/library/alpine
string
controllers.hermes.initContainers.copy-config.image.tag (1)
3.24
string
controllers.hermes.initContainers.daemon.env.DOCKER_TLS_CERTDIR (1)
/certs
string
controllers.hermes.initContainers.daemon.image.repository (1)
docker
string
controllers.hermes.initContainers.daemon.image.tag (1)
29.7.2-dind@sha256:12e683a161823b2a839aeea999b9d960e6e1f9a97b1679ad6b441982e2d9cf07
string
controllers.hermes.initContainers.daemon.probes.liveness.custom (1)
true
boolean
controllers.hermes.initContainers.daemon.probes.liveness.enabled (1)
true
boolean
controllers.hermes.initContainers.daemon.probes.liveness.spec.exec.command[] (1)
- docker
- info
string
controllers.hermes.initContainers.daemon.probes.liveness.spec.failureThreshold (1)
3
number
controllers.hermes.initContainers.daemon.probes.liveness.spec.periodSeconds (1)
20
number
controllers.hermes.initContainers.daemon.probes.liveness.spec.timeoutSeconds (1)
3
number
controllers.hermes.initContainers.daemon.probes.readiness.custom (1)
true
boolean
controllers.hermes.initContainers.daemon.probes.readiness.enabled (1)
true
boolean
controllers.hermes.initContainers.daemon.probes.readiness.spec.exec.command[] (1)
- docker
- info
string
controllers.hermes.initContainers.daemon.probes.readiness.spec.failureThreshold (1)
3
number
controllers.hermes.initContainers.daemon.probes.readiness.spec.periodSeconds (1)
5
number
controllers.hermes.initContainers.daemon.probes.readiness.spec.timeoutSeconds (1)
3
number
controllers.hermes.initContainers.daemon.probes.startup.custom (1)
true
boolean
controllers.hermes.initContainers.daemon.probes.startup.enabled (1)
true
boolean
controllers.hermes.initContainers.daemon.probes.startup.spec.exec.command[] (1)
- docker
- info
string
controllers.hermes.initContainers.daemon.probes.startup.spec.failureThreshold (1)
60
number
controllers.hermes.initContainers.daemon.probes.startup.spec.periodSeconds (1)
2
number
controllers.hermes.initContainers.daemon.probes.startup.spec.timeoutSeconds (1)
3
number
controllers.hermes.initContainers.daemon.restartPolicy (1)
Always
string
controllers.hermes.initContainers.daemon.securityContext.allowPrivilegeEscalation (1)
true
boolean
controllers.hermes.initContainers.daemon.securityContext.privileged (1)
true
boolean
controllers.hermes.initContainers.daemon.securityContext.runAsGroup (1)
0
number
controllers.hermes.initContainers.daemon.securityContext.runAsUser (1)
0
number
controllers.hermes.initContainers.seed-config.command[] (1)
- sh
- -c
- set -eu if [ ! -f /opt/data/config.yaml ]; then echo "seed-config: no persisted config; seeding from git source." cp /config-src/config.yaml /opt/data/config.yaml cp /config-src/config.yaml /opt/data/.config.git-base.yaml exit 0 fi cp /opt/data/config.yaml /tmp/config.work.yaml if [ -f /opt/data/.config.git-base.yaml ]; then yq -o=json -I=0 '[... | path] | .[] | select(length > 0) | select(.[-1] | tag == "!!str")' /opt/data/.config.git-base.yaml | sort -u > /tmp/base.keys yq -o=json -I=0 '[... | path] | .[] | select(length > 0) | select(.[-1] | tag == "!!str")' /config-src/config.yaml | sort -u > /tmp/src.keys if [ -s /tmp/src.keys ]; then grep -Fxv -f /tmp/src.keys /tmp/base.keys > /tmp/removed.keys || true if [ -s /tmp/removed.keys ]; then echo "seed-config: pruning keys removed from git since last reconcile:" cat /tmp/removed.keys yq ea -p=json -o=json -I=0 '[.]' /tmp/removed.keys > /tmp/removed.json yq -i 'del(.. | select( ([path] - load("/tmp/removed.json")) | length == 0 ))' /tmp/config.work.yaml fi fi fi yq eval-all 'select(fileIndex == 0) * select(fileIndex == 1)' /tmp/config.work.yaml /config-src/config.yaml > /tmp/config.final.yaml cp /tmp/config.final.yaml /opt/data/config.yaml cp /config-src/config.yaml /opt/data/.config.git-base.yaml echo "seed-config: merged git over persisted config (git wins; runtime-only keys kept; git deletions pruned)."
string
controllers.hermes.initContainers.seed-config.image.repository (1)
mikefarah/yq
string
controllers.hermes.initContainers.seed-config.image.tag (1)
4.53.6
string
controllers.hermes.initContainers.seed-config.securityContext.allowPrivilegeEscalation (1)
false
boolean
controllers.hermes.initContainers.seed-config.securityContext.capabilities.drop[] (1)
- ALL
string
controllers.hermes.initContainers.seed-config.securityContext.readOnlyRootFilesystem (1)
true
boolean
controllers.hermes.initContainers.seed-tools.command[] (1)
- sh
- -c
- set -e if [ -e /homebrew-runtime/.seeded ]; then echo "Homebrew already seeded; skipping." else echo "Resetting incomplete Homebrew seed." chmod -R u+w /homebrew-runtime 2>/dev/null || true find /homebrew-runtime -mindepth 1 -maxdepth 1 -exec rm -rf {} + echo "Seeding Homebrew from image /home/linuxbrew/.linuxbrew into /homebrew-runtime." cp -RP /home/linuxbrew/.linuxbrew/. /homebrew-runtime/ touch /homebrew-runtime/.seeded echo "Homebrew seed complete." fi echo "Linking memini plugin into /opt/data/plugins." mkdir -p /opt/data/plugins ln -sfn /opt/memini /opt/data/plugins/memini echo "Ensuring /opt/data/home and /opt/data/bin exist." mkdir -p /opt/data/home /opt/data/bin echo "Writing /opt/data/home/.profile with PATH." printf '%s\n' 'export PATH="/opt/data/bin:/home/linuxbrew/.linuxbrew/bin:/opt/hermes/.venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"' > /opt/data/home/.profile echo "Mirroring .profile to /opt/data/home/.bashrc." cp /opt/data/home/.profile /opt/data/home/.bashrc echo "Shell dotfiles ready."
string
controllers.hermes.initContainers.seed-tools.image.repository (1)
ghcr.io/gabrielcosi/hermes-agent
string
controllers.hermes.initContainers.seed-tools.image.tag (1)
v2026.8.27@sha256:090fd615ec2193b7d089cc4fe46b246d52fba8d0e33184ef1feedf98d50f97e9
string
controllers.hermes.initContainers.seed-tools.securityContext.allowPrivilegeEscalation (1)
false
boolean
controllers.hermes.initContainers.seed-tools.securityContext.capabilities.drop[] (1)
- ALL
string
controllers.hermes.initContainers.seed-tools.securityContext.readOnlyRootFilesystem (1)
true
boolean
controllers.hermes.strategy (8)
Recreate
string
controllers.hermes.replicas (4)
1
number
controllers.hermes.type (4)
deployment
string
controllers.hermes.pod.nodeSelector."kubernetes.io/hostname" (1)
talos1
string
controllers.hermes.pod.securityContext.fsGroup (1)
10000
number
controllers.hermes.pod.securityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
controllers.hermes.pod.securityContext.runAsGroup (1)
10000
number
controllers.hermes.pod.securityContext.runAsNonRoot (1)
true
boolean
controllers.hermes.pod.securityContext.runAsUser (1)
10000
number
controllers.hermes.pod.securityContext.seccompProfile.type (1)
RuntimeDefault
string
controllers.hermes.serviceAccount.identifier (1)
hermes
string
controllers.hermes.serviceAccount.name (1)
hermes
string
controllers.codeserver.containers.codeserver.args[] (1)
- --auth
- none
- --user-data-dir
- /opt/data/.vscode
- --extensions-dir
- /opt/data/.vscode
- --port
- "12321"
- /opt/data
string
controllers.codeserver.containers.codeserver.env.GOPATH (1)
/opt/data/go
string
controllers.codeserver.containers.codeserver.env.HOME (1)
/opt/data
string
controllers.codeserver.containers.codeserver.env.HOMEBREW_CELLAR (1)
/opt/data/.local/homebrew/Cellar
string
controllers.codeserver.containers.codeserver.env.HOMEBREW_PREFIX (1)
/opt/data/.local/homebrew
string
controllers.codeserver.containers.codeserver.env.HOMEBREW_REPOSITORY (1)
/opt/data/.local/homebrew
string
controllers.codeserver.containers.codeserver.env.PATH (1)
/opt/data/.local/bin:/opt/data/.local/go/bin:/opt/data/.local/homebrew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
string
controllers.codeserver.containers.codeserver.env.TZ (1)
Pacific/Auckland
string
controllers.codeserver.containers.codeserver.image.repository (1)
ghcr.io/coder/code-server
string
controllers.codeserver.containers.codeserver.image.tag (1)
4.134.0@sha256:9d6c9b2e89f95c95885f859bbca0af2f648c376e61e9bbdff5c14be5a6e27d40
string
controllers.codeserver.containers.codeserver.resources.limits.memory (1)
1Gi
string
controllers.codeserver.containers.codeserver.resources.requests.cpu (1)
10m
string
controllers.codeserver.pod.affinity.podAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchLabels."app.kubernetes.io/controller" (1)
hermes
string
controllers.codeserver.pod.affinity.podAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchLabels."app.kubernetes.io/name" (1)
hermes
string
controllers.codeserver.pod.affinity.podAffinity.requiredDuringSchedulingIgnoredDuringExecution[].topologyKey (1)
kubernetes.io/hostname
string
controllers.codeserver.pod.securityContext.runAsGroup (1)
10000
number
controllers.codeserver.pod.securityContext.runAsUser (1)
10000
number
controllers.codeserver.strategy (1)
Recreate
string
defaultPodOptions.securityContext.fsGroup (12)
10000
number
defaultPodOptions.securityContext.fsGroupChangePolicy (11)
OnRootMismatch
string
defaultPodOptions.securityContext.seccompProfile.type (11)
RuntimeDefault
string
defaultPodOptions.securityContext.runAsGroup (7)
1000
number
defaultPodOptions.securityContext.runAsUser (7)
1000
number
defaultPodOptions.securityContext.runAsNonRoot (4)
true
boolean
defaultPodOptions.automountServiceAccountToken (5)
true
boolean
defaultPodOptions.terminationGracePeriodSeconds (5)
120
number
defaultPodOptions.runtimeClassName (2)
gvisor
string
defaultPodOptions.dnsConfig.options[].name (1)
ndots
string
defaultPodOptions.dnsConfig.options[].value (1)
1
string
defaultPodOptions.nodeSelector."kubernetes.io/arch" (1)
amd64
string
persistence.data.existingClaim (10)
hermes
string
persistence.data.globalMounts[].path (7)
/opt/data
string
persistence.data.advancedMounts.hermes.app[].path (4)
/opt/data
string
persistence.data.advancedMounts.hermes.codeserver[].path (4)
/opt/data
string
persistence.data.advancedMounts.hermes.init[].path (3)
/opt/data
string
persistence.data.advancedMounts.hermes.install-tools[].path (3)
/opt/data
string
persistence.data.advancedMounts.hermes.02-init-config[].path (1)
/opt/data
string
persistence.data.advancedMounts.hermes.03-install-tools[].path (1)
/opt/data
string
persistence.data.advancedMounts.hermes.dashboard[].path (1)
/opt/data
string
persistence.data.accessMode (1)
ReadWriteOnce
string
persistence.data.dataSourceRef.apiGroup (1)
kopiur.home-operations.com
string
persistence.data.dataSourceRef.kind (1)
Restore
string
persistence.data.dataSourceRef.name (1)
hermes
string
persistence.data.size (1)
10Gi
string
persistence.data.type (1)
persistentVolumeClaim
string
persistence.tmp.type (10)
emptyDir
string
persistence.tmp.globalMounts[].path (9)
/tmp
string
persistence.tmp.sizeLimit (1)
4Gi
string
persistence.config.name (9)
hermes-config
string
persistence.config.type (9)
configMap
string
persistence.config.defaultMode (7)
256
number
persistence.config.globalMounts[].path (7)
/opt/data
string
persistence.config.globalMounts[].subPath (3)
config.yaml
string
persistence.config.globalMounts[].readOnly (2)
true
boolean
persistence.config.advancedMounts.hermes.init[].path (3)
/run/config/env
string
persistence.config.advancedMounts.hermes.init[].subPath (3)
env
string
persistence.config.advancedMounts.hermes.copy-config[].path (1)
/run/config/config.yaml
string
persistence.config.advancedMounts.hermes.copy-config[].subPath (1)
config.yaml
string
persistence.config.advancedMounts.hermes.seed-config[].path (1)
/config-src/config.yaml
string
persistence.config.advancedMounts.hermes.seed-config[].readOnly (1)
true
boolean
persistence.config.advancedMounts.hermes.seed-config[].subPath (1)
config.yaml
string
persistence.config.existingClaim (3)
{{ .Release.Name }}
string
persistence.run.type (6)
emptyDir
string
persistence.run.advancedMounts.hermes.app[].path (3)
/run
string
persistence.run.globalMounts[].path (3)
/run
string
persistence.run.medium (1)
Memory
string
persistence.run.sizeLimit (1)
64Mi
string
persistence.agent-source.advancedMounts.hermes.app[].path (4)
/opt/hermes
string
persistence.agent-source.advancedMounts.hermes.copy-agent-source[].path (3)
/agent-src
string
persistence.agent-source.advancedMounts.hermes.install-tools[].path (3)
/opt/hermes
string
persistence.agent-source.advancedMounts.hermes.01-agent-source[].path (1)
/agent-src
string
persistence.agent-source.advancedMounts.hermes.03-install-tools[].path (1)
/opt/hermes
string
persistence.agent-source.advancedMounts.hermes.dashboard[].path (1)
/opt/hermes
string
persistence.agent-source.type (4)
emptyDir
string
persistence.config-yaml.advancedMounts.hermes.init[].path (4)
/run/config/config.yaml
string
persistence.config-yaml.advancedMounts.hermes.init[].subPath (4)
config.yaml
string
persistence.config-yaml.defaultMode (4)
493
number
persistence.config-yaml.name (4)
hermes-configmap
string
persistence.config-yaml.type (4)
configMap
string
persistence.configmap.defaultMode (2)
755
number
persistence.configmap.globalMounts[].path (2)
/tmp/config.yaml
string
persistence.configmap.globalMounts[].subPath (2)
config.yaml
string
persistence.configmap.name (2)
{{ .Release.Name }}-config
string
persistence.configmap.type (2)
configMap
string
persistence.certs.globalMounts[].path (1)
/certs
string
persistence.certs.type (1)
emptyDir
string
persistence.codex.globalMounts[].path (1)
/opt/data/codex
string
persistence.codex.type (1)
emptyDir
string
persistence.config-secret.defaultMode (1)
400
number
persistence.config-secret.globalMounts[].path (1)
/tmp/config.yaml
/tmp/.env
string
persistence.config-secret.globalMounts[].subPath (1)
config.yaml
env
string
persistence.config-secret.name (1)
hermes-secret
string
persistence.config-secret.type (1)
secret
string
persistence.dev-shm.globalMounts[].path (1)
/dev/shm
string
persistence.dev-shm.medium (1)
Memory
string
persistence.dev-shm.sizeLimit (1)
1Gi
string
persistence.dev-shm.type (1)
emptyDir
string
persistence.gallery.globalMounts[].path (1)
/mnt/gallery
string
persistence.gallery.path (1)
/mnt/daena/comfyui/output
string
persistence.gallery.server (1)
voyager.internal
string
persistence.gallery.type (1)
nfs
string
persistence.home-cache.globalMounts[].path (1)
/opt/data/home/.cache
string
persistence.home-cache.type (1)
emptyDir
string
persistence.homebrew.accessMode (1)
ReadWriteOnce
string
persistence.homebrew.advancedMounts.hermes.gateway[].path (1)
/home/linuxbrew/.linuxbrew
string
persistence.homebrew.advancedMounts.hermes.seed-tools[].path (1)
/homebrew-runtime
string
persistence.homebrew.forceRename (1)
hermes-homebrew
string
persistence.homebrew.size (1)
1Gi
string
persistence.homebrew.storageClass (1)
miroir-replicated
string
persistence.homebrew.type (1)
persistentVolumeClaim
string
persistence.media.globalMounts[].path (1)
/media
string
persistence.media.globalMounts[].readOnly (1)
true
boolean
persistence.media.path (1)
/mnt/world/media
string
persistence.media.server (1)
nas.internal
string
persistence.media.type (1)
nfs
string
persistence.nfs.globalMounts[].path (1)
/nfs-data
string
persistence.nfs.path (1)
/mnt/nas/data/shares/hermes
string
persistence.nfs.server (1)
truenas.internal
string
persistence.nfs.type (1)
nfs
string
persistence.npm-cache.globalMounts[].path (1)
/opt/data/.npm
string
persistence.npm-cache.type (1)
emptyDir
string
persistence.plugin-agentmemory.globalMounts[].path (1)
/opt/hermes/plugins/agentmemory
string
persistence.plugin-agentmemory.name (1)
hermes-agentmemory-plugin
string
persistence.plugin-agentmemory.type (1)
configMap
string
persistence.runtime-cache.globalMounts[].path (1)
/opt/data/.cache
/opt/data/homebrew/.homebrew-user/.cache
string
persistence.runtime-cache.type (1)
emptyDir
string
persistence.skill-cluster-health.advancedMounts.hermes.init[].path (1)
/run/skills/cluster-health/SKILL.md
/run/skills/cluster-health/references/targetdown-triage.md
/run/skills/cluster-health/references/node-baselines.md
/run/skills/cluster-health/scripts/targetdown-check.sh
string
persistence.skill-cluster-health.advancedMounts.hermes.init[].subPath (1)
SKILL.md
targetdown-triage.md
node-baselines.md
targetdown-check.sh
string
persistence.skill-cluster-health.defaultMode (1)
493
number
persistence.skill-cluster-health.name (1)
hermes-skill-cluster-health
string
persistence.skill-cluster-health.type (1)
configMap
string
persistence.skill-commit-watcher.advancedMounts.hermes.init[].path (1)
/run/skills/homelab-commit-watcher
string
persistence.skill-commit-watcher.defaultMode (1)
493
number
persistence.skill-commit-watcher.name (1)
hermes-skill-homelab-commit-watcher
string
persistence.skill-commit-watcher.type (1)
configMap
string
persistence.skill-forgejo-pr-review.advancedMounts.hermes.init[].path (1)
/run/skills/forgejo-pr-review/SKILL.md
/run/skills/forgejo-pr-review/references/forgejo-api-quirks.md
string
persistence.skill-forgejo-pr-review.advancedMounts.hermes.init[].subPath (1)
SKILL.md
forgejo-api-quirks.md
string
persistence.skill-forgejo-pr-review.defaultMode (1)
493
number
persistence.skill-forgejo-pr-review.name (1)
hermes-skill-forgejo-pr-review
string
persistence.skill-forgejo-pr-review.type (1)
configMap
string
persistence.skill-readme-sync.advancedMounts.hermes.init[].path (1)
/run/skills/readme-sync/SKILL.md
string
persistence.skill-readme-sync.advancedMounts.hermes.init[].subPath (1)
SKILL.md
string
persistence.skill-readme-sync.defaultMode (1)
493
number
persistence.skill-readme-sync.name (1)
hermes-skill-readme-sync
string
persistence.skill-readme-sync.type (1)
configMap
string
persistence.soul.globalMounts[].path (1)
/run/config/SOUL.md
string
persistence.soul.globalMounts[].subPath (1)
SOUL.md
string
persistence.soul.name (1)
hermes-soul
string
persistence.soul.type (1)
configMap
string
persistence.tmpfs.globalMounts[].path (1)
/tmp
/cache
string
persistence.tmpfs.globalMounts[].subPath (1)
tmp
cache
string
persistence.tmpfs.type (1)
emptyDir
string
service.app.controller (8)
hermes
string
service.app.ports.codeserver.port (5)
12321
number
service.app.ports.dashboard.port (5)
9119
number
service.app.ports.gateway.port (4)
8642
number
service.app.ports.http.port (4)
8642
number
service.app.ports.api.port (1)
8642
number
service.app.ipFamilies[] (4)
- IPv4
string
service.dashboard.controller (5)
hermes
string
service.dashboard.ports.http.port (5)
9119
number
service.hermes.controller (3)
hermes
string
service.hermes.ports.http.port (2)
9119
number
service.hermes.ports.agent.port (1)
8642
number
service.hermes.ports.dashboard.port (1)
9119
number
service.hermes.primary (1)
true
boolean
service.api.controller (1)
hermes
string
service.api.ports.http.port (1)
8642
number
service.codeserver.controller (1)
codeserver
string
service.codeserver.ports.http.port (1)
12321
number
service.serve.controller (1)
hermes
string
service.serve.ports.http.port (1)
9120
number
service.webhook.controller (1)
hermes
string
service.webhook.ports.http.port (1)
8645
number
rbac.bindings.hermes-read-all.roleRef.identifier (7)
hermes-read-all
string
rbac.bindings.hermes-read-all.subjects[].identifier (7)
hermes
string
rbac.bindings.hermes-read-all.subjects[].serviceAccount (7)
hermes
string
rbac.bindings.hermes-read-all.type (7)
ClusterRoleBinding
string
rbac.bindings.hermes-exec-deploy.roleRef.identifier (5)
hermes-exec-deploy
string
rbac.bindings.hermes-exec-deploy.subjects[].identifier (5)
hermes
string
rbac.bindings.hermes-exec-deploy.subjects[].namespace (5)
ai
string
rbac.bindings.hermes-exec-deploy.subjects[].serviceAccount (5)
hermes
string
rbac.bindings.hermes-exec-deploy.type (5)
RoleBinding
string
rbac.bindings.hermes-pod-delete.roleRef.identifier (5)
hermes-pod-delete
string
rbac.bindings.hermes-pod-delete.subjects[].identifier (5)
hermes
string
rbac.bindings.hermes-pod-delete.subjects[].serviceAccount (5)
hermes
string
rbac.bindings.hermes-pod-delete.type (5)
ClusterRoleBinding
string
rbac.bindings.hermes-cluster-ops.roleRef.identifier (1)
hermes-cluster-ops
string
rbac.bindings.hermes-cluster-ops.subjects[].identifier (1)
hermes
string
rbac.bindings.hermes-cluster-ops.subjects[].serviceAccount (1)
hermes
string
rbac.bindings.hermes-cluster-ops.type (1)
ClusterRoleBinding
string
rbac.bindings.hermes-write-restricted.roleRef.identifier (1)
hermes-write-restricted
string
rbac.bindings.hermes-write-restricted.subjects[].identifier (1)
hermes
string
rbac.bindings.hermes-write-restricted.subjects[].serviceAccount (1)
hermes
string
rbac.bindings.hermes-write-restricted.type (1)
RoleBinding
string
rbac.roles.hermes-read-all.rules[].apiGroups[] (7)
-
- apps
- batch
- networking.k8s.io
- storage.k8s.io
- helm.toolkit.fluxcd.io
- kustomize.toolkit.fluxcd.io
- source.toolkit.fluxcd.io
- external-secrets.io
string
rbac.roles.hermes-read-all.rules[].resources[] (7)
- pods
- pods/log
- nodes
- services
- namespaces
- configmaps
- persistentvolumes
- persistentvolumeclaims
- endpoints
- resourcequotas
- limitranges
- serviceaccounts
- events
- deployments
- daemonsets
- statefulsets
- replicasets
- controllerrevisions
- jobs
- cronjobs
- ingresses
- ingressclasses
- networkpolicies
- storageclasses
- csinodes
- csidrivers
- volumeattachments
- helmreleases
- kustomizations
- gitrepositories
- helmrepositories
- ocirepositories
- buckets
- helmcharts
- externalsecrets
- secretstores
- clustersecretstores
string
rbac.roles.hermes-read-all.rules[].verbs[] (7)
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
string
rbac.roles.hermes-read-all.type (7)
ClusterRole
string
rbac.roles.hermes-exec-deploy.rules[].apiGroups[] (5)
-
- apps
string
rbac.roles.hermes-exec-deploy.rules[].resources[] (5)
- pods/exec
- deployments
string
rbac.roles.hermes-exec-deploy.rules[].verbs[] (5)
- create
- patch
- update
string
rbac.roles.hermes-exec-deploy.type (5)
Role
string
rbac.roles.hermes-pod-delete.rules[].apiGroups[] (5)
-
string
rbac.roles.hermes-pod-delete.rules[].resources[] (5)
- pods
string
rbac.roles.hermes-pod-delete.rules[].verbs[] (5)
- delete
string
rbac.roles.hermes-pod-delete.type (5)
ClusterRole
string
rbac.roles.hermes-cluster-ops.rules[].apiGroups[] (1)
- helm.toolkit.fluxcd.io
-
string
rbac.roles.hermes-cluster-ops.rules[].resources[] (1)
- helmreleases
- persistentvolumes
string
rbac.roles.hermes-cluster-ops.rules[].verbs[] (1)
- patch
- update
- delete
- patch
string
rbac.roles.hermes-cluster-ops.type (1)
ClusterRole
string
rbac.roles.hermes-write-restricted.rules[].apiGroups[] (1)
-
- batch
-
- apps
string
rbac.roles.hermes-write-restricted.rules[].resources[] (1)
- pods
- jobs
- pods/exec
- deployments
string
rbac.roles.hermes-write-restricted.rules[].verbs[] (1)
- delete
- delete
- create
- patch
- update
string
rbac.roles.hermes-write-restricted.type (1)
Role
string
route.app.hostnames[] (6)
- hermes.dcunha.io
string
route.app.parentRefs[].name (6)
envoy-internal
string
route.app.parentRefs[].namespace (6)
network
string
route.app.rules[].backendRefs[].identifier (6)
app
string
route.app.rules[].backendRefs[].port (6)
9119
number, string
route.codeserver.hostnames[] (6)
- hermes-code.dcunha.io
string
route.codeserver.parentRefs[].name (6)
envoy-internal
string
route.codeserver.parentRefs[].namespace (6)
network
string
route.codeserver.parentRefs[].sectionName (1)
https
string
route.codeserver.rules[].backendRefs[].identifier (6)
app
string
route.codeserver.rules[].backendRefs[].port (6)
12321
number, string
route.dashboard.hostnames[] (3)
- hermes.${SECRET_DOMAIN}
string
route.dashboard.parentRefs[].name (3)
envoy-internal
string
route.dashboard.parentRefs[].namespace (3)
networking
string
route.dashboard.parentRefs[].sectionName (2)
https
string
route.dashboard.rules[].backendRefs[].identifier (3)
dashboard
string
route.dashboard.rules[].backendRefs[].port (3)
http
string
route.dashboard.annotations."gatus.home-operations.com/endpoint" (1)
url: https://hermes.nikola.wtf/login
string
route.hermes.hostnames[] (1)
- hermes.mcgrath.nz
string
route.hermes.parentRefs[].name (1)
envoy-internal
string
route.hermes.parentRefs[].namespace (1)
networking
string
route.hermes.parentRefs[].sectionName (1)
https
string
route.hermes.rules[].backendRefs[].identifier (1)
hermes
string
route.hermes.rules[].backendRefs[].port (1)
dashboard
string
route.hermes.rules[].filters[].requestHeaderModifier.set[].name (1)
Origin
string
route.hermes.rules[].filters[].requestHeaderModifier.set[].value (1)
http://localhost:9119
string
route.hermes.rules[].filters[].type (1)
RequestHeaderModifier
string
route.internal.enabled (1)
true
boolean
route.internal.hostnames[] (1)
- hermes.${SECRET_DOMAIN}
string
route.internal.parentRefs[].name (1)
envoy-internal
string
route.internal.parentRefs[].namespace (1)
network
string
route.internal.parentRefs[].sectionName (1)
https
string
route.internal.rules[].backendRefs[].identifier (1)
hermes
string
route.internal.rules[].backendRefs[].port (1)
9119
number
serviceAccount.hermes.annotations."reloader.stakater.com/match" (1)
true
string
serviceAccount.hermes.enabled (1)
true
boolean