hermes helm

No introduction found. Create it?

Install

Install with:

helm repo add hermes oci://ghcr.io/bjw-s-labs/charts/
helm install hermes hermes/hermes -f values.yaml

Examples

See examples from other people.

Top Repositories (4 out of 17)

NameRepoStarsVersionTimestamp
hermesToaHartor/maisonneux435.0.1a day ago
hermesblackjid/home-ops975.2.02 days ago
hermesjoryirving/home-ops2255.2.13 days ago
hermesmirceanton/home-ops1195.2.14 days ago

Values

See the most popular values for this chart:

KeyTypes
controllers.hermes.annotations."reloader.stakater.com/auto" (16)
true
string
controllers.hermes.containers.app.env.HERMES_HOME (14)
/opt/data
string
controllers.hermes.containers.app.env.HOME (13)
/opt/data
string
controllers.hermes.containers.app.env.TZ (12)
string
controllers.hermes.containers.app.env.API_SERVER_ENABLED (11)
true
string, boolean
controllers.hermes.containers.app.env.API_SERVER_HOST (11)
0.0.0.0
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD (10)
1
string, boolean
controllers.hermes.containers.app.env.PATH (8)
string
controllers.hermes.containers.app.env.SEARXNG_URL (7)
http://searxng.ai.svc.cluster.local:8080
string
controllers.hermes.containers.app.env.API_SERVER_PORT (6)
8642
number, string
controllers.hermes.containers.app.env.GOPATH (6)
/opt/data/go
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_PUBLIC_URL (6)
string
controllers.hermes.containers.app.env.MEMINI_NAMESPACE (6)
hermes
string
controllers.hermes.containers.app.env.PIP_BREAK_SYSTEM_PACKAGES (6)
1
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_ISSUER.secretKeyRef.key (1)
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_ISSUER.secretKeyRef.name (1)
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_ISSUER (5)
string
controllers.hermes.containers.app.env.HERMES_GID (5)
string, number
controllers.hermes.containers.app.env.HERMES_UID (5)
string, number
controllers.hermes.containers.app.env.HOMEBREW_CELLAR (5)
/opt/data/.local/homebrew/Cellar
string
controllers.hermes.containers.app.env.HOMEBREW_PREFIX (5)
/opt/data/.local/homebrew
string
controllers.hermes.containers.app.env.HOMEBREW_REPOSITORY (5)
/opt/data/.local/homebrew
string
controllers.hermes.containers.app.env.MEMINI_URL (5)
http://memini.ai.svc.cluster.local:8080
string
controllers.hermes.containers.app.env.TERM (5)
xterm-256color
string
controllers.hermes.containers.app.env.MEMINI_API_KEY.valueFrom.secretKeyRef.key (4)
MEMINI_API_KEY
string
controllers.hermes.containers.app.env.MEMINI_API_KEY.valueFrom.secretKeyRef.name (4)
string
controllers.hermes.containers.app.env.HERMES_CRON_TIMEOUT (3)
string, number
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_ID.secretKeyRef.key (1)
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_ID.secretKeyRef.name (1)
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_ID.valueFrom.secretKeyRef.key (1)
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_ID.valueFrom.secretKeyRef.name (1)
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_ID (3)
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_SECRET.valueFrom.secretKeyRef.key (3)
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_SECRET.valueFrom.secretKeyRef.name (3)
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_SECRET.secretKeyRef.key (1)
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_SECRET.secretKeyRef.name (1)
string
controllers.hermes.containers.app.env.LITELLM_API_KEY.valueFrom.secretKeyRef.key (3)
string
controllers.hermes.containers.app.env.LITELLM_API_KEY.valueFrom.secretKeyRef.name (3)
string
controllers.hermes.containers.app.env.LITELLM_API_KEY.secretKeyRef.key (1)
string
controllers.hermes.containers.app.env.LITELLM_API_KEY.secretKeyRef.name (1)
string
controllers.hermes.containers.app.env.AGENT_BROWSER_ARGS (2)
string
controllers.hermes.containers.app.env.API_SERVER_CORS_ORIGINS (2)
string
controllers.hermes.containers.app.env.GH_CONFIG_DIR (2)
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_HOST (2)
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_SCOPES (2)
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_PORT (2)
number
controllers.hermes.containers.app.env.HERMES_DASHBOARD_TUI (2)
string
controllers.hermes.containers.app.env.MEMINI_BASE_URL (2)
string
controllers.hermes.containers.app.env.SUMMARY_LLM_API_KEY.valueFrom.secretKeyRef.key (2)
string
controllers.hermes.containers.app.env.SUMMARY_LLM_API_KEY.valueFrom.secretKeyRef.name (2)
string
controllers.hermes.containers.app.env.SUMMARY_LLM_MODEL (2)
string
controllers.hermes.containers.app.env.SUMMARY_LLM_URL (2)
string
controllers.hermes.containers.app.env.TERMINAL_MAX_FOREGROUND_TIMEOUT (2)
string
controllers.hermes.containers.app.env.AGENTMEMORY_URL (1)
string
controllers.hermes.containers.app.env.API_SERVER_KEY.secretKeyRef.key (1)
string
controllers.hermes.containers.app.env.API_SERVER_KEY.secretKeyRef.name (1)
string
controllers.hermes.containers.app.env.BLUEBUBBLES_REQUIRE_MENTION (1)
string
controllers.hermes.containers.app.env.BLUEBUBBLES_SERVER_URL (1)
string
controllers.hermes.containers.app.env.BLUEBUBBLES_WEBHOOK_HOST (1)
string
controllers.hermes.containers.app.env.BLUEBUBBLES_WEBHOOK_PATH (1)
string
controllers.hermes.containers.app.env.BLUEBUBBLES_WEBHOOK_PORT (1)
string
controllers.hermes.containers.app.env.CODEX_HOME (1)
string
controllers.hermes.containers.app.env.DISCORD_ALLOWED_CHANNELS.valueFrom.secretKeyRef.key (1)
string
controllers.hermes.containers.app.env.DISCORD_ALLOWED_CHANNELS.valueFrom.secretKeyRef.name (1)
string
controllers.hermes.containers.app.env.DISCORD_ALLOWED_USERS.valueFrom.secretKeyRef.key (1)
string
controllers.hermes.containers.app.env.DISCORD_ALLOWED_USERS.valueFrom.secretKeyRef.name (1)
string
controllers.hermes.containers.app.env.DISCORD_BOT_TOKEN.valueFrom.secretKeyRef.key (1)
string
controllers.hermes.containers.app.env.DISCORD_BOT_TOKEN.valueFrom.secretKeyRef.name (1)
string
controllers.hermes.containers.app.env.DISCORD_HOME_CHANNEL.valueFrom.secretKeyRef.key (1)
string
controllers.hermes.containers.app.env.DISCORD_HOME_CHANNEL.valueFrom.secretKeyRef.name (1)
string
controllers.hermes.containers.app.env.DISCORD_WEBHOOK.valueFrom.secretKeyRef.key (1)
string
controllers.hermes.containers.app.env.DISCORD_WEBHOOK.valueFrom.secretKeyRef.name (1)
string
controllers.hermes.containers.app.env.DOCKER_CERT_PATH (1)
string
controllers.hermes.containers.app.env.DOCKER_HOST (1)
string
controllers.hermes.containers.app.env.DOCKER_TLS_VERIFY (1)
string
controllers.hermes.containers.app.env.FIRECRAWL_API_KEY.valueFrom.secretKeyRef.key (1)
string
controllers.hermes.containers.app.env.FIRECRAWL_API_KEY.valueFrom.secretKeyRef.name (1)
string
controllers.hermes.containers.app.env.FIRECRAWL_API_URL (1)
string
controllers.hermes.containers.app.env.FORGEJO_PAT.valueFrom.secretKeyRef.key (1)
string
controllers.hermes.containers.app.env.FORGEJO_PAT.valueFrom.secretKeyRef.name (1)
string
controllers.hermes.containers.app.env.GATEWAY_ALLOW_ALL_USERS (1)
boolean
controllers.hermes.containers.app.env.GATEWAY_ALLOWED_USERS (1)
string
controllers.hermes.containers.app.env.GIT_AUTHOR_EMAIL (1)
string
controllers.hermes.containers.app.env.GIT_AUTHOR_NAME (1)
string
controllers.hermes.containers.app.env.GIT_COMMITTER_EMAIL (1)
string
controllers.hermes.containers.app.env.GIT_COMMITTER_NAME (1)
string
controllers.hermes.containers.app.env.GIT_CONFIG_COUNT (1)
string
controllers.hermes.containers.app.env.GIT_CONFIG_KEY_0 (1)
string
controllers.hermes.containers.app.env.GIT_CONFIG_KEY_1 (1)
string
controllers.hermes.containers.app.env.GIT_CONFIG_KEY_2 (1)
string
controllers.hermes.containers.app.env.GIT_CONFIG_KEY_3 (1)
string
controllers.hermes.containers.app.env.GIT_CONFIG_KEY_4 (1)
string
controllers.hermes.containers.app.env.GIT_CONFIG_VALUE_0 (1)
string
controllers.hermes.containers.app.env.GIT_CONFIG_VALUE_1 (1)
string
controllers.hermes.containers.app.env.GIT_CONFIG_VALUE_2 (1)
string
controllers.hermes.containers.app.env.GIT_CONFIG_VALUE_3 (1)
string
controllers.hermes.containers.app.env.GIT_CONFIG_VALUE_4 (1)
string
controllers.hermes.containers.app.env.GIT_SSH_COMMAND (1)
string
controllers.hermes.containers.app.env.HASS_URL (1)
string
controllers.hermes.containers.app.env.HERMES_ASSESSMENT_EXCHANGE (1)
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_INSECURE (1)
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_REDIRECT_URI (1)
string
controllers.hermes.containers.app.env.HERMES_GATEWAY_BOOTSTRAP_STATE (1)
string
controllers.hermes.containers.app.env.HOMELAB_GH_TOKEN.valueFrom.secretKeyRef.key (1)
string
controllers.hermes.containers.app.env.HOMELAB_GH_TOKEN.valueFrom.secretKeyRef.name (1)
string
controllers.hermes.containers.app.env.HONCHO_WORKSPACE_ID (1)
string
controllers.hermes.containers.app.env.LM_BASE_URL (1)
string
controllers.hermes.containers.app.env.OPENAI_API_KEY.valueFrom.secretKeyRef.key (1)
string
controllers.hermes.containers.app.env.OPENAI_API_KEY.valueFrom.secretKeyRef.name (1)
string
controllers.hermes.containers.app.env.OPENAI_BASE_URL (1)
string
controllers.hermes.containers.app.env.OPENCODE_GO_BASE_URL (1)
string
controllers.hermes.containers.app.env.PYTHONPATH (1)
string
controllers.hermes.containers.app.image.repository (14)
nousresearch/hermes-agent
string
controllers.hermes.containers.app.image.tag (14)
v2026.9.14@sha256:99641e57ec762c59e54cb44aa6746b7fc68c18b3c5ddb088af54234c613d9294
string
controllers.hermes.containers.app.resources.limits.memory (14)
2Gi
string
controllers.hermes.containers.app.resources.limits.cpu (3)
number
controllers.hermes.containers.app.resources.requests.cpu (14)
100m
string
controllers.hermes.containers.app.resources.requests.memory (13)
1Gi
string
controllers.hermes.containers.app.args[] (13)
- gateway
- run
string
controllers.hermes.containers.app.envFrom[].secretRef.name (10)
hermes-secret
string
controllers.hermes.containers.app.probes.liveness.enabled (10)
true
boolean
controllers.hermes.containers.app.probes.liveness.custom (9)
true
boolean
controllers.hermes.containers.app.probes.liveness.spec.periodSeconds (9)
30
number
controllers.hermes.containers.app.probes.liveness.spec.timeoutSeconds (7)
5
number
controllers.hermes.containers.app.probes.liveness.spec.failureThreshold (6)
5
number
controllers.hermes.containers.app.probes.liveness.spec.httpGet.path (6)
/health
string
controllers.hermes.containers.app.probes.liveness.spec.httpGet.port (6)
8642
number
controllers.hermes.containers.app.probes.liveness.spec.initialDelaySeconds (6)
30
number
controllers.hermes.containers.app.probes.liveness.spec.tcpSocket.port (2)
number
controllers.hermes.containers.app.probes.liveness.spec.exec.command[] (1)
string
controllers.hermes.containers.app.probes.readiness.enabled (10)
true
boolean
controllers.hermes.containers.app.probes.readiness.custom (9)
true
boolean
controllers.hermes.containers.app.probes.readiness.spec.periodSeconds (8)
30
number
controllers.hermes.containers.app.probes.readiness.spec.timeoutSeconds (7)
5
number
controllers.hermes.containers.app.probes.readiness.spec.failureThreshold (6)
5
number
controllers.hermes.containers.app.probes.readiness.spec.httpGet.path (6)
/health
string
controllers.hermes.containers.app.probes.readiness.spec.httpGet.port (6)
8642
number
controllers.hermes.containers.app.probes.readiness.spec.initialDelaySeconds (6)
30
number
controllers.hermes.containers.app.probes.readiness.spec.tcpSocket.port (2)
number
controllers.hermes.containers.app.probes.readiness.spec.exec.command[] (1)
string
controllers.hermes.containers.app.probes.startup.enabled (9)
true
boolean
controllers.hermes.containers.app.probes.startup.custom (5)
true
boolean
controllers.hermes.containers.app.probes.startup.spec.failureThreshold (5)
30
number
controllers.hermes.containers.app.probes.startup.spec.periodSeconds (5)
10
number
controllers.hermes.containers.app.probes.startup.spec.httpGet.path (4)
string
controllers.hermes.containers.app.probes.startup.spec.httpGet.port (4)
number
controllers.hermes.containers.app.probes.startup.spec.initialDelaySeconds (2)
number
controllers.hermes.containers.app.probes.startup.spec.timeoutSeconds (2)
number
controllers.hermes.containers.app.probes.startup.spec.tcpSocket.port (1)
number
controllers.hermes.containers.app.securityContext.allowPrivilegeEscalation (10)
false
boolean
controllers.hermes.containers.app.securityContext.readOnlyRootFilesystem (10)
false
boolean
controllers.hermes.containers.app.securityContext.capabilities.drop[] (8)
- ALL
string
controllers.hermes.containers.app.securityContext.capabilities.add[] (6)
- CHOWN
- DAC_OVERRIDE
- FOWNER
- FSETID
- SETGID
- SETUID
string
controllers.hermes.containers.app.securityContext.runAsGroup (5)
0
number
controllers.hermes.containers.app.securityContext.runAsUser (5)
0
number
controllers.hermes.containers.app.securityContext.runAsNonRoot (3)
false
boolean
controllers.hermes.containers.app.ports[].containerPort (5)
number
controllers.hermes.containers.app.ports[].name (5)
string
controllers.hermes.containers.app.ports[].protocol (5)
TCP
TCP
string
controllers.hermes.containers.app.command[] (2)
string
controllers.hermes.containers.dashboard.args[] (4)
- dashboard
- --host
- "0.0.0.0"
string
controllers.hermes.containers.dashboard.env.GATEWAY_HEALTH_URL (4)
http://localhost:8642
string
controllers.hermes.containers.dashboard.env.TZ (3)
string
controllers.hermes.containers.dashboard.env.HERMES_DASHBOARD_OIDC_SCOPES (1)
string
controllers.hermes.containers.dashboard.env.HERMES_DASHBOARD_PUBLIC_URL (1)
string
controllers.hermes.containers.dashboard.image.repository (4)
nousresearch/hermes-agent
string
controllers.hermes.containers.dashboard.image.tag (4)
v2026.9.14@sha256:99641e57ec762c59e54cb44aa6746b7fc68c18b3c5ddb088af54234c613d9294
string
controllers.hermes.containers.dashboard.resources.limits.memory (4)
1Gi
string
controllers.hermes.containers.dashboard.resources.requests.cpu (3)
string
controllers.hermes.containers.dashboard.resources.requests.memory (2)
string
controllers.hermes.containers.dashboard.envFrom[].secretRef.name (3)
string
controllers.hermes.containers.dashboard.ports[].containerPort (2)
number
controllers.hermes.containers.dashboard.ports[].name (2)
string
controllers.hermes.containers.dashboard.ports[].protocol (2)
string
controllers.hermes.containers.dashboard.command[] (1)
string
controllers.hermes.containers.dashboard.securityContext.runAsGroup (1)
number
controllers.hermes.containers.dashboard.securityContext.runAsUser (1)
number
controllers.hermes.containers.codeserver.args[] (3)
string
controllers.hermes.containers.codeserver.image.repository (3)
ghcr.io/coder/code-server
string
controllers.hermes.containers.codeserver.image.tag (3)
4.137.0@sha256:57ac684d44deb6fa94317b3e8f3e128dd7fb897fffd95b4efcd16f56ce607971
string
controllers.hermes.containers.codeserver.resources.limits.memory (3)
1Gi
string
controllers.hermes.containers.codeserver.resources.requests.cpu (3)
10m
string
controllers.hermes.containers.codeserver.env.TZ (2)
string
controllers.hermes.containers.codeserver.env.DISCORD_WEBHOOK.valueFrom.secretKeyRef.key (1)
string
controllers.hermes.containers.codeserver.env.DISCORD_WEBHOOK.valueFrom.secretKeyRef.name (1)
string
controllers.hermes.containers.codeserver.env.GH_TOKEN.valueFrom.secretKeyRef.key (1)
string
controllers.hermes.containers.codeserver.env.GH_TOKEN.valueFrom.secretKeyRef.name (1)
string
controllers.hermes.containers.codeserver.env.GITHUB_TOKEN.valueFrom.secretKeyRef.key (1)
string
controllers.hermes.containers.codeserver.env.GITHUB_TOKEN.valueFrom.secretKeyRef.name (1)
string
controllers.hermes.containers.codeserver.securityContext.allowPrivilegeEscalation (2)
boolean
controllers.hermes.containers.codeserver.securityContext.capabilities.drop[] (2)
string
controllers.hermes.containers.codeserver.ports[].containerPort (1)
number
controllers.hermes.containers.codeserver.ports[].name (1)
string
controllers.hermes.containers.codeserver.ports[].protocol (1)
string
controllers.hermes.containers.hermes.args[] (2)
string
controllers.hermes.containers.hermes.env.HERMES_DASHBOARD (2)
string
controllers.hermes.containers.hermes.env.HERMES_DASHBOARD_HOST (2)
string
controllers.hermes.containers.hermes.env.HERMES_DASHBOARD_OIDC_ISSUER (2)
string
controllers.hermes.containers.hermes.env.HERMES_DASHBOARD_PUBLIC_URL (2)
string
controllers.hermes.containers.hermes.env.TZ (2)
string
controllers.hermes.containers.hermes.env.API_SERVER_ENABLED (1)
string
controllers.hermes.containers.hermes.env.HERMES_CONFIG (1)
string
controllers.hermes.containers.hermes.env.HERMES_DASHBOARD_OIDC_CLIENT_ID.valueFrom.secretKeyRef.key (1)
string
controllers.hermes.containers.hermes.env.HERMES_DASHBOARD_OIDC_CLIENT_ID.valueFrom.secretKeyRef.name (1)
string
controllers.hermes.containers.hermes.env.HERMES_DASHBOARD_OIDC_CLIENT_ID (1)
string
controllers.hermes.containers.hermes.env.HERMES_DASHBOARD_OIDC_CLIENT_SECRET.valueFrom.secretKeyRef.key (1)
string
controllers.hermes.containers.hermes.env.HERMES_DASHBOARD_OIDC_CLIENT_SECRET.valueFrom.secretKeyRef.name (1)
string
controllers.hermes.containers.hermes.env.HERMES_DASHBOARD_PORT (1)
number
controllers.hermes.containers.hermes.env.HERMES_SKIP_CONFIG_MIGRATION (1)
string
controllers.hermes.containers.hermes.env.HERMES_WRITE_SAFE_ROOT (1)
string
controllers.hermes.containers.hermes.env.MEMINI_BASE_URL (1)
string
controllers.hermes.containers.hermes.env.MEMINI_HOME (1)
string
controllers.hermes.containers.hermes.env.MEMINI_NAMESPACE (1)
string
controllers.hermes.containers.hermes.env.S6_READ_ONLY_ROOT (1)
string
controllers.hermes.containers.hermes.env.S6_YES_I_WANT_A_WORLD_WRITABLE_RUN_BECAUSE_KUBERNETES (1)
string
controllers.hermes.containers.hermes.image.repository (2)
string
controllers.hermes.containers.hermes.image.tag (2)
string
controllers.hermes.containers.hermes.image.pullPolicy (1)
string
controllers.hermes.containers.hermes.probes.liveness.enabled (2)
boolean
controllers.hermes.containers.hermes.probes.liveness.custom (1)
boolean
controllers.hermes.containers.hermes.probes.liveness.spec.failureThreshold (1)
number
controllers.hermes.containers.hermes.probes.liveness.spec.periodSeconds (1)
number
controllers.hermes.containers.hermes.probes.liveness.spec.tcpSocket.port (1)
number
controllers.hermes.containers.hermes.probes.liveness.spec.timeoutSeconds (1)
number
controllers.hermes.containers.hermes.probes.startup.enabled (2)
boolean
controllers.hermes.containers.hermes.probes.startup.custom (1)
boolean
controllers.hermes.containers.hermes.probes.startup.spec.failureThreshold (1)
number
controllers.hermes.containers.hermes.probes.startup.spec.initialDelaySeconds (1)
number
controllers.hermes.containers.hermes.probes.startup.spec.periodSeconds (1)
number
controllers.hermes.containers.hermes.probes.startup.spec.tcpSocket.port (1)
number
controllers.hermes.containers.hermes.probes.startup.spec.timeoutSeconds (1)
number
controllers.hermes.containers.hermes.probes.readiness.custom (1)
boolean
controllers.hermes.containers.hermes.probes.readiness.enabled (1)
boolean
controllers.hermes.containers.hermes.probes.readiness.spec.failureThreshold (1)
number
controllers.hermes.containers.hermes.probes.readiness.spec.periodSeconds (1)
number
controllers.hermes.containers.hermes.probes.readiness.spec.tcpSocket.port (1)
number
controllers.hermes.containers.hermes.probes.readiness.spec.timeoutSeconds (1)
number
controllers.hermes.containers.hermes.resources.limits.memory (2)
string
controllers.hermes.containers.hermes.resources.limits.cpu (1)
string
controllers.hermes.containers.hermes.resources.requests.cpu (2)
string
controllers.hermes.containers.hermes.resources.requests.memory (2)
string
controllers.hermes.containers.hermes.securityContext.capabilities.drop[] (2)
string
controllers.hermes.containers.hermes.securityContext.allowPrivilegeEscalation (1)
boolean
controllers.hermes.containers.hermes.securityContext.readOnlyRootFilesystem (1)
boolean
controllers.hermes.containers.hermes.envFrom[].secretRef.name (1)
string
controllers.hermes.containers.hermes.ports[].containerPort (1)
number
controllers.hermes.containers.hermes.ports[].name (1)
string
controllers.hermes.containers.gateway.args[] (1)
string
controllers.hermes.containers.gateway.env._HERMES_FORCE_GITHUB_TOKEN.valueFrom.secretKeyRef.key (1)
string
controllers.hermes.containers.gateway.env._HERMES_FORCE_GITHUB_TOKEN.valueFrom.secretKeyRef.name (1)
string
controllers.hermes.containers.gateway.env.API_SERVER_ENABLED (1)
boolean
controllers.hermes.containers.gateway.env.API_SERVER_HOST (1)
string
controllers.hermes.containers.gateway.env.API_SERVER_PORT (1)
string
controllers.hermes.containers.gateway.env.CRAWL4AI_API_URL (1)
string
controllers.hermes.containers.gateway.env.HERMES_HOME (1)
string
controllers.hermes.containers.gateway.env.HERMES_STREAM_READ_TIMEOUT (1)
string
controllers.hermes.containers.gateway.env.HERMES_STREAM_STALE_TIMEOUT (1)
string
controllers.hermes.containers.gateway.env.HOME (1)
string
controllers.hermes.containers.gateway.env.HOMEBREW_NO_ANALYTICS (1)
string
controllers.hermes.containers.gateway.env.HOMEBREW_NO_AUTO_UPDATE (1)
string
controllers.hermes.containers.gateway.env.HOMEBREW_NO_ENV_HINTS (1)
string
controllers.hermes.containers.gateway.env.MEMINI_BASE_URL (1)
string
controllers.hermes.containers.gateway.env.MEMINI_NAMESPACE (1)
string
controllers.hermes.containers.gateway.env.OPENAI_BASE_URL (1)
string
controllers.hermes.containers.gateway.env.PATH (1)
string
controllers.hermes.containers.gateway.env.S6_READ_ONLY_ROOT (1)
string
controllers.hermes.containers.gateway.env.S6_YES_I_WANT_A_WORLD_WRITABLE_RUN_BECAUSE_KUBERNETES (1)
string
controllers.hermes.containers.gateway.env.SEARXNG_URL (1)
string
controllers.hermes.containers.gateway.env.TZ (1)
string
controllers.hermes.containers.gateway.envFrom[].secretRef.name (1)
string
controllers.hermes.containers.gateway.image.repository (1)
string
controllers.hermes.containers.gateway.image.tag (1)
string
controllers.hermes.containers.gateway.resources.limits.memory (1)
string
controllers.hermes.containers.gateway.resources.requests.cpu (1)
string
controllers.hermes.containers.gateway.resources.requests.memory (1)
string
controllers.hermes.containers.gateway.securityContext.allowPrivilegeEscalation (1)
boolean
controllers.hermes.containers.gateway.securityContext.capabilities.drop[] (1)
string
controllers.hermes.containers.gateway.securityContext.readOnlyRootFilesystem (1)
boolean
controllers.hermes.containers.merge-broker.args[] (1)
string
controllers.hermes.containers.merge-broker.command[] (1)
string
controllers.hermes.containers.merge-broker.env.GH_CONFIG_DIR (1)
string
controllers.hermes.containers.merge-broker.env.GH_TOKEN.valueFrom.secretKeyRef.key (1)
string
controllers.hermes.containers.merge-broker.env.GH_TOKEN.valueFrom.secretKeyRef.name (1)
string
controllers.hermes.containers.merge-broker.env.HERMES_ASSESSMENT_EXCHANGE (1)
string
controllers.hermes.containers.merge-broker.env.HOME (1)
string
controllers.hermes.containers.merge-broker.env.PATH (1)
string
controllers.hermes.containers.merge-broker.env.TMPDIR (1)
string
controllers.hermes.containers.merge-broker.image.repository (1)
string
controllers.hermes.containers.merge-broker.image.tag (1)
string
controllers.hermes.containers.merge-broker.resources.limits.memory (1)
string
controllers.hermes.containers.merge-broker.resources.requests.cpu (1)
string
controllers.hermes.containers.merge-broker.resources.requests.memory (1)
string
controllers.hermes.containers.merge-broker.securityContext.allowPrivilegeEscalation (1)
boolean
controllers.hermes.containers.merge-broker.securityContext.capabilities.drop[] (1)
string
controllers.hermes.containers.merge-broker.securityContext.readOnlyRootFilesystem (1)
boolean
controllers.hermes.containers.serve.args[] (1)
string
controllers.hermes.containers.serve.command[] (1)
string
controllers.hermes.containers.serve.env.HERMES_DASHBOARD_OIDC_CLIENT_ID (1)
string
controllers.hermes.containers.serve.env.HERMES_DASHBOARD_PUBLIC_URL (1)
string
controllers.hermes.containers.serve.env.HERMES_HOME (1)
string
controllers.hermes.containers.serve.env.HOME (1)
string
controllers.hermes.containers.serve.env.TZ (1)
string
controllers.hermes.containers.serve.envFrom[].secretRef.name (1)
string
controllers.hermes.containers.serve.image.repository (1)
string
controllers.hermes.containers.serve.image.tag (1)
string
controllers.hermes.containers.serve.resources.limits.memory (1)
string
controllers.hermes.containers.serve.resources.requests.cpu (1)
string
controllers.hermes.containers.serve.resources.requests.memory (1)
string
controllers.hermes.containers.serve.securityContext.runAsGroup (1)
number
controllers.hermes.containers.serve.securityContext.runAsUser (1)
number
controllers.hermes.containers.webui.env.GATEWAY_HEALTH_URL (1)
string
controllers.hermes.containers.webui.env.HERMES_HOME (1)
string
controllers.hermes.containers.webui.env.HERMES_WEBUI_AGENT_DIR (1)
string
controllers.hermes.containers.webui.env.HERMES_WEBUI_CHAT_BACKEND (1)
string
controllers.hermes.containers.webui.env.HERMES_WEBUI_DEFAULT_WORKSPACE (1)
string
controllers.hermes.containers.webui.env.HERMES_WEBUI_GATEWAY_API_KEY.secretKeyRef.key (1)
string
controllers.hermes.containers.webui.env.HERMES_WEBUI_GATEWAY_API_KEY.secretKeyRef.name (1)
string
controllers.hermes.containers.webui.env.HERMES_WEBUI_GATEWAY_BASE_URL (1)
string
controllers.hermes.containers.webui.env.HERMES_WEBUI_GATEWAY_USE_RUNS_API (1)
string
controllers.hermes.containers.webui.env.HERMES_WEBUI_HOST (1)
string
controllers.hermes.containers.webui.env.HERMES_WEBUI_OIDC_ALLOW_CLAIM (1)
string
controllers.hermes.containers.webui.env.HERMES_WEBUI_OIDC_ALLOW_VALUES (1)
string
controllers.hermes.containers.webui.env.HERMES_WEBUI_OIDC_CLIENT_ID.secretKeyRef.key (1)
string
controllers.hermes.containers.webui.env.HERMES_WEBUI_OIDC_CLIENT_ID.secretKeyRef.name (1)
string
controllers.hermes.containers.webui.env.HERMES_WEBUI_OIDC_CLIENT_SECRET.secretKeyRef.key (1)
string
controllers.hermes.containers.webui.env.HERMES_WEBUI_OIDC_CLIENT_SECRET.secretKeyRef.name (1)
string
controllers.hermes.containers.webui.env.HERMES_WEBUI_OIDC_ISSUER.secretKeyRef.key (1)
string
controllers.hermes.containers.webui.env.HERMES_WEBUI_OIDC_ISSUER.secretKeyRef.name (1)
string
controllers.hermes.containers.webui.env.HERMES_WEBUI_OIDC_REDIRECT_URI.secretKeyRef.key (1)
string
controllers.hermes.containers.webui.env.HERMES_WEBUI_OIDC_REDIRECT_URI.secretKeyRef.name (1)
string
controllers.hermes.containers.webui.env.HERMES_WEBUI_OIDC_SCOPES (1)
string
controllers.hermes.containers.webui.env.HERMES_WEBUI_PORT (1)
number
controllers.hermes.containers.webui.env.HERMES_WEBUI_STATE_DIR (1)
string
controllers.hermes.containers.webui.env.WANTED_GID (1)
number
controllers.hermes.containers.webui.env.WANTED_UID (1)
number
controllers.hermes.containers.webui.image.repository (1)
string
controllers.hermes.containers.webui.image.tag (1)
string
controllers.hermes.containers.webui.ports[].containerPort (1)
number
controllers.hermes.containers.webui.ports[].name (1)
string
controllers.hermes.containers.webui.ports[].protocol (1)
string
controllers.hermes.containers.webui.probes.liveness.custom (1)
boolean
controllers.hermes.containers.webui.probes.liveness.enabled (1)
boolean
controllers.hermes.containers.webui.probes.liveness.spec.failureThreshold (1)
number
controllers.hermes.containers.webui.probes.liveness.spec.httpGet.path (1)
string
controllers.hermes.containers.webui.probes.liveness.spec.httpGet.port (1)
number
controllers.hermes.containers.webui.probes.liveness.spec.initialDelaySeconds (1)
number
controllers.hermes.containers.webui.probes.liveness.spec.periodSeconds (1)
number
controllers.hermes.containers.webui.probes.liveness.spec.timeoutSeconds (1)
number
controllers.hermes.containers.webui.probes.readiness.custom (1)
boolean
controllers.hermes.containers.webui.probes.readiness.enabled (1)
boolean
controllers.hermes.containers.webui.probes.readiness.spec.failureThreshold (1)
number
controllers.hermes.containers.webui.probes.readiness.spec.httpGet.path (1)
string
controllers.hermes.containers.webui.probes.readiness.spec.httpGet.port (1)
number
controllers.hermes.containers.webui.probes.readiness.spec.initialDelaySeconds (1)
number
controllers.hermes.containers.webui.probes.readiness.spec.periodSeconds (1)
number
controllers.hermes.containers.webui.probes.readiness.spec.timeoutSeconds (1)
number
controllers.hermes.containers.webui.probes.startup.custom (1)
boolean
controllers.hermes.containers.webui.probes.startup.enabled (1)
boolean
controllers.hermes.containers.webui.probes.startup.spec.failureThreshold (1)
number
controllers.hermes.containers.webui.probes.startup.spec.httpGet.path (1)
string
controllers.hermes.containers.webui.probes.startup.spec.httpGet.port (1)
number
controllers.hermes.containers.webui.probes.startup.spec.periodSeconds (1)
number
controllers.hermes.containers.webui.resources.limits.memory (1)
string
controllers.hermes.containers.webui.resources.requests.cpu (1)
string
controllers.hermes.containers.webui.resources.requests.memory (1)
string
controllers.hermes.containers.webui.securityContext.allowPrivilegeEscalation (1)
boolean
controllers.hermes.containers.webui.securityContext.capabilities.drop[] (1)
string
controllers.hermes.containers.webui.securityContext.readOnlyRootFilesystem (1)
boolean
controllers.hermes.containers.webui.securityContext.runAsGroup (1)
number
controllers.hermes.containers.webui.securityContext.runAsNonRoot (1)
boolean
controllers.hermes.containers.webui.securityContext.runAsUser (1)
number
controllers.hermes.containers.webui.securityContext.seccompProfile.type (1)
string
controllers.hermes.initContainers.init.command[] (9)
string
controllers.hermes.initContainers.init.image.repository (9)
docker.io/library/alpine
string
controllers.hermes.initContainers.init.image.tag (9)
3.24
string
controllers.hermes.initContainers.init.securityContext.allowPrivilegeEscalation (5)
false
boolean
controllers.hermes.initContainers.init.securityContext.runAsGroup (5)
number
controllers.hermes.initContainers.init.securityContext.runAsUser (5)
number
controllers.hermes.initContainers.init.securityContext.capabilities.drop[] (4)
- ALL
string
controllers.hermes.initContainers.init.securityContext.capabilities.add[] (1)
string
controllers.hermes.initContainers.init.resources.requests.cpu (1)
string
controllers.hermes.initContainers.init.resources.requests.memory (1)
string
controllers.hermes.initContainers.install-tools.command[] (5)
string
controllers.hermes.initContainers.install-tools.image.repository (5)
nousresearch/hermes-agent
string
controllers.hermes.initContainers.install-tools.image.tag (5)
v2026.9.14@sha256:99641e57ec762c59e54cb44aa6746b7fc68c18b3c5ddb088af54234c613d9294
string
controllers.hermes.initContainers.install-tools.securityContext.allowPrivilegeEscalation (4)
false
boolean
controllers.hermes.initContainers.install-tools.securityContext.capabilities.drop[] (3)
- ALL
string
controllers.hermes.initContainers.install-tools.securityContext.runAsGroup (3)
number
controllers.hermes.initContainers.install-tools.securityContext.runAsUser (2)
number
controllers.hermes.initContainers.install-tools.resources.requests.cpu (1)
string
controllers.hermes.initContainers.install-tools.resources.requests.memory (1)
string
controllers.hermes.initContainers.copy-agent-source.command[] (3)
string
controllers.hermes.initContainers.copy-agent-source.image.repository (3)
string
controllers.hermes.initContainers.copy-agent-source.image.tag (3)
string
controllers.hermes.initContainers.copy-agent-source.securityContext.allowPrivilegeEscalation (3)
false
boolean
controllers.hermes.initContainers.copy-agent-source.securityContext.capabilities.drop[] (3)
- ALL
string
controllers.hermes.initContainers.copy-agent-source.securityContext.runAsGroup (3)
number
controllers.hermes.initContainers.copy-agent-source.securityContext.runAsUser (3)
number
controllers.hermes.initContainers.fix-run.command[] (2)
string
controllers.hermes.initContainers.fix-run.image.repository (2)
string
controllers.hermes.initContainers.fix-run.image.tag (2)
string
controllers.hermes.initContainers.fix-run.securityContext.runAsGroup (2)
number
controllers.hermes.initContainers.fix-run.securityContext.runAsNonRoot (2)
boolean
controllers.hermes.initContainers.fix-run.securityContext.runAsUser (2)
number
controllers.hermes.initContainers.fix-run.securityContext.allowPrivilegeEscalation (1)
boolean
controllers.hermes.initContainers.fix-run.resources.requests.cpu (1)
string
controllers.hermes.initContainers.fix-run.resources.requests.memory (1)
string
controllers.hermes.initContainers.00-fix-permissions.command[] (1)
string
controllers.hermes.initContainers.00-fix-permissions.image.repository (1)
string
controllers.hermes.initContainers.00-fix-permissions.image.tag (1)
string
controllers.hermes.initContainers.00-fix-permissions.securityContext.allowPrivilegeEscalation (1)
boolean
controllers.hermes.initContainers.00-fix-permissions.securityContext.capabilities.add[] (1)
string
controllers.hermes.initContainers.00-fix-permissions.securityContext.capabilities.drop[] (1)
string
controllers.hermes.initContainers.00-fix-permissions.securityContext.readOnlyRootFilesystem (1)
boolean
controllers.hermes.initContainers.00-fix-permissions.securityContext.runAsGroup (1)
number
controllers.hermes.initContainers.00-fix-permissions.securityContext.runAsNonRoot (1)
boolean
controllers.hermes.initContainers.00-fix-permissions.securityContext.runAsUser (1)
number
controllers.hermes.initContainers.01-agent-source.command[] (1)
string
controllers.hermes.initContainers.01-agent-source.image.repository (1)
string
controllers.hermes.initContainers.01-agent-source.image.tag (1)
string
controllers.hermes.initContainers.01-agent-source.securityContext.allowPrivilegeEscalation (1)
boolean
controllers.hermes.initContainers.01-agent-source.securityContext.runAsGroup (1)
number
controllers.hermes.initContainers.01-agent-source.securityContext.runAsUser (1)
number
controllers.hermes.initContainers.02-init-config.command[] (1)
string
controllers.hermes.initContainers.02-init-config.envFrom[].secretRef.name (1)
string
controllers.hermes.initContainers.02-init-config.image.repository (1)
string
controllers.hermes.initContainers.02-init-config.image.tag (1)
string
controllers.hermes.initContainers.02-init-config.securityContext.allowPrivilegeEscalation (1)
boolean
controllers.hermes.initContainers.02-init-config.securityContext.capabilities.drop[] (1)
string
controllers.hermes.initContainers.02-init-config.securityContext.runAsGroup (1)
number
controllers.hermes.initContainers.02-init-config.securityContext.runAsUser (1)
number
controllers.hermes.initContainers.03-install-tools.command[] (1)
string
controllers.hermes.initContainers.03-install-tools.env.GH_CONFIG_DIR (1)
string
controllers.hermes.initContainers.03-install-tools.envFrom[].secretRef.name (1)
string
controllers.hermes.initContainers.03-install-tools.image.repository (1)
string
controllers.hermes.initContainers.03-install-tools.image.tag (1)
string
controllers.hermes.initContainers.03-install-tools.securityContext.allowPrivilegeEscalation (1)
boolean
controllers.hermes.initContainers.03-install-tools.securityContext.capabilities.drop[] (1)
string
controllers.hermes.initContainers.03-install-tools.securityContext.runAsGroup (1)
number
controllers.hermes.initContainers.03-install-tools.securityContext.runAsUser (1)
number
controllers.hermes.initContainers.bootstrap.command[] (1)
string
controllers.hermes.initContainers.bootstrap.env.DISCORD_ALERTS_CHANNEL (1)
string
controllers.hermes.initContainers.bootstrap.env.DISCORD_REVIEWS_CHANNEL (1)
string
controllers.hermes.initContainers.bootstrap.env.GH_TOKEN.valueFrom.secretKeyRef.key (1)
string
controllers.hermes.initContainers.bootstrap.env.GH_TOKEN.valueFrom.secretKeyRef.name (1)
string
controllers.hermes.initContainers.bootstrap.image.repository (1)
string
controllers.hermes.initContainers.bootstrap.image.tag (1)
string
controllers.hermes.initContainers.bootstrap.securityContext.allowPrivilegeEscalation (1)
boolean
controllers.hermes.initContainers.bootstrap.securityContext.capabilities.drop[] (1)
string
controllers.hermes.initContainers.bootstrap.securityContext.readOnlyRootFilesystem (1)
boolean
controllers.hermes.initContainers.copy-config.command[] (1)
string
controllers.hermes.initContainers.copy-config.image.repository (1)
string
controllers.hermes.initContainers.copy-config.image.tag (1)
string
controllers.hermes.initContainers.daemon.env.DOCKER_TLS_CERTDIR (1)
string
controllers.hermes.initContainers.daemon.image.repository (1)
string
controllers.hermes.initContainers.daemon.image.tag (1)
string
controllers.hermes.initContainers.daemon.probes.liveness.custom (1)
boolean
controllers.hermes.initContainers.daemon.probes.liveness.enabled (1)
boolean
controllers.hermes.initContainers.daemon.probes.liveness.spec.exec.command[] (1)
string
controllers.hermes.initContainers.daemon.probes.liveness.spec.failureThreshold (1)
number
controllers.hermes.initContainers.daemon.probes.liveness.spec.periodSeconds (1)
number
controllers.hermes.initContainers.daemon.probes.liveness.spec.timeoutSeconds (1)
number
controllers.hermes.initContainers.daemon.probes.readiness.custom (1)
boolean
controllers.hermes.initContainers.daemon.probes.readiness.enabled (1)
boolean
controllers.hermes.initContainers.daemon.probes.readiness.spec.exec.command[] (1)
string
controllers.hermes.initContainers.daemon.probes.readiness.spec.failureThreshold (1)
number
controllers.hermes.initContainers.daemon.probes.readiness.spec.periodSeconds (1)
number
controllers.hermes.initContainers.daemon.probes.readiness.spec.timeoutSeconds (1)
number
controllers.hermes.initContainers.daemon.probes.startup.custom (1)
boolean
controllers.hermes.initContainers.daemon.probes.startup.enabled (1)
boolean
controllers.hermes.initContainers.daemon.probes.startup.spec.exec.command[] (1)
string
controllers.hermes.initContainers.daemon.probes.startup.spec.failureThreshold (1)
number
controllers.hermes.initContainers.daemon.probes.startup.spec.periodSeconds (1)
number
controllers.hermes.initContainers.daemon.probes.startup.spec.timeoutSeconds (1)
number
controllers.hermes.initContainers.daemon.restartPolicy (1)
string
controllers.hermes.initContainers.daemon.securityContext.allowPrivilegeEscalation (1)
boolean
controllers.hermes.initContainers.daemon.securityContext.privileged (1)
boolean
controllers.hermes.initContainers.daemon.securityContext.runAsGroup (1)
number
controllers.hermes.initContainers.daemon.securityContext.runAsUser (1)
number
controllers.hermes.initContainers.prepare-merge-broker.command[] (1)
string
controllers.hermes.initContainers.prepare-merge-broker.image.repository (1)
string
controllers.hermes.initContainers.prepare-merge-broker.image.tag (1)
string
controllers.hermes.initContainers.prepare-merge-broker.securityContext.allowPrivilegeEscalation (1)
boolean
controllers.hermes.initContainers.prepare-merge-broker.securityContext.capabilities.drop[] (1)
string
controllers.hermes.initContainers.prepare-merge-broker.securityContext.readOnlyRootFilesystem (1)
boolean
controllers.hermes.initContainers.seed-config.command[] (1)
string
controllers.hermes.initContainers.seed-config.image.repository (1)
string
controllers.hermes.initContainers.seed-config.image.tag (1)
string
controllers.hermes.initContainers.seed-config.securityContext.allowPrivilegeEscalation (1)
boolean
controllers.hermes.initContainers.seed-config.securityContext.capabilities.drop[] (1)
string
controllers.hermes.initContainers.seed-config.securityContext.readOnlyRootFilesystem (1)
boolean
controllers.hermes.initContainers.seed-tools.command[] (1)
string
controllers.hermes.initContainers.seed-tools.image.repository (1)
string
controllers.hermes.initContainers.seed-tools.image.tag (1)
string
controllers.hermes.initContainers.seed-tools.securityContext.allowPrivilegeEscalation (1)
boolean
controllers.hermes.initContainers.seed-tools.securityContext.capabilities.drop[] (1)
string
controllers.hermes.initContainers.seed-tools.securityContext.readOnlyRootFilesystem (1)
boolean
controllers.hermes.initContainers.verify-read-token.command[] (1)
string
controllers.hermes.initContainers.verify-read-token.env.GH_TOKEN.valueFrom.secretKeyRef.key (1)
string
controllers.hermes.initContainers.verify-read-token.env.GH_TOKEN.valueFrom.secretKeyRef.name (1)
string
controllers.hermes.initContainers.verify-read-token.image.repository (1)
string
controllers.hermes.initContainers.verify-read-token.image.tag (1)
string
controllers.hermes.initContainers.verify-read-token.securityContext.allowPrivilegeEscalation (1)
boolean
controllers.hermes.initContainers.verify-read-token.securityContext.capabilities.drop[] (1)
string
controllers.hermes.initContainers.verify-read-token.securityContext.readOnlyRootFilesystem (1)
boolean
controllers.hermes.strategy (8)
Recreate
string
controllers.hermes.replicas (3)
1
number
controllers.hermes.type (3)
deployment
string
controllers.hermes.serviceAccount.name (2)
string
controllers.hermes.serviceAccount.identifier (1)
string
controllers.hermes.pod.automountServiceAccountToken (1)
boolean
controllers.hermes.pod.nodeSelector."kubernetes.io/hostname" (1)
string
controllers.hermes.pod.securityContext.fsGroup (1)
number
controllers.hermes.pod.securityContext.fsGroupChangePolicy (1)
string
controllers.hermes.pod.securityContext.runAsGroup (1)
number
controllers.hermes.pod.securityContext.runAsNonRoot (1)
boolean
controllers.hermes.pod.securityContext.runAsUser (1)
number
controllers.hermes.pod.securityContext.seccompProfile.type (1)
string
controllers.codeserver.containers.codeserver.args[] (1)
string
controllers.codeserver.containers.codeserver.env.GOPATH (1)
string
controllers.codeserver.containers.codeserver.env.HOME (1)
string
controllers.codeserver.containers.codeserver.env.HOMEBREW_CELLAR (1)
string
controllers.codeserver.containers.codeserver.env.HOMEBREW_PREFIX (1)
string
controllers.codeserver.containers.codeserver.env.HOMEBREW_REPOSITORY (1)
string
controllers.codeserver.containers.codeserver.env.PATH (1)
string
controllers.codeserver.containers.codeserver.env.TZ (1)
string
controllers.codeserver.containers.codeserver.image.repository (1)
string
controllers.codeserver.containers.codeserver.image.tag (1)
string
controllers.codeserver.containers.codeserver.resources.limits.memory (1)
string
controllers.codeserver.containers.codeserver.resources.requests.cpu (1)
string
controllers.codeserver.pod.affinity.podAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchLabels."app.kubernetes.io/controller" (1)
string
controllers.codeserver.pod.affinity.podAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchLabels."app.kubernetes.io/name" (1)
string
controllers.codeserver.pod.affinity.podAffinity.requiredDuringSchedulingIgnoredDuringExecution[].topologyKey (1)
string
controllers.codeserver.pod.securityContext.runAsGroup (1)
number
controllers.codeserver.pod.securityContext.runAsUser (1)
number
controllers.codeserver.strategy (1)
string
defaultPodOptions.securityContext.fsGroup (15)
10000
number
defaultPodOptions.securityContext.fsGroupChangePolicy (14)
OnRootMismatch
string
defaultPodOptions.securityContext.seccompProfile.type (12)
RuntimeDefault
string
defaultPodOptions.securityContext.runAsGroup (9)
10000
number
defaultPodOptions.securityContext.runAsUser (9)
10000
number
defaultPodOptions.securityContext.runAsNonRoot (5)
true
boolean
defaultPodOptions.automountServiceAccountToken (5)
true
boolean
defaultPodOptions.terminationGracePeriodSeconds (5)
120
number
defaultPodOptions.runtimeClassName (3)
gvisor
string
defaultPodOptions.dnsConfig.options[].name (2)
string
defaultPodOptions.dnsConfig.options[].value (2)
string
defaultPodOptions.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].key (1)
string
defaultPodOptions.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].operator (1)
string
defaultPodOptions.labels."network.home.arpa/from-envoy-internal" (1)
string
defaultPodOptions.labels."network.home.arpa/to-envoy-external" (1)
string
defaultPodOptions.nodeSelector."kubernetes.io/arch" (1)
string
persistence.data.existingClaim (12)
hermes
string
persistence.data.globalMounts[].path (9)
/opt/data
string
persistence.data.advancedMounts.hermes.app[].path (5)
/opt/data
string
persistence.data.advancedMounts.hermes.init[].path (3)
/opt/data
string
persistence.data.advancedMounts.hermes.install-tools[].path (3)
/opt/data
string
persistence.data.advancedMounts.hermes.codeserver[].path (2)
string
persistence.data.advancedMounts.hermes.02-init-config[].path (1)
string
persistence.data.advancedMounts.hermes.03-install-tools[].path (1)
string
persistence.data.advancedMounts.hermes.bootstrap[].path (1)
string
persistence.data.advancedMounts.hermes.copy-agent-source[].path (1)
string
persistence.data.advancedMounts.hermes.dashboard[].path (1)
string
persistence.data.advancedMounts.hermes.webui[].path (1)
string
persistence.data.accessMode (2)
string
persistence.data.size (2)
string
persistence.data.type (2)
string
persistence.data.dataSourceRef.apiGroup (1)
string
persistence.data.dataSourceRef.kind (1)
string
persistence.data.dataSourceRef.name (1)
string
persistence.data.forceRename (1)
string
persistence.data.labels.homelab/backup-resource (1)
string
persistence.data.storageClass (1)
string
persistence.tmp.type (12)
emptyDir
string
persistence.tmp.globalMounts[].path (10)
/tmp
string
persistence.tmp.advancedMounts.hermes.app[].path (1)
string
persistence.tmp.advancedMounts.hermes.bootstrap[].path (1)
string
persistence.tmp.advancedMounts.hermes.merge-broker[].path (1)
string
persistence.tmp.advancedMounts.hermes.merge-broker[].readOnly (1)
boolean
persistence.tmp.sizeLimit (1)
string
persistence.config.name (10)
hermes-config
string
persistence.config.type (10)
configMap
string
persistence.config.defaultMode (7)
493
number
persistence.config.globalMounts[].path (7)
/opt/data
string
persistence.config.globalMounts[].subPath (3)
config.yaml
string
persistence.config.globalMounts[].readOnly (2)
boolean
persistence.config.advancedMounts.hermes.init[].path (3)
string
persistence.config.advancedMounts.hermes.init[].subPath (3)
string
persistence.config.advancedMounts.hermes.app[].path (1)
string
persistence.config.advancedMounts.hermes.app[].readOnly (1)
boolean
persistence.config.advancedMounts.hermes.app[].subPath (1)
string
persistence.config.advancedMounts.hermes.bootstrap[].path (1)
string
persistence.config.advancedMounts.hermes.bootstrap[].readOnly (1)
boolean
persistence.config.advancedMounts.hermes.bootstrap[].subPath (1)
string
persistence.config.advancedMounts.hermes.copy-config[].path (1)
string
persistence.config.advancedMounts.hermes.copy-config[].subPath (1)
string
persistence.config.advancedMounts.hermes.seed-config[].path (1)
string
persistence.config.advancedMounts.hermes.seed-config[].readOnly (1)
boolean
persistence.config.advancedMounts.hermes.seed-config[].subPath (1)
string
persistence.config.existingClaim (3)
string
persistence.run.type (7)
emptyDir
string
persistence.run.advancedMounts.hermes.app[].path (4)
/run
string
persistence.run.advancedMounts.hermes.00-fix-permissions[].path (1)
string
persistence.run.advancedMounts.hermes.bootstrap[].path (1)
string
persistence.run.globalMounts[].path (3)
/run
string
persistence.run.medium (1)
string
persistence.run.sizeLimit (1)
string
persistence.agent-source.advancedMounts.hermes.app[].path (4)
/opt/hermes
string
persistence.agent-source.advancedMounts.hermes.copy-agent-source[].path (3)
/agent-src
string
persistence.agent-source.advancedMounts.hermes.install-tools[].path (3)
/opt/hermes
string
persistence.agent-source.advancedMounts.hermes.01-agent-source[].path (1)
string
persistence.agent-source.advancedMounts.hermes.03-install-tools[].path (1)
string
persistence.agent-source.advancedMounts.hermes.dashboard[].path (1)
string
persistence.agent-source.advancedMounts.hermes.webui[].path (1)
string
persistence.agent-source.type (4)
emptyDir
string
persistence.config-yaml.advancedMounts.hermes.init[].path (3)
/run/config/config.yaml
string
persistence.config-yaml.advancedMounts.hermes.init[].subPath (3)
config.yaml
string
persistence.config-yaml.defaultMode (3)
493
number
persistence.config-yaml.name (3)
hermes-configmap
string
persistence.config-yaml.type (3)
configMap
string
persistence.configmap.defaultMode (2)
number
persistence.configmap.globalMounts[].path (2)
string
persistence.configmap.globalMounts[].subPath (2)
string
persistence.configmap.name (2)
string
persistence.configmap.type (2)
string
persistence.tmpfs.globalMounts[].path (2)
string
persistence.tmpfs.globalMounts[].subPath (2)
string
persistence.tmpfs.type (2)
string
persistence.assessment-exchange.advancedMounts.hermes.app[].path (1)
string
persistence.assessment-exchange.advancedMounts.hermes.merge-broker[].path (1)
string
persistence.assessment-exchange.type (1)
string
persistence.bootstrap.advancedMounts.hermes.bootstrap[].path (1)
string
persistence.bootstrap.advancedMounts.hermes.bootstrap[].readOnly (1)
boolean
persistence.bootstrap.advancedMounts.hermes.prepare-merge-broker[].path (1)
string
persistence.bootstrap.advancedMounts.hermes.prepare-merge-broker[].readOnly (1)
boolean
persistence.bootstrap.advancedMounts.hermes.verify-read-token[].path (1)
string
persistence.bootstrap.advancedMounts.hermes.verify-read-token[].readOnly (1)
boolean
persistence.bootstrap.name (1)
string
persistence.bootstrap.type (1)
string
persistence.certs.globalMounts[].path (1)
string
persistence.certs.type (1)
string
persistence.config-secret.defaultMode (1)
number
persistence.config-secret.globalMounts[].path (1)
string
persistence.config-secret.globalMounts[].subPath (1)
string
persistence.config-secret.name (1)
string
persistence.config-secret.type (1)
string
persistence.dev-shm.globalMounts[].path (1)
string
persistence.dev-shm.medium (1)
string
persistence.dev-shm.sizeLimit (1)
string
persistence.dev-shm.type (1)
string
persistence.gallery.globalMounts[].path (1)
string
persistence.gallery.path (1)
string
persistence.gallery.server (1)
string
persistence.gallery.type (1)
string
persistence.homebrew.accessMode (1)
string
persistence.homebrew.advancedMounts.hermes.gateway[].path (1)
string
persistence.homebrew.advancedMounts.hermes.seed-tools[].path (1)
string
persistence.homebrew.forceRename (1)
string
persistence.homebrew.size (1)
string
persistence.homebrew.storageClass (1)
string
persistence.homebrew.type (1)
string
persistence.media.globalMounts[].path (1)
string
persistence.media.globalMounts[].readOnly (1)
boolean
persistence.media.path (1)
string
persistence.media.server (1)
string
persistence.media.type (1)
string
persistence.memini-plugin.advancedMounts.hermes.app[].path (1)
string
persistence.memini-plugin.advancedMounts.hermes.app[].readOnly (1)
boolean
persistence.memini-plugin.name (1)
string
persistence.memini-plugin.type (1)
string
persistence.merge-broker-state.advancedMounts.hermes.merge-broker[].path (1)
string
persistence.merge-broker-state.existingClaim (1)
string
persistence.merge-broker-tmp.advancedMounts.hermes.merge-broker[].path (1)
string
persistence.merge-broker-tmp.type (1)
string
persistence.merge-broker.advancedMounts.hermes.merge-broker[].path (1)
string
persistence.merge-broker.advancedMounts.hermes.merge-broker[].readOnly (1)
boolean
persistence.merge-broker.advancedMounts.hermes.prepare-merge-broker[].path (1)
string
persistence.merge-broker.type (1)
string
persistence.nfs.globalMounts[].path (1)
string
persistence.nfs.path (1)
string
persistence.nfs.server (1)
string
persistence.nfs.type (1)
string
persistence.plugin-agentmemory.globalMounts[].path (1)
string
persistence.plugin-agentmemory.name (1)
string
persistence.plugin-agentmemory.type (1)
string
persistence.private-prompt-runtime.advancedMounts.hermes.app[].path (1)
string
persistence.private-prompt-runtime.advancedMounts.hermes.app[].readOnly (1)
boolean
persistence.private-prompt-runtime.advancedMounts.hermes.bootstrap[].path (1)
string
persistence.private-prompt-runtime.type (1)
string
persistence.private-runner-runtime.advancedMounts.hermes.app[].path (1)
string
persistence.private-runner-runtime.advancedMounts.hermes.app[].readOnly (1)
boolean
persistence.private-runner-runtime.advancedMounts.hermes.bootstrap[].path (1)
string
persistence.private-runner-runtime.type (1)
string
persistence.private-skill-runtime.advancedMounts.hermes.app[].path (1)
string
persistence.private-skill-runtime.advancedMounts.hermes.app[].readOnly (1)
boolean
persistence.private-skill-runtime.advancedMounts.hermes.bootstrap[].path (1)
string
persistence.private-skill-runtime.type (1)
string
persistence.private-skills.advancedMounts.hermes.bootstrap[].path (1)
string
persistence.private-skills.advancedMounts.hermes.bootstrap[].readOnly (1)
boolean
persistence.private-skills.advancedMounts.hermes.prepare-merge-broker[].path (1)
string
persistence.private-skills.advancedMounts.hermes.prepare-merge-broker[].readOnly (1)
boolean
persistence.private-skills.name (1)
string
persistence.private-skills.type (1)
string
persistence.renovate-workspace.advancedMounts.hermes.00-fix-permissions[].path (1)
string
persistence.renovate-workspace.advancedMounts.hermes.app[].path (1)
string
persistence.renovate-workspace.advancedMounts.hermes.bootstrap[].path (1)
string
persistence.renovate-workspace.type (1)
string
persistence.service-account.advancedMounts.hermes.app[].path (1)
string
persistence.service-account.advancedMounts.hermes.app[].readOnly (1)
boolean
persistence.service-account.advancedMounts.hermes.merge-broker[].path (1)
string
persistence.service-account.advancedMounts.hermes.merge-broker[].readOnly (1)
boolean
persistence.service-account.type (1)
string
persistence.service-account.volumeSpec.projected.defaultMode (1)
number
persistence.service-account.volumeSpec.projected.sources[].configMap.items[].key (1)
string
persistence.service-account.volumeSpec.projected.sources[].configMap.items[].path (1)
string
persistence.service-account.volumeSpec.projected.sources[].configMap.name (1)
string
persistence.service-account.volumeSpec.projected.sources[].downwardAPI.items[].fieldRef.apiVersion (1)
string
persistence.service-account.volumeSpec.projected.sources[].downwardAPI.items[].fieldRef.fieldPath (1)
string
persistence.service-account.volumeSpec.projected.sources[].downwardAPI.items[].path (1)
string
persistence.service-account.volumeSpec.projected.sources[].serviceAccountToken.expirationSeconds (1)
number
persistence.service-account.volumeSpec.projected.sources[].serviceAccountToken.path (1)
string
persistence.skill-cluster-health.advancedMounts.hermes.init[].path (1)
string
persistence.skill-cluster-health.advancedMounts.hermes.init[].subPath (1)
string
persistence.skill-cluster-health.defaultMode (1)
number
persistence.skill-cluster-health.name (1)
string
persistence.skill-cluster-health.type (1)
string
persistence.skill-commit-watcher.advancedMounts.hermes.init[].path (1)
string
persistence.skill-commit-watcher.defaultMode (1)
number
persistence.skill-commit-watcher.name (1)
string
persistence.skill-commit-watcher.type (1)
string
persistence.skill-readme-sync.advancedMounts.hermes.init[].path (1)
string
persistence.skill-readme-sync.advancedMounts.hermes.init[].subPath (1)
string
persistence.skill-readme-sync.defaultMode (1)
number
persistence.skill-readme-sync.name (1)
string
persistence.skill-readme-sync.type (1)
string
persistence.soul.globalMounts[].path (1)
string
persistence.soul.globalMounts[].subPath (1)
string
persistence.soul.name (1)
string
persistence.soul.type (1)
string
persistence.tools.advancedMounts.hermes.app[].path (1)
string
persistence.tools.advancedMounts.hermes.bootstrap[].path (1)
string
persistence.tools.advancedMounts.hermes.prepare-merge-broker[].path (1)
string
persistence.tools.advancedMounts.hermes.prepare-merge-broker[].readOnly (1)
boolean
persistence.tools.type (1)
string
persistence.webui-data.advancedMounts.hermes.webui[].path (1)
string
persistence.webui-data.type (1)
string
service.app.controller (11)
hermes
string
service.app.ports.dashboard.port (6)
9119
number
service.app.ports.http.port (6)
8642
number
service.app.ports.gateway.port (5)
8642
number
service.app.ports.codeserver.port (3)
12321
number
service.app.ports.api.port (1)
number
service.app.ports.webui.port (1)
number
service.app.ipFamilies[] (3)
- IPv4
string
service.dashboard.controller (5)
hermes
string
service.dashboard.ports.http.port (5)
9119
number
service.hermes.controller (3)
hermes
string
service.hermes.ports.http.port (2)
number
service.hermes.ports.agent.port (1)
number
service.hermes.ports.dashboard.port (1)
number
service.hermes.primary (1)
boolean
service.api.controller (1)
string
service.api.ports.http.port (1)
number
service.codeserver.controller (1)
string
service.codeserver.ports.http.port (1)
number
service.serve.controller (1)
string
service.serve.ports.http.port (1)
number
service.webhook.controller (1)
string
service.webhook.ports.http.port (1)
number
route.app.hostnames[] (7)
string
route.app.parentRefs[].name (7)
envoy-internal
string
route.app.parentRefs[].namespace (7)
network
string
route.app.parentRefs[].kind (1)
string
route.app.parentRefs[].sectionName (1)
string
route.app.rules[].backendRefs[].port (7)
9119
number, string
route.app.rules[].backendRefs[].identifier (6)
app
string
route.app.rules[].backendRefs[].name (1)
string
route.app.rules[].matches[].path.type (1)
string
route.app.rules[].matches[].path.value (1)
string
route.app.enabled (1)
boolean
route.codeserver.hostnames[] (4)
string
route.codeserver.parentRefs[].name (4)
envoy-internal
string
route.codeserver.parentRefs[].namespace (4)
network
string
route.codeserver.parentRefs[].sectionName (1)
string
route.codeserver.rules[].backendRefs[].identifier (4)
app
string
route.codeserver.rules[].backendRefs[].port (4)
number, string
route.dashboard.hostnames[] (4)
string
route.dashboard.parentRefs[].name (4)
string
route.dashboard.parentRefs[].namespace (4)
string
route.dashboard.parentRefs[].sectionName (3)
string
route.dashboard.parentRefs[].kind (1)
string
route.dashboard.rules[].backendRefs[].port (4)
http
number, string
route.dashboard.rules[].backendRefs[].identifier (3)
dashboard
string
route.dashboard.rules[].backendRefs[].name (1)
string
route.dashboard.rules[].filters[].extensionRef.group (1)
string
route.dashboard.rules[].filters[].extensionRef.kind (1)
string
route.dashboard.rules[].filters[].extensionRef.name (1)
string
route.dashboard.rules[].filters[].type (1)
string
route.dashboard.rules[].matches[].path.type (1)
string
route.dashboard.rules[].matches[].path.value (1)
string
route.dashboard.annotations."gatus.home-operations.com/endpoint" (1)
string
route.dashboard.enabled (1)
boolean
route.hermes.hostnames[] (1)
string
route.hermes.parentRefs[].name (1)
string
route.hermes.parentRefs[].namespace (1)
string
route.hermes.parentRefs[].sectionName (1)
string
route.hermes.rules[].backendRefs[].identifier (1)
string
route.hermes.rules[].backendRefs[].port (1)
string
route.hermes.rules[].filters[].requestHeaderModifier.set[].name (1)
string
route.hermes.rules[].filters[].requestHeaderModifier.set[].value (1)
string
route.hermes.rules[].filters[].type (1)
string
route.internal.enabled (1)
boolean
route.internal.hostnames[] (1)
string
route.internal.parentRefs[].name (1)
string
route.internal.parentRefs[].namespace (1)
string
route.internal.parentRefs[].sectionName (1)
string
route.internal.rules[].backendRefs[].identifier (1)
string
route.internal.rules[].backendRefs[].port (1)
number
rbac.bindings.hermes-read-all.roleRef.identifier (6)
hermes-read-all
string
rbac.bindings.hermes-read-all.subjects[].identifier (6)
hermes
string
rbac.bindings.hermes-read-all.subjects[].serviceAccount (6)
hermes
string
rbac.bindings.hermes-read-all.type (6)
ClusterRoleBinding
string
rbac.bindings.hermes-exec-deploy.roleRef.identifier (4)
hermes-exec-deploy
string
rbac.bindings.hermes-exec-deploy.subjects[].identifier (4)
hermes
string
rbac.bindings.hermes-exec-deploy.subjects[].namespace (4)
string
rbac.bindings.hermes-exec-deploy.subjects[].serviceAccount (4)
hermes
string
rbac.bindings.hermes-exec-deploy.type (4)
RoleBinding
string
rbac.bindings.hermes-pod-delete.roleRef.identifier (4)
hermes-pod-delete
string
rbac.bindings.hermes-pod-delete.subjects[].identifier (4)
hermes
string
rbac.bindings.hermes-pod-delete.subjects[].serviceAccount (4)
hermes
string
rbac.bindings.hermes-pod-delete.type (4)
ClusterRoleBinding
string
rbac.bindings.hermes-cluster-ops.roleRef.identifier (1)
string
rbac.bindings.hermes-cluster-ops.subjects[].identifier (1)
string
rbac.bindings.hermes-cluster-ops.subjects[].serviceAccount (1)
string
rbac.bindings.hermes-cluster-ops.type (1)
string
rbac.bindings.hermes-cluster.roleRef.identifier (1)
string
rbac.bindings.hermes-cluster.roleRef.kind (1)
string
rbac.bindings.hermes-cluster.subjects[].identifier (1)
string
rbac.bindings.hermes-cluster.subjects[].kind (1)
string
rbac.bindings.hermes-cluster.type (1)
string
rbac.bindings.hermes-write-restricted.roleRef.identifier (1)
string
rbac.bindings.hermes-write-restricted.subjects[].identifier (1)
string
rbac.bindings.hermes-write-restricted.subjects[].serviceAccount (1)
string
rbac.bindings.hermes-write-restricted.type (1)
string
rbac.roles.hermes-read-all.rules[].apiGroups[] (6)
-
- apps
- batch
- networking.k8s.io
- storage.k8s.io
- helm.toolkit.fluxcd.io
- kustomize.toolkit.fluxcd.io
- source.toolkit.fluxcd.io
- external-secrets.io
string
rbac.roles.hermes-read-all.rules[].resources[] (6)
- pods
- pods/log
- nodes
- services
- namespaces
- configmaps
- persistentvolumes
- persistentvolumeclaims
- endpoints
- resourcequotas
- limitranges
- serviceaccounts
- events
- deployments
- daemonsets
- statefulsets
- replicasets
- controllerrevisions
- jobs
- cronjobs
- ingresses
- ingressclasses
- networkpolicies
- storageclasses
- csinodes
- csidrivers
- volumeattachments
- helmreleases
- kustomizations
- gitrepositories
- helmrepositories
- ocirepositories
- buckets
- helmcharts
- externalsecrets
- secretstores
- clustersecretstores
string
rbac.roles.hermes-read-all.rules[].verbs[] (6)
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
string
rbac.roles.hermes-read-all.type (6)
ClusterRole
string
rbac.roles.hermes-exec-deploy.rules[].apiGroups[] (4)
-
- apps
string
rbac.roles.hermes-exec-deploy.rules[].resources[] (4)
- pods/exec
- deployments
string
rbac.roles.hermes-exec-deploy.rules[].verbs[] (4)
- create
- patch
- update
string
rbac.roles.hermes-exec-deploy.type (4)
Role
string
rbac.roles.hermes-pod-delete.rules[].apiGroups[] (4)
-
string
rbac.roles.hermes-pod-delete.rules[].resources[] (4)
- pods
string
rbac.roles.hermes-pod-delete.rules[].verbs[] (4)
- delete
string
rbac.roles.hermes-pod-delete.type (4)
ClusterRole
string
rbac.roles.hermes-cluster-ops.rules[].apiGroups[] (1)
string
rbac.roles.hermes-cluster-ops.rules[].resources[] (1)
string
rbac.roles.hermes-cluster-ops.rules[].verbs[] (1)
string
rbac.roles.hermes-cluster-ops.type (1)
string
rbac.roles.hermes-cluster.rules[].apiGroups[] (1)
string
rbac.roles.hermes-cluster.rules[].resources[] (1)
string
rbac.roles.hermes-cluster.rules[].verbs[] (1)
string
rbac.roles.hermes-cluster.type (1)
string
rbac.roles.hermes-write-restricted.rules[].apiGroups[] (1)
string
rbac.roles.hermes-write-restricted.rules[].resources[] (1)
string
rbac.roles.hermes-write-restricted.rules[].verbs[] (1)
string
rbac.roles.hermes-write-restricted.type (1)
string
configMaps.config.data."config.yaml" (1)
string
configMaps.config.forceRename (1)
string
serviceAccount.hermes.annotations."reloader.stakater.com/match" (1)
string
serviceAccount.hermes.enabled (1)
boolean