hermes helm release - kubesearch

No introduction found. Create it?

Name	Repo	Stars	Version	Timestamp
hermes	joryirving/home-ops	222	5.0.1	4 days ago
hermes	mirceanton/home-ops	111	5.0.1	4 days ago

Name

Repo

Stars

Version

Timestamp

hermes

joryirving/home-ops

222

5.0.1

4 days ago

hermes

mirceanton/home-ops

111

5.0.1

4 days ago

Key	Types
controllers.hermes.annotations."reloader.stakater.com/auto" (12) `true`	string
controllers.hermes.containers.app.args[] (11) `- gateway - run`	string
controllers.hermes.containers.app.env.HERMES_HOME (11) `/opt/data`	string
controllers.hermes.containers.app.env.HOME (11) `/opt/data`	string
controllers.hermes.containers.app.env.API_SERVER_ENABLED (9) `true`	string, boolean
controllers.hermes.containers.app.env.API_SERVER_HOST (8) `0.0.0.0`	string
controllers.hermes.containers.app.env.HERMES_DASHBOARD (8) `1`	string
controllers.hermes.containers.app.env.PATH (8) `/opt/hermes/.venv/bin:/opt/data/.local/bin:/opt/data/.local/go/bin:/opt/data/.local/homebrew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin`	string
controllers.hermes.containers.app.env.TZ (8) `${TZ}`	string
controllers.hermes.containers.app.env.GOPATH (7) `/opt/data/go`	string
controllers.hermes.containers.app.env.HOMEBREW_CELLAR (7) `/opt/data/.local/homebrew/Cellar`	string
controllers.hermes.containers.app.env.HOMEBREW_PREFIX (7) `/opt/data/.local/homebrew`	string
controllers.hermes.containers.app.env.PIP_BREAK_SYSTEM_PACKAGES (7) `1`	string
controllers.hermes.containers.app.env.SEARXNG_URL (7) `http://searxng.selfhosted.svc.cluster.local:8080`	string
controllers.hermes.containers.app.env.HOMEBREW_REPOSITORY (6) `/opt/data/.local/homebrew`	string
controllers.hermes.containers.app.env.MEMINI_NAMESPACE (6) `hermes`	string
controllers.hermes.containers.app.env.TERM (6) `xterm-256color`	string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_ISSUER (5) `https://id.dcunha.io`	string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_PUBLIC_URL (5) `https://hermes.dcunha.io`	string
controllers.hermes.containers.app.env.API_SERVER_PORT (4) `8642`	number
controllers.hermes.containers.app.env.HERMES_GID (4) `1000`	string
controllers.hermes.containers.app.env.HERMES_UID (4) `1000`	string
controllers.hermes.containers.app.env.MEMINI_URL (4) `http://memini.ai.svc.cluster.local:8080`	string
controllers.hermes.containers.app.env.HERMES_CRON_TIMEOUT (3) `0`	string, number
controllers.hermes.containers.app.env.LITELLM_API_KEY.valueFrom.secretKeyRef.key (3) `LITELLM_API_KEY`	string
controllers.hermes.containers.app.env.LITELLM_API_KEY.valueFrom.secretKeyRef.name (3) `hermes-config`	string
controllers.hermes.containers.app.env.MEMINI_API_KEY.valueFrom.secretKeyRef.key (3) `MEMINI_API_KEY`	string
controllers.hermes.containers.app.env.MEMINI_API_KEY.valueFrom.secretKeyRef.name (3) `hermes-config`	string
controllers.hermes.containers.app.env.MEMINI_BASE_URL (3) `http://memini.ai.svc.cluster.local:8080`	string
controllers.hermes.containers.app.env.SUMMARY_LLM_API_KEY.valueFrom.secretKeyRef.key (3) `LITELLM_API_KEY`	string
controllers.hermes.containers.app.env.SUMMARY_LLM_API_KEY.valueFrom.secretKeyRef.name (3) `hermes-config`	string
controllers.hermes.containers.app.env.SUMMARY_LLM_MODEL (3) `opencode-go/deepseek-v4-flash`	string
controllers.hermes.containers.app.env.SUMMARY_LLM_URL (3) `http://litellm.ai:4000/v1`	string
controllers.hermes.containers.app.env.TERMINAL_MAX_FOREGROUND_TIMEOUT (3) `1800`	string
controllers.hermes.containers.app.env.AGENT_BROWSER_ARGS (2) `--no-sandbox,--disable-dev-shm-usage`	string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_ID.valueFrom.secretKeyRef.key (1) `client-id`	string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_ID.valueFrom.secretKeyRef.name (1) `kanidm-hermes-oidc`	string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_ID (2) `hermes`	string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_SECRET.valueFrom.secretKeyRef.key (2) `client-secret`	string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_SECRET.valueFrom.secretKeyRef.name (2) `kanidm-hermes-oidc`	string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_TUI (2) `1`	string
controllers.hermes.containers.app.env.HOMELAB_GH_TOKEN.valueFrom.secretKeyRef.key (2) `GH_TOKEN`	string
controllers.hermes.containers.app.env.HOMELAB_GH_TOKEN.valueFrom.secretKeyRef.name (2) `hermes-config`	string
controllers.hermes.containers.app.env.AGENTMEMORY_URL (1) `http://agentmemory.ai.svc.cluster.local:3111`	string
controllers.hermes.containers.app.env.API_SERVER_CORS_ORIGINS (1) `http://localhost:3000,http://127.0.0.1:3000`	string
controllers.hermes.containers.app.env.API_SERVER_KEY.valueFrom.secretKeyRef.key (1) `API_SERVER_KEY`	string
controllers.hermes.containers.app.env.API_SERVER_KEY.valueFrom.secretKeyRef.name (1) `hermes-config`	string
controllers.hermes.containers.app.env.API_SERVER_KEY (1) `CFE1B842-AEF8-4704-A51D-1E885A5C7967`	string
controllers.hermes.containers.app.env.BLUEBUBBLES_REQUIRE_MENTION (1) `true`	string
controllers.hermes.containers.app.env.BLUEBUBBLES_SERVER_URL (1) `http://bluebubbles.internal:1234`	string
controllers.hermes.containers.app.env.BLUEBUBBLES_WEBHOOK_HOST (1) `0.0.0.0`	string
controllers.hermes.containers.app.env.BLUEBUBBLES_WEBHOOK_PATH (1) `/bluebubbles-webhook`	string
controllers.hermes.containers.app.env.BLUEBUBBLES_WEBHOOK_PORT (1) `8645`	string
controllers.hermes.containers.app.env.DISCORD_WEBHOOK.valueFrom.secretKeyRef.key (1) `DISCORD_WEBHOOK`	string
controllers.hermes.containers.app.env.DISCORD_WEBHOOK.valueFrom.secretKeyRef.name (1) `hermes-config`	string
controllers.hermes.containers.app.env.DOCKER_CERT_PATH (1) `/certs/client`	string
controllers.hermes.containers.app.env.DOCKER_HOST (1) `tcp://localhost:2376`	string
controllers.hermes.containers.app.env.DOCKER_TLS_VERIFY (1) `1`	string
controllers.hermes.containers.app.env.GATEWAY_ALLOW_ALL_USERS (1) `true`	boolean
controllers.hermes.containers.app.env.HERMES_DASHBOARD_INSECURE (1) `1`	string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_REDIRECT_URI (1) `https://hermes.rnatr.com/api/auth/oidc/callback`	string
controllers.hermes.containers.app.env.HOMEBREW_NO_ANALYTICS (1) `1`	string
controllers.hermes.containers.app.env.HOMEBREW_NO_AUTO_UPDATE (1) `1`	string
controllers.hermes.containers.app.env.HONCHO_WORKSPACE_ID (1) `hermes`	string
controllers.hermes.containers.app.env.LM_BASE_URL (1) `http://10.50.0.81:1234/v1`	string
controllers.hermes.containers.app.env.MATRIX_ALLOWED_USERS (1) `@andrew:goyangi.io`	string
controllers.hermes.containers.app.env.MATRIX_HOMESERVER (1) `https://matrix.goyangi.io`	string
controllers.hermes.containers.app.env.MATRIX_USER_ID (1) `@hermes:goyangi.io`	string
controllers.hermes.containers.app.env.MEMINI_HOME (1) `personal/jan`	string
controllers.hermes.containers.app.env.OPENCODE_GO_BASE_URL (1) `https://opencode.ai/zen/go/v1`	string
controllers.hermes.containers.app.env.PYTHONPATH (1) `/opt/hermes/.venv/lib/python3.13/site-packages/`	string
controllers.hermes.containers.app.image.repository (11) `nousresearch/hermes-agent`	string
controllers.hermes.containers.app.image.tag (11) `v2026.8.3@sha256:16788311e2fa3035456bdc1bafb8ec2b1777db64ebf020af9bb7eb73c3712c9e`	string
controllers.hermes.containers.app.resources.limits.memory (11) `2Gi`	string
controllers.hermes.containers.app.resources.limits.cpu (2) `4`	number
controllers.hermes.containers.app.resources.requests.cpu (11) `500m`	string
controllers.hermes.containers.app.resources.requests.memory (10) `1Gi`	string
controllers.hermes.containers.app.envFrom[].secretRef.name (10) `hermes-secret`	string
controllers.hermes.containers.app.securityContext.allowPrivilegeEscalation (8) `false`	boolean
controllers.hermes.containers.app.securityContext.readOnlyRootFilesystem (8) `false`	boolean
controllers.hermes.containers.app.securityContext.capabilities.drop[] (6) `- ALL`	string
controllers.hermes.containers.app.securityContext.capabilities.add[] (5) `- CHOWN - DAC_OVERRIDE - FOWNER - FSETID - SETGID - SETUID`	string
controllers.hermes.containers.app.securityContext.runAsGroup (5) `0`	number
controllers.hermes.containers.app.securityContext.runAsUser (5) `0`	number
controllers.hermes.containers.app.securityContext.runAsNonRoot (3) `false`	boolean
controllers.hermes.containers.app.probes.liveness.enabled (5) `true`	boolean
controllers.hermes.containers.app.probes.liveness.custom (4) `true`	boolean
controllers.hermes.containers.app.probes.liveness.spec.periodSeconds (4) `30`	number
controllers.hermes.containers.app.probes.liveness.spec.failureThreshold (3) `6`	number
controllers.hermes.containers.app.probes.liveness.spec.httpGet.path (3) `/health`	string
controllers.hermes.containers.app.probes.liveness.spec.httpGet.port (3) `8642`	number
controllers.hermes.containers.app.probes.liveness.spec.initialDelaySeconds (3) `30`	number
controllers.hermes.containers.app.probes.liveness.spec.timeoutSeconds (3) `5`	number
controllers.hermes.containers.app.probes.liveness.spec.tcpSocket.port (1) `8642`	number
controllers.hermes.containers.app.probes.readiness.enabled (5) `true`	boolean
controllers.hermes.containers.app.probes.readiness.custom (4) `true`	boolean
controllers.hermes.containers.app.probes.readiness.spec.periodSeconds (4) `10`	number
controllers.hermes.containers.app.probes.readiness.spec.failureThreshold (3) `6`	number
controllers.hermes.containers.app.probes.readiness.spec.httpGet.path (3) `/health`	string
controllers.hermes.containers.app.probes.readiness.spec.httpGet.port (3) `8642`	number
controllers.hermes.containers.app.probes.readiness.spec.initialDelaySeconds (3) `5`	number
controllers.hermes.containers.app.probes.readiness.spec.timeoutSeconds (3) `5`	number
controllers.hermes.containers.app.probes.readiness.spec.tcpSocket.port (1) `8642`	number
controllers.hermes.containers.app.probes.startup.enabled (5) `false`	boolean
controllers.hermes.containers.app.probes.startup.custom (1) `true`	boolean
controllers.hermes.containers.app.probes.startup.spec.failureThreshold (1) `60`	number
controllers.hermes.containers.app.probes.startup.spec.httpGet.path (1) `/health`	string
controllers.hermes.containers.app.probes.startup.spec.httpGet.port (1) `8642`	number
controllers.hermes.containers.app.probes.startup.spec.periodSeconds (1) `5`	number
controllers.hermes.containers.app.ports[].containerPort (3) `8642 9119`	number
controllers.hermes.containers.app.ports[].name (3) `http dashboard`	string
controllers.hermes.containers.app.ports[].protocol (3) `TCP TCP`	string
controllers.hermes.containers.app.command[] (1) `- /opt/hermes/bin/hermes`	string
controllers.hermes.containers.codeserver.args[] (5) `- --auth - none - --user-data-dir - /opt/data/.vscode - --extensions-dir - /opt/data/.vscode - --port - "12321" - /opt/data`	string
controllers.hermes.containers.codeserver.image.repository (5) `ghcr.io/coder/code-server`	string
controllers.hermes.containers.codeserver.image.tag (5) `4.131.0@sha256:3623e6362abdec6258472882b06fdeec9d6ce2ad3fda316b3c5d7ed092b89add`	string
controllers.hermes.containers.codeserver.resources.limits.memory (5) `1Gi`	string
controllers.hermes.containers.codeserver.resources.requests.cpu (5) `10m`	string
controllers.hermes.containers.codeserver.securityContext.allowPrivilegeEscalation (4) `false`	boolean
controllers.hermes.containers.codeserver.securityContext.capabilities.drop[] (4) `- ALL`	string
controllers.hermes.containers.codeserver.env.GH_TOKEN.valueFrom.secretKeyRef.key (2) `GH_TOKEN`	string
controllers.hermes.containers.codeserver.env.GH_TOKEN.valueFrom.secretKeyRef.name (2) `hermes-config`	string
controllers.hermes.containers.codeserver.env.TZ (2) `Europe/Paris`	string
controllers.hermes.containers.codeserver.env.DISCORD_WEBHOOK.valueFrom.secretKeyRef.key (1) `DISCORD_WEBHOOK`	string
controllers.hermes.containers.codeserver.env.DISCORD_WEBHOOK.valueFrom.secretKeyRef.name (1) `hermes-config`	string
controllers.hermes.containers.codeserver.env.GITHUB_TOKEN.valueFrom.secretKeyRef.key (1) `GITHUB_TOKEN`	string
controllers.hermes.containers.codeserver.env.GITHUB_TOKEN.valueFrom.secretKeyRef.name (1) `hermes-secret`	string
controllers.hermes.containers.codeserver.ports[].containerPort (1) `12321`	number
controllers.hermes.containers.codeserver.ports[].name (1) `codeserver`	string
controllers.hermes.containers.codeserver.ports[].protocol (1) `TCP`	string
controllers.hermes.containers.dashboard.args[] (3) `- dashboard - --host - "0.0.0.0"`	string
controllers.hermes.containers.dashboard.env.GATEWAY_HEALTH_URL (3) `http://localhost:8642`	string
controllers.hermes.containers.dashboard.env.TZ (2) `America/Edmonton`	string
controllers.hermes.containers.dashboard.env.HERMES_DASHBOARD_OIDC_SCOPES (1) `openid profile email offline_access`	string
controllers.hermes.containers.dashboard.env.HERMES_DASHBOARD_PUBLIC_URL (1) `https://${APP}.${SECRET_DOMAIN}`	string
controllers.hermes.containers.dashboard.image.repository (3) `nousresearch/hermes-agent`	string
controllers.hermes.containers.dashboard.image.tag (3) `v2026.8.3@sha256:16788311e2fa3035456bdc1bafb8ec2b1777db64ebf020af9bb7eb73c3712c9e`	string
controllers.hermes.containers.dashboard.resources.limits.memory (3) `1Gi`	string
controllers.hermes.containers.dashboard.resources.requests.cpu (2) `500m`	string
controllers.hermes.containers.dashboard.resources.requests.memory (1) `256Mi`	string
controllers.hermes.containers.dashboard.envFrom[].secretRef.name (2) `hermes-dashboard`	string
controllers.hermes.containers.dashboard.ports[].containerPort (2) `9119`	number
controllers.hermes.containers.dashboard.ports[].name (2) `http`	string
controllers.hermes.containers.dashboard.ports[].protocol (2) `TCP`	string
controllers.hermes.containers.dashboard.command[] (1) `- /opt/hermes/bin/hermes`	string
controllers.hermes.containers.dashboard.securityContext.runAsGroup (1) `10000`	number
controllers.hermes.containers.dashboard.securityContext.runAsUser (1) `10000`	number
controllers.hermes.containers.gateway.args[] (1) `- gateway - run`	string
controllers.hermes.containers.gateway.env._HERMES_FORCE_GITHUB_TOKEN.valueFrom.secretKeyRef.key (1) `GITHUB_TOKEN`	string
controllers.hermes.containers.gateway.env._HERMES_FORCE_GITHUB_TOKEN.valueFrom.secretKeyRef.name (1) `hermes-secrets`	string
controllers.hermes.containers.gateway.env.API_SERVER_ENABLED (1) `true`	boolean
controllers.hermes.containers.gateway.env.API_SERVER_HOST (1) `0.0.0.0`	string
controllers.hermes.containers.gateway.env.API_SERVER_PORT (1) `8642`	string
controllers.hermes.containers.gateway.env.CRAWL4AI_API_URL (1) `http://crawl4ai.ai.svc.cluster.local:11235`	string
controllers.hermes.containers.gateway.env.HERMES_HOME (1) `/opt/data`	string
controllers.hermes.containers.gateway.env.HERMES_STREAM_READ_TIMEOUT (1) `300`	string
controllers.hermes.containers.gateway.env.HERMES_STREAM_STALE_TIMEOUT (1) `300`	string
controllers.hermes.containers.gateway.env.HOME (1) `/opt/data/home`	string
controllers.hermes.containers.gateway.env.HOMEBREW_NO_ANALYTICS (1) `1`	string
controllers.hermes.containers.gateway.env.HOMEBREW_NO_AUTO_UPDATE (1) `1`	string
controllers.hermes.containers.gateway.env.HOMEBREW_NO_ENV_HINTS (1) `1`	string
controllers.hermes.containers.gateway.env.MEMINI_BASE_URL (1) `http://memini.ai.svc.cluster.local:8080`	string
controllers.hermes.containers.gateway.env.MEMINI_NAMESPACE (1) `hermes`	string
controllers.hermes.containers.gateway.env.OPENAI_BASE_URL (1) `http://bifrost.ai.svc.cluster.local:8080/v1`	string
controllers.hermes.containers.gateway.env.PATH (1) `/opt/data/bin:/home/linuxbrew/.linuxbrew/bin:/opt/hermes/.venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin`	string
controllers.hermes.containers.gateway.env.S6_READ_ONLY_ROOT (1) `1`	string
controllers.hermes.containers.gateway.env.S6_YES_I_WANT_A_WORLD_WRITABLE_RUN_BECAUSE_KUBERNETES (1) `1`	string
controllers.hermes.containers.gateway.env.SEARXNG_URL (1) `http://searxng.tools.svc.cluster.local:8080`	string
controllers.hermes.containers.gateway.env.TZ (1) `Europe/Berlin`	string
controllers.hermes.containers.gateway.envFrom[].secretRef.name (1) `hermes-secrets`	string
controllers.hermes.containers.gateway.image.repository (1) `ghcr.io/gabrielcosi/hermes-agent`	string
controllers.hermes.containers.gateway.image.tag (1) `v2026.8.3@sha256:956bb99b771239518aa8b39c2fcfb563c5525461f955b20519be4c1f50155992`	string
controllers.hermes.containers.gateway.resources.limits.memory (1) `2Gi`	string
controllers.hermes.containers.gateway.resources.requests.cpu (1) `50m`	string
controllers.hermes.containers.gateway.resources.requests.memory (1) `512Mi`	string
controllers.hermes.containers.gateway.securityContext.allowPrivilegeEscalation (1) `false`	boolean
controllers.hermes.containers.gateway.securityContext.capabilities.drop[] (1) `- ALL`	string
controllers.hermes.containers.gateway.securityContext.readOnlyRootFilesystem (1) `true`	boolean
controllers.hermes.initContainers.init.command[] (9) `- sh - -c - set -euo pipefail mkdir -p /opt/data cp /run/config/config.yaml /opt/data/config.yaml cp /run/config/env /opt/data/.env chmod 600 /opt/data/.env`	string
controllers.hermes.initContainers.init.image.repository (9) `docker.io/library/alpine`	string
controllers.hermes.initContainers.init.image.tag (9) `3.24`	string
controllers.hermes.initContainers.init.securityContext.runAsGroup (5) `1000`	number
controllers.hermes.initContainers.init.securityContext.runAsUser (5) `1000`	number
controllers.hermes.initContainers.init.securityContext.allowPrivilegeEscalation (4) `false`	boolean
controllers.hermes.initContainers.init.securityContext.capabilities.drop[] (4) `- ALL`	string
controllers.hermes.initContainers.install-tools.command[] (6) - /bin/sh - -c - set -e mkdir -p /opt/data/.local/bin /opt/data/.local/go rm -f /opt/data/.local/bin/hermes /opt/data/.local/bin/docker if [ ! -f /opt/data/.local/go/bin/go ]; then cd /tmp curl -fsSL https://go.dev/dl/go1.23.5.linux-amd64.tar.gz -o go.tar.gz tar xzf go.tar.gz mv go /opt/data/.local/ rm -rf go.tar.gz fi if [ ! -f /opt/data/.local/homebrew/bin/brew ]; then export HOMEBREW_PREFIX=/opt/data/.local/homebrew mkdir -p $HOMEBREW_PREFIX git clone --depth 1 https://github.com/Homebrew/brew $HOMEBREW_PREFIX fi if [ ! -d /opt/data/plugins/memini ]; then hermes plugins install eleboucher/memini-hermes fi	string
controllers.hermes.initContainers.install-tools.image.repository (6) `nousresearch/hermes-agent`	string
controllers.hermes.initContainers.install-tools.image.tag (6) `v2026.7.7.2@sha256:9c841866021c54c4596849f6135717e8a4d52ba510b7f52c50aef1de1a283973`	string
controllers.hermes.initContainers.install-tools.securityContext.allowPrivilegeEscalation (3) `false`	boolean
controllers.hermes.initContainers.install-tools.securityContext.capabilities.drop[] (3) `- ALL`	string
controllers.hermes.initContainers.install-tools.securityContext.runAsGroup (3) `1000`	number
controllers.hermes.initContainers.install-tools.securityContext.runAsUser (3) `1000`	number
controllers.hermes.initContainers.install-tools.env.HERMES_HOME (1) `/opt/data`	string
controllers.hermes.initContainers.install-tools.env.HOME (1) `/opt/data`	string
controllers.hermes.initContainers.install-tools.env.PATH (1) `/opt/hermes/.venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin`	string
controllers.hermes.initContainers.copy-agent-source.command[] (3) `- /bin/sh - -c - set -e cp -r /opt/hermes/. /agent-src/ 2>/tmp/cp.err \|\| true if grep -v 'Permission denied' /tmp/cp.err; then exit 1; fi test -e /agent-src/.venv`	string
controllers.hermes.initContainers.copy-agent-source.image.repository (3) `nousresearch/hermes-agent`	string
controllers.hermes.initContainers.copy-agent-source.image.tag (3) `v2026.7.7.2@sha256:9c841866021c54c4596849f6135717e8a4d52ba510b7f52c50aef1de1a283973`	string
controllers.hermes.initContainers.copy-agent-source.securityContext.allowPrivilegeEscalation (3) `false`	boolean
controllers.hermes.initContainers.copy-agent-source.securityContext.capabilities.drop[] (3) `- ALL`	string
controllers.hermes.initContainers.copy-agent-source.securityContext.runAsGroup (3) `1000`	number
controllers.hermes.initContainers.copy-agent-source.securityContext.runAsUser (3) `1000`	number
controllers.hermes.initContainers.fix-run.command[] (2) `- sh - -c - chown 10000:10000 /run && chmod 755 /run`	string
controllers.hermes.initContainers.fix-run.image.repository (2) `docker.io/library/busybox`	string
controllers.hermes.initContainers.fix-run.image.tag (2) `latest`	string
controllers.hermes.initContainers.fix-run.securityContext.runAsGroup (2) `0`	number
controllers.hermes.initContainers.fix-run.securityContext.runAsNonRoot (2) `false`	boolean
controllers.hermes.initContainers.fix-run.securityContext.runAsUser (2) `0`	number
controllers.hermes.initContainers.01-agent-source.command[] (1) `- /bin/sh - -c - set -e cp -r /opt/hermes/. /agent-src/ chown -R 10000:10000 /agent-src/ chmod -R u+rwX /agent-src/plugins/`	string
controllers.hermes.initContainers.01-agent-source.image.repository (1) `docker.io/nousresearch/hermes-agent`	string
controllers.hermes.initContainers.01-agent-source.image.tag (1) `v2026.8.3@sha256:16788311e2fa3035456bdc1bafb8ec2b1777db64ebf020af9bb7eb73c3712c9e`	string
controllers.hermes.initContainers.01-agent-source.securityContext.allowPrivilegeEscalation (1) `true`	boolean
controllers.hermes.initContainers.01-agent-source.securityContext.runAsGroup (1) `0`	number
controllers.hermes.initContainers.01-agent-source.securityContext.runAsUser (1) `0`	number
controllers.hermes.initContainers.02-init-config.command[] (1) `- sh - -c - set -euo pipefail mkdir -p /opt/data cp /run/config/config.yaml /opt/data/config.yaml sed -i "s\|\${LITELLM_API_KEY}\|$LITELLM_API_KEY\|g" /opt/data/config.yaml sed -i "s\|\${SECRET_DOMAIN}\|$SECRET_DOMAIN\|g" /opt/data/config.yaml chown 10000:10000 /opt/data/config.yaml`	string
controllers.hermes.initContainers.02-init-config.envFrom[].secretRef.name (1) `{{ .Release.Name }}-secret`	string
controllers.hermes.initContainers.02-init-config.image.repository (1) `docker.io/library/alpine`	string
controllers.hermes.initContainers.02-init-config.image.tag (1) `3.24`	string
controllers.hermes.initContainers.02-init-config.securityContext.allowPrivilegeEscalation (1) `false`	boolean
controllers.hermes.initContainers.02-init-config.securityContext.capabilities.drop[] (1) `- ALL`	string
controllers.hermes.initContainers.02-init-config.securityContext.runAsGroup (1) `10000`	number
controllers.hermes.initContainers.02-init-config.securityContext.runAsUser (1) `10000`	number
controllers.hermes.initContainers.03-install-tools.command[] (1) - /bin/sh - -c - set -e mkdir -p /opt/data/.local/bin /opt/data/.local/go rm -f /opt/data/.local/bin/hermes /opt/data/.local/bin/docker if [ ! -f /opt/data/.local/bin/gh ]; then cd /tmp curl -fsSL https://github.com/cli/cli/releases/download/v2.61.0/gh_2.61.0_linux_amd64.tar.gz -o gh.tar.gz tar xzf gh.tar.gz cp gh_2.61.0_linux_amd64/bin/gh /opt/data/.local/bin/ rm -rf gh.tar.gz gh_2.61.0_linux_amd64 fi if [ ! -f /opt/data/.local/go/bin/go ]; then cd /tmp curl -fsSL https://go.dev/dl/go1.23.5.linux-amd64.tar.gz -o go.tar.gz tar xzf go.tar.gz mv go /opt/data/.local/ rm -rf go.tar.gz fi if [ ! -f /opt/data/.local/homebrew/bin/brew ]; then export HOMEBREW_PREFIX=/opt/data/.local/homebrew mkdir -p $HOMEBREW_PREFIX git clone --depth 1 https://github.com/Homebrew/brew $HOMEBREW_PREFIX fi if [ -f /opt/hermes/plugins/platforms/photon/sidecar/package.json ]; then cd /opt/hermes/plugins/platforms/photon/sidecar && npm ci 2>/dev/null \|\| npm install fi	string
controllers.hermes.initContainers.03-install-tools.image.repository (1) `docker.io/nousresearch/hermes-agent`	string
controllers.hermes.initContainers.03-install-tools.image.tag (1) `v2026.8.3@sha256:16788311e2fa3035456bdc1bafb8ec2b1777db64ebf020af9bb7eb73c3712c9e`	string
controllers.hermes.initContainers.03-install-tools.securityContext.allowPrivilegeEscalation (1) `false`	boolean
controllers.hermes.initContainers.03-install-tools.securityContext.capabilities.drop[] (1) `- ALL`	string
controllers.hermes.initContainers.03-install-tools.securityContext.runAsGroup (1) `10000`	number
controllers.hermes.initContainers.03-install-tools.securityContext.runAsUser (1) `10000`	number
controllers.hermes.initContainers.copy-config.command[] (1) `- sh - -c - set -euo pipefail mkdir -p /opt/data cp /run/config/config.yaml /opt/data/config.yaml chown 10000:10000 /opt/data/config.yaml`	string
controllers.hermes.initContainers.copy-config.image.repository (1) `docker.io/library/alpine`	string
controllers.hermes.initContainers.copy-config.image.tag (1) `3.24`	string
controllers.hermes.initContainers.daemon.env.DOCKER_TLS_CERTDIR (1) `/certs`	string
controllers.hermes.initContainers.daemon.image.repository (1) `docker`	string
controllers.hermes.initContainers.daemon.image.tag (1) `29.7.1-dind@sha256:e8faad5a8dc5279dff929afc5449f2791736912fff9f99351d742db2fad01b4c`	string
controllers.hermes.initContainers.daemon.probes.liveness.custom (1) `true`	boolean
controllers.hermes.initContainers.daemon.probes.liveness.enabled (1) `true`	boolean
controllers.hermes.initContainers.daemon.probes.liveness.spec.exec.command[] (1) `- docker - info`	string
controllers.hermes.initContainers.daemon.probes.liveness.spec.failureThreshold (1) `3`	number
controllers.hermes.initContainers.daemon.probes.liveness.spec.periodSeconds (1) `20`	number
controllers.hermes.initContainers.daemon.probes.liveness.spec.timeoutSeconds (1) `3`	number
controllers.hermes.initContainers.daemon.probes.readiness.custom (1) `true`	boolean
controllers.hermes.initContainers.daemon.probes.readiness.enabled (1) `true`	boolean
controllers.hermes.initContainers.daemon.probes.readiness.spec.exec.command[] (1) `- docker - info`	string
controllers.hermes.initContainers.daemon.probes.readiness.spec.failureThreshold (1) `3`	number
controllers.hermes.initContainers.daemon.probes.readiness.spec.periodSeconds (1) `5`	number
controllers.hermes.initContainers.daemon.probes.readiness.spec.timeoutSeconds (1) `3`	number
controllers.hermes.initContainers.daemon.probes.startup.custom (1) `true`	boolean
controllers.hermes.initContainers.daemon.probes.startup.enabled (1) `true`	boolean
controllers.hermes.initContainers.daemon.probes.startup.spec.exec.command[] (1) `- docker - info`	string
controllers.hermes.initContainers.daemon.probes.startup.spec.failureThreshold (1) `60`	number
controllers.hermes.initContainers.daemon.probes.startup.spec.periodSeconds (1) `2`	number
controllers.hermes.initContainers.daemon.probes.startup.spec.timeoutSeconds (1) `3`	number
controllers.hermes.initContainers.daemon.restartPolicy (1) `Always`	string
controllers.hermes.initContainers.daemon.securityContext.allowPrivilegeEscalation (1) `true`	boolean
controllers.hermes.initContainers.daemon.securityContext.privileged (1) `true`	boolean
controllers.hermes.initContainers.daemon.securityContext.runAsGroup (1) `0`	number
controllers.hermes.initContainers.daemon.securityContext.runAsUser (1) `0`	number
controllers.hermes.initContainers.install-memini-plugin.command[] (1) `- sh - -c - set -e if [ ! -d /opt/data/plugins/memini ]; then mkdir -p /opt/data/plugins cd /tmp rm -rf memini-src git clone --depth 1 --branch main https://github.com/eleboucher/memini memini-src mv memini-src/integrations/hermes/plugin/memini /opt/data/plugins/memini rm -rf memini-src fi`	string
controllers.hermes.initContainers.install-memini-plugin.image.repository (1) `docker.io/alpine/git`	string
controllers.hermes.initContainers.install-memini-plugin.image.tag (1) `v2.54.0`	string
controllers.hermes.initContainers.install-memini-plugin.securityContext.allowPrivilegeEscalation (1) `false`	boolean
controllers.hermes.initContainers.install-memini-plugin.securityContext.capabilities.drop[] (1) `- ALL`	string
controllers.hermes.initContainers.seed-config.command[] (1) - sh - -c - set -eu if [ ! -f /opt/data/config.yaml ]; then echo "seed-config: no persisted config; seeding from git source." cp /config-src/config.yaml /opt/data/config.yaml cp /config-src/config.yaml /opt/data/.config.git-base.yaml exit 0 fi cp /opt/data/config.yaml /tmp/config.work.yaml if [ -f /opt/data/.config.git-base.yaml ]; then yq -o=json -I=0 '[... \| path] \| .[] \| select(length > 0) \| select(.[-1] \| tag == "!!str")' /opt/data/.config.git-base.yaml \| sort -u > /tmp/base.keys yq -o=json -I=0 '[... \| path] \| .[] \| select(length > 0) \| select(.[-1] \| tag == "!!str")' /config-src/config.yaml \| sort -u > /tmp/src.keys if [ -s /tmp/src.keys ]; then grep -Fxv -f /tmp/src.keys /tmp/base.keys > /tmp/removed.keys \|\| true if [ -s /tmp/removed.keys ]; then echo "seed-config: pruning keys removed from git since last reconcile:" cat /tmp/removed.keys yq ea -p=json -o=json -I=0 '[.]' /tmp/removed.keys > /tmp/removed.json yq -i 'del(.. \| select( ([path] - load("/tmp/removed.json")) \| length == 0 ))' /tmp/config.work.yaml fi fi fi yq eval-all 'select(fileIndex == 0) * select(fileIndex == 1)' /tmp/config.work.yaml /config-src/config.yaml > /tmp/config.final.yaml cp /tmp/config.final.yaml /opt/data/config.yaml cp /config-src/config.yaml /opt/data/.config.git-base.yaml echo "seed-config: merged git over persisted config (git wins; runtime-only keys kept; git deletions pruned)."	string
controllers.hermes.initContainers.seed-config.image.repository (1) `mikefarah/yq`	string
controllers.hermes.initContainers.seed-config.image.tag (1) `4.53.3`	string
controllers.hermes.initContainers.seed-config.securityContext.allowPrivilegeEscalation (1) `false`	boolean
controllers.hermes.initContainers.seed-config.securityContext.capabilities.drop[] (1) `- ALL`	string
controllers.hermes.initContainers.seed-config.securityContext.readOnlyRootFilesystem (1) `true`	boolean
controllers.hermes.initContainers.seed-tools.command[] (1) - sh - -c - set -e if [ -e /homebrew-runtime/.seeded ]; then echo "Homebrew already seeded; skipping." else echo "Resetting incomplete Homebrew seed." chmod -R u+w /homebrew-runtime 2>/dev/null \|\| true find /homebrew-runtime -mindepth 1 -maxdepth 1 -exec rm -rf {} + echo "Seeding Homebrew from image /home/linuxbrew/.linuxbrew into /homebrew-runtime." cp -RP /home/linuxbrew/.linuxbrew/. /homebrew-runtime/ touch /homebrew-runtime/.seeded echo "Homebrew seed complete." fi echo "Linking memini plugin into /opt/data/plugins." mkdir -p /opt/data/plugins ln -sfn /opt/memini /opt/data/plugins/memini echo "Ensuring /opt/data/home and /opt/data/bin exist." mkdir -p /opt/data/home /opt/data/bin echo "Writing /opt/data/home/.profile with PATH." printf '%s\n' 'export PATH="/opt/data/bin:/home/linuxbrew/.linuxbrew/bin:/opt/hermes/.venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"' > /opt/data/home/.profile echo "Mirroring .profile to /opt/data/home/.bashrc." cp /opt/data/home/.profile /opt/data/home/.bashrc echo "Shell dotfiles ready."	string
controllers.hermes.initContainers.seed-tools.image.repository (1) `ghcr.io/gabrielcosi/hermes-agent`	string
controllers.hermes.initContainers.seed-tools.image.tag (1) `v2026.8.3@sha256:956bb99b771239518aa8b39c2fcfb563c5525461f955b20519be4c1f50155992`	string
controllers.hermes.initContainers.seed-tools.securityContext.allowPrivilegeEscalation (1) `false`	boolean
controllers.hermes.initContainers.seed-tools.securityContext.capabilities.drop[] (1) `- ALL`	string
controllers.hermes.initContainers.seed-tools.securityContext.readOnlyRootFilesystem (1) `true`	boolean
controllers.hermes.strategy (8) `Recreate`	string
controllers.hermes.replicas (4) `1`	number
controllers.hermes.type (4) `deployment`	string
controllers.hermes.pod.securityContext.fsGroup (1) `10000`	number
controllers.hermes.pod.securityContext.fsGroupChangePolicy (1) `OnRootMismatch`	string
controllers.hermes.pod.securityContext.runAsGroup (1) `10000`	number
controllers.hermes.pod.securityContext.runAsNonRoot (1) `true`	boolean
controllers.hermes.pod.securityContext.runAsUser (1) `10000`	number
controllers.hermes.pod.securityContext.seccompProfile.type (1) `RuntimeDefault`	string
controllers.hermes.serviceAccount.identifier (1) `hermes`	string
controllers.codeserver.containers.codeserver.args[] (1) `- --auth - none - --user-data-dir - /opt/data/.vscode - --extensions-dir - /opt/data/.vscode - --port - "12321" - /opt/data`	string
controllers.codeserver.containers.codeserver.env.GOPATH (1) `/opt/data/go`	string
controllers.codeserver.containers.codeserver.env.HOME (1) `/opt/data`	string
controllers.codeserver.containers.codeserver.env.HOMEBREW_CELLAR (1) `/opt/data/.local/homebrew/Cellar`	string
controllers.codeserver.containers.codeserver.env.HOMEBREW_PREFIX (1) `/opt/data/.local/homebrew`	string
controllers.codeserver.containers.codeserver.env.HOMEBREW_REPOSITORY (1) `/opt/data/.local/homebrew`	string
controllers.codeserver.containers.codeserver.env.PATH (1) `/opt/data/.local/bin:/opt/data/.local/go/bin:/opt/data/.local/homebrew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin`	string
controllers.codeserver.containers.codeserver.env.TZ (1) `Pacific/Auckland`	string
controllers.codeserver.containers.codeserver.image.repository (1) `ghcr.io/coder/code-server`	string
controllers.codeserver.containers.codeserver.image.tag (1) `4.131.0@sha256:3623e6362abdec6258472882b06fdeec9d6ce2ad3fda316b3c5d7ed092b89add`	string
controllers.codeserver.containers.codeserver.resources.limits.memory (1) `1Gi`	string
controllers.codeserver.containers.codeserver.resources.requests.cpu (1) `10m`	string
controllers.codeserver.pod.affinity.podAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchLabels."app.kubernetes.io/controller" (1) `hermes`	string
controllers.codeserver.pod.affinity.podAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchLabels."app.kubernetes.io/name" (1) `hermes`	string
controllers.codeserver.pod.affinity.podAffinity.requiredDuringSchedulingIgnoredDuringExecution[].topologyKey (1) `kubernetes.io/hostname`	string
controllers.codeserver.pod.securityContext.runAsGroup (1) `10000`	number
controllers.codeserver.pod.securityContext.runAsUser (1) `10000`	number
controllers.codeserver.strategy (1) `Recreate`	string
defaultPodOptions.securityContext.fsGroup (10) `10000`	number
defaultPodOptions.securityContext.fsGroupChangePolicy (10) `OnRootMismatch`	string
defaultPodOptions.securityContext.seccompProfile.type (9) `RuntimeDefault`	string
defaultPodOptions.securityContext.runAsGroup (5) `1000`	number
defaultPodOptions.securityContext.runAsUser (5) `1000`	number
defaultPodOptions.securityContext.runAsNonRoot (2) `true`	boolean
defaultPodOptions.terminationGracePeriodSeconds (5) `120`	number
defaultPodOptions.automountServiceAccountToken (4) `true`	boolean
defaultPodOptions.nodeSelector."kubernetes.io/arch" (1) `amd64`	string
persistence.data.existingClaim (10) `hermes`	string
persistence.data.globalMounts[].path (6) `/opt/data`	string
persistence.data.advancedMounts.hermes.app[].path (4) `/opt/data`	string
persistence.data.advancedMounts.hermes.codeserver[].path (4) `/opt/data`	string
persistence.data.advancedMounts.hermes.init[].path (3) `/opt/data`	string
persistence.data.advancedMounts.hermes.install-tools[].path (3) `/opt/data`	string
persistence.data.advancedMounts.hermes.02-init-config[].path (1) `/opt/data`	string
persistence.data.advancedMounts.hermes.03-install-tools[].path (1) `/opt/data`	string
persistence.data.advancedMounts.hermes.dashboard[].path (1) `/opt/data`	string
persistence.tmp.type (9) `emptyDir`	string
persistence.tmp.globalMounts[].path (8) `/tmp`	string
persistence.config.name (8) `hermes-config`	string
persistence.config.type (8) `configMap`	string
persistence.config.defaultMode (6) `256`	number
persistence.config.globalMounts[].path (5) `/opt/data`	string
persistence.config.globalMounts[].subPath (2) `config.yaml`	string
persistence.config.globalMounts[].readOnly (1) `true`	boolean
persistence.config.advancedMounts.hermes.init[].path (3) `/run/config/env`	string
persistence.config.advancedMounts.hermes.init[].subPath (3) `env`	string
persistence.config.advancedMounts.hermes.copy-config[].path (1) `/run/config/config.yaml`	string
persistence.config.advancedMounts.hermes.copy-config[].subPath (1) `config.yaml`	string
persistence.config.advancedMounts.hermes.seed-config[].path (1) `/config-src/config.yaml`	string
persistence.config.advancedMounts.hermes.seed-config[].readOnly (1) `true`	boolean
persistence.config.advancedMounts.hermes.seed-config[].subPath (1) `config.yaml`	string
persistence.config.existingClaim (2) `{{ .Release.Name }}`	string
persistence.run.type (5) `emptyDir`	string
persistence.run.advancedMounts.hermes.app[].path (3) `/run`	string
persistence.run.globalMounts[].path (2) `/run`	string
persistence.agent-source.advancedMounts.hermes.app[].path (4) `/opt/hermes`	string
persistence.agent-source.advancedMounts.hermes.copy-agent-source[].path (3) `/agent-src`	string
persistence.agent-source.advancedMounts.hermes.install-tools[].path (3) `/opt/hermes`	string
persistence.agent-source.advancedMounts.hermes.01-agent-source[].path (1) `/agent-src`	string
persistence.agent-source.advancedMounts.hermes.03-install-tools[].path (1) `/opt/hermes`	string
persistence.agent-source.advancedMounts.hermes.dashboard[].path (1) `/opt/hermes`	string
persistence.agent-source.type (4) `emptyDir`	string
persistence.config-yaml.advancedMounts.hermes.init[].path (4) `/run/config/config.yaml`	string
persistence.config-yaml.advancedMounts.hermes.init[].subPath (4) `config.yaml`	string
persistence.config-yaml.defaultMode (4) `493`	number
persistence.config-yaml.name (4) `hermes-configmap`	string
persistence.config-yaml.type (4) `configMap`	string
persistence.configmap.defaultMode (2) `755`	number
persistence.configmap.globalMounts[].path (2) `/tmp/config.yaml`	string
persistence.configmap.globalMounts[].subPath (2) `config.yaml`	string
persistence.configmap.name (2) `{{ .Release.Name }}-config`	string
persistence.configmap.type (2) `configMap`	string
persistence.certs.globalMounts[].path (1) `/certs`	string
persistence.certs.type (1) `emptyDir`	string
persistence.config-secret.defaultMode (1) `400`	number
persistence.config-secret.globalMounts[].path (1) `/tmp/config.yaml /tmp/.env`	string
persistence.config-secret.globalMounts[].subPath (1) `config.yaml env`	string
persistence.config-secret.name (1) `hermes-secret`	string
persistence.config-secret.type (1) `secret`	string
persistence.gallery.globalMounts[].path (1) `/mnt/gallery`	string
persistence.gallery.path (1) `/mnt/daena/comfyui/output`	string
persistence.gallery.server (1) `voyager.internal`	string
persistence.gallery.type (1) `nfs`	string
persistence.homebrew.accessMode (1) `ReadWriteOnce`	string
persistence.homebrew.advancedMounts.hermes.gateway[].path (1) `/home/linuxbrew/.linuxbrew`	string
persistence.homebrew.advancedMounts.hermes.seed-tools[].path (1) `/homebrew-runtime`	string
persistence.homebrew.forceRename (1) `hermes-homebrew`	string
persistence.homebrew.size (1) `1Gi`	string
persistence.homebrew.storageClass (1) `miroir-replicated`	string
persistence.homebrew.type (1) `persistentVolumeClaim`	string
persistence.media.globalMounts[].path (1) `/media`	string
persistence.media.globalMounts[].readOnly (1) `true`	boolean
persistence.media.path (1) `/mnt/world/media`	string
persistence.media.server (1) `nas.internal`	string
persistence.media.type (1) `nfs`	string
persistence.nfs.globalMounts[].path (1) `/nfs-data`	string
persistence.nfs.path (1) `/mnt/nas/data/shares/hermes`	string
persistence.nfs.server (1) `truenas.internal`	string
persistence.nfs.type (1) `nfs`	string
persistence.plugin-agentmemory.globalMounts[].path (1) `/opt/hermes/plugins/agentmemory`	string
persistence.plugin-agentmemory.name (1) `hermes-agentmemory-plugin`	string
persistence.plugin-agentmemory.type (1) `configMap`	string
persistence.skill-commit-watcher.advancedMounts.hermes.init[].path (1) `/run/skills/homelab-commit-watcher`	string
persistence.skill-commit-watcher.defaultMode (1) `493`	number
persistence.skill-commit-watcher.name (1) `hermes-skill-homelab-commit-watcher`	string
persistence.skill-commit-watcher.type (1) `configMap`	string
persistence.tmpfs.globalMounts[].path (1) `/tmp /cache`	string
persistence.tmpfs.globalMounts[].subPath (1) `tmp cache`	string
persistence.tmpfs.type (1) `emptyDir`	string
service.app.controller (9) `hermes`	string
service.app.ports.codeserver.port (5) `12321`	number
service.app.ports.dashboard.port (5) `9119`	number
service.app.ports.gateway.port (4) `8642`	number
service.app.ports.http.port (4) `8642`	number
service.app.ports.api.port (1) `8642`	number
service.app.ipFamilies[] (3) `- IPv4`	string
service.dashboard.controller (5) `hermes`	string
service.dashboard.ports.http.port (5) `9119`	number
service.api.controller (1) `hermes`	string
service.api.ports.http.port (1) `8642`	number
service.codeserver.controller (1) `codeserver`	string
service.codeserver.ports.http.port (1) `12321`	number
service.hermes.controller (1) `hermes`	string
service.hermes.ports.agent.port (1) `8642`	number
service.hermes.ports.dashboard.port (1) `9119`	number
service.webhook.controller (1) `hermes`	string
service.webhook.ports.http.port (1) `8645`	number
rbac.bindings.hermes-read-all.roleRef.identifier (7) `hermes-read-all`	string
rbac.bindings.hermes-read-all.subjects[].identifier (7) `hermes`	string
rbac.bindings.hermes-read-all.subjects[].serviceAccount (7) `hermes`	string
rbac.bindings.hermes-read-all.type (7) `ClusterRoleBinding`	string
rbac.bindings.hermes-exec-deploy.roleRef.identifier (5) `hermes-exec-deploy`	string
rbac.bindings.hermes-exec-deploy.subjects[].identifier (5) `hermes`	string
rbac.bindings.hermes-exec-deploy.subjects[].namespace (5) `ai`	string
rbac.bindings.hermes-exec-deploy.subjects[].serviceAccount (5) `hermes`	string
rbac.bindings.hermes-exec-deploy.type (5) `RoleBinding`	string
rbac.bindings.hermes-pod-delete.roleRef.identifier (5) `hermes-pod-delete`	string
rbac.bindings.hermes-pod-delete.subjects[].identifier (5) `hermes`	string
rbac.bindings.hermes-pod-delete.subjects[].serviceAccount (5) `hermes`	string
rbac.bindings.hermes-pod-delete.type (5) `ClusterRoleBinding`	string
rbac.bindings.hermes-cluster-ops.roleRef.identifier (1) `hermes-cluster-ops`	string
rbac.bindings.hermes-cluster-ops.subjects[].identifier (1) `hermes`	string
rbac.bindings.hermes-cluster-ops.subjects[].serviceAccount (1) `hermes`	string
rbac.bindings.hermes-cluster-ops.type (1) `ClusterRoleBinding`	string
rbac.bindings.hermes-write-restricted.roleRef.identifier (1) `hermes-write-restricted`	string
rbac.bindings.hermes-write-restricted.subjects[].identifier (1) `hermes`	string
rbac.bindings.hermes-write-restricted.subjects[].serviceAccount (1) `hermes`	string
rbac.bindings.hermes-write-restricted.type (1) `RoleBinding`	string
rbac.roles.hermes-read-all.rules[].apiGroups[] (7) `- - apps - batch - networking.k8s.io - storage.k8s.io - helm.toolkit.fluxcd.io - kustomize.toolkit.fluxcd.io - source.toolkit.fluxcd.io - external-secrets.io`	string
rbac.roles.hermes-read-all.rules[].resources[] (7) - pods - pods/log - nodes - services - namespaces - configmaps - persistentvolumes - persistentvolumeclaims - endpoints - resourcequotas - limitranges - serviceaccounts - events - deployments - daemonsets - statefulsets - replicasets - controllerrevisions - jobs - cronjobs - ingresses - ingressclasses - networkpolicies - storageclasses - csinodes - csidrivers - volumeattachments - helmreleases - kustomizations - gitrepositories - helmrepositories - ocirepositories - buckets - helmcharts - externalsecrets - secretstores - clustersecretstores	string
rbac.roles.hermes-read-all.rules[].verbs[] (7) `- get - list - watch - get - list - watch - get - list - watch - get - list - watch - get - list - watch - get - list - watch - get - list - watch - get - list - watch - get - list - watch`	string
rbac.roles.hermes-read-all.type (7) `ClusterRole`	string
rbac.roles.hermes-exec-deploy.rules[].apiGroups[] (5) `- - apps`	string
rbac.roles.hermes-exec-deploy.rules[].resources[] (5) `- pods/exec - deployments`	string
rbac.roles.hermes-exec-deploy.rules[].verbs[] (5) `- create - patch - update`	string
rbac.roles.hermes-exec-deploy.type (5) `Role`	string
rbac.roles.hermes-pod-delete.rules[].apiGroups[] (5) `-`	string
rbac.roles.hermes-pod-delete.rules[].resources[] (5) `- pods`	string
rbac.roles.hermes-pod-delete.rules[].verbs[] (5) `- delete`	string
rbac.roles.hermes-pod-delete.type (5) `ClusterRole`	string
rbac.roles.hermes-cluster-ops.rules[].apiGroups[] (1) `- helm.toolkit.fluxcd.io -`	string
rbac.roles.hermes-cluster-ops.rules[].resources[] (1) `- helmreleases - persistentvolumes`	string
rbac.roles.hermes-cluster-ops.rules[].verbs[] (1) `- patch - update - delete - patch`	string
rbac.roles.hermes-cluster-ops.type (1) `ClusterRole`	string
rbac.roles.hermes-write-restricted.rules[].apiGroups[] (1) `- - batch - - apps`	string
rbac.roles.hermes-write-restricted.rules[].resources[] (1) `- pods - jobs - pods/exec - deployments`	string
rbac.roles.hermes-write-restricted.rules[].verbs[] (1) `- delete - delete - create - patch - update`	string
rbac.roles.hermes-write-restricted.type (1) `Role`	string
route.app.hostnames[] (6) `- hermes.dcunha.io`	string
route.app.parentRefs[].name (6) `envoy-internal`	string
route.app.parentRefs[].namespace (6) `network`	string
route.app.rules[].backendRefs[].identifier (6) `app`	string
route.app.rules[].backendRefs[].port (6) `9119`	number, string
route.codeserver.hostnames[] (6) `- hermes-code.dcunha.io`	string
route.codeserver.parentRefs[].name (6) `envoy-internal`	string
route.codeserver.parentRefs[].namespace (6) `network`	string
route.codeserver.parentRefs[].sectionName (1) `https`	string
route.codeserver.rules[].backendRefs[].identifier (6) `app`	string
route.codeserver.rules[].backendRefs[].port (6) `12321`	number, string
route.dashboard.hostnames[] (3) `- hermes.${SECRET_DOMAIN}`	string
route.dashboard.parentRefs[].name (3) `envoy-internal`	string
route.dashboard.parentRefs[].namespace (3) `networking`	string
route.dashboard.parentRefs[].sectionName (2) `https`	string
route.dashboard.rules[].backendRefs[].identifier (3) `dashboard`	string
route.dashboard.rules[].backendRefs[].port (3) `http`	string
route.dashboard.annotations."gatus.home-operations.com/endpoint" (1) `url: https://hermes.nikola.wtf/login`	string
route.hermes.hostnames[] (1) `- hermes.mcgrath.nz`	string
route.hermes.parentRefs[].name (1) `envoy-internal`	string
route.hermes.parentRefs[].namespace (1) `networking`	string
route.hermes.parentRefs[].sectionName (1) `https`	string
route.hermes.rules[].backendRefs[].identifier (1) `hermes`	string
route.hermes.rules[].backendRefs[].port (1) `dashboard`	string
route.hermes.rules[].filters[].requestHeaderModifier.set[].name (1) `Origin`	string
route.hermes.rules[].filters[].requestHeaderModifier.set[].value (1) `http://localhost:9119`	string
route.hermes.rules[].filters[].type (1) `RequestHeaderModifier`	string
serviceAccount.hermes.annotations."reloader.stakater.com/match" (1) `true`	string
serviceAccount.hermes.enabled (1) `true`	boolean

Key

Types

controllers.hermes.annotations."reloader.stakater.com/auto" (12)

true

string

controllers.hermes.containers.app.args[] (11)

- gateway
- run

string

controllers.hermes.containers.app.env.HERMES_HOME (11)

/opt/data

string

controllers.hermes.containers.app.env.HOME (11)

/opt/data

string

controllers.hermes.containers.app.env.API_SERVER_ENABLED (9)

true

string, boolean

controllers.hermes.containers.app.env.API_SERVER_HOST (8)

0.0.0.0

string

controllers.hermes.containers.app.env.HERMES_DASHBOARD (8)

string

controllers.hermes.containers.app.env.PATH (8)

/opt/hermes/.venv/bin:/opt/data/.local/bin:/opt/data/.local/go/bin:/opt/data/.local/homebrew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

string

controllers.hermes.containers.app.env.TZ (8)

${TZ}

string

controllers.hermes.containers.app.env.GOPATH (7)

/opt/data/go

string

controllers.hermes.containers.app.env.HOMEBREW_CELLAR (7)

/opt/data/.local/homebrew/Cellar

string

controllers.hermes.containers.app.env.HOMEBREW_PREFIX (7)

/opt/data/.local/homebrew

string

controllers.hermes.containers.app.env.PIP_BREAK_SYSTEM_PACKAGES (7)

string

controllers.hermes.containers.app.env.SEARXNG_URL (7)

http://searxng.selfhosted.svc.cluster.local:8080

string

controllers.hermes.containers.app.env.HOMEBREW_REPOSITORY (6)

/opt/data/.local/homebrew

string

controllers.hermes.containers.app.env.MEMINI_NAMESPACE (6)

hermes

string

controllers.hermes.containers.app.env.TERM (6)

xterm-256color

string

controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_ISSUER (5)

https://id.dcunha.io

string

controllers.hermes.containers.app.env.HERMES_DASHBOARD_PUBLIC_URL (5)

https://hermes.dcunha.io

string

controllers.hermes.containers.app.env.API_SERVER_PORT (4)

number

controllers.hermes.containers.app.env.HERMES_GID (4)

string

controllers.hermes.containers.app.env.HERMES_UID (4)

string

controllers.hermes.containers.app.env.MEMINI_URL (4)

http://memini.ai.svc.cluster.local:8080

string

controllers.hermes.containers.app.env.HERMES_CRON_TIMEOUT (3)

string, number

controllers.hermes.containers.app.env.LITELLM_API_KEY.valueFrom.secretKeyRef.key (3)

LITELLM_API_KEY

string

controllers.hermes.containers.app.env.LITELLM_API_KEY.valueFrom.secretKeyRef.name (3)

hermes-config

string

controllers.hermes.containers.app.env.MEMINI_API_KEY.valueFrom.secretKeyRef.key (3)

MEMINI_API_KEY

string

controllers.hermes.containers.app.env.MEMINI_API_KEY.valueFrom.secretKeyRef.name (3)

hermes-config

string

controllers.hermes.containers.app.env.MEMINI_BASE_URL (3)

http://memini.ai.svc.cluster.local:8080

string

controllers.hermes.containers.app.env.SUMMARY_LLM_API_KEY.valueFrom.secretKeyRef.key (3)

LITELLM_API_KEY

string

controllers.hermes.containers.app.env.SUMMARY_LLM_API_KEY.valueFrom.secretKeyRef.name (3)

hermes-config

string

controllers.hermes.containers.app.env.SUMMARY_LLM_MODEL (3)

opencode-go/deepseek-v4-flash

string

controllers.hermes.containers.app.env.SUMMARY_LLM_URL (3)

http://litellm.ai:4000/v1

string

controllers.hermes.containers.app.env.TERMINAL_MAX_FOREGROUND_TIMEOUT (3)

string

controllers.hermes.containers.app.env.AGENT_BROWSER_ARGS (2)

--no-sandbox,--disable-dev-shm-usage

string

controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_ID.valueFrom.secretKeyRef.key (1)

client-id

string

controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_ID.valueFrom.secretKeyRef.name (1)

kanidm-hermes-oidc

string

controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_ID (2)

hermes

string

controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_SECRET.valueFrom.secretKeyRef.key (2)

client-secret

string

controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_SECRET.valueFrom.secretKeyRef.name (2)

kanidm-hermes-oidc

string

controllers.hermes.containers.app.env.HERMES_DASHBOARD_TUI (2)

string

controllers.hermes.containers.app.env.HOMELAB_GH_TOKEN.valueFrom.secretKeyRef.key (2)

GH_TOKEN

string

controllers.hermes.containers.app.env.HOMELAB_GH_TOKEN.valueFrom.secretKeyRef.name (2)

hermes-config

string

controllers.hermes.containers.app.env.AGENTMEMORY_URL (1)

http://agentmemory.ai.svc.cluster.local:3111

string

controllers.hermes.containers.app.env.API_SERVER_CORS_ORIGINS (1)

http://localhost:3000,http://127.0.0.1:3000

string

controllers.hermes.containers.app.env.API_SERVER_KEY.valueFrom.secretKeyRef.key (1)

API_SERVER_KEY

string

controllers.hermes.containers.app.env.API_SERVER_KEY.valueFrom.secretKeyRef.name (1)

hermes-config

string

controllers.hermes.containers.app.env.API_SERVER_KEY (1)

CFE1B842-AEF8-4704-A51D-1E885A5C7967

string

controllers.hermes.containers.app.env.BLUEBUBBLES_REQUIRE_MENTION (1)

true

string

controllers.hermes.containers.app.env.BLUEBUBBLES_SERVER_URL (1)

http://bluebubbles.internal:1234

string

controllers.hermes.containers.app.env.BLUEBUBBLES_WEBHOOK_HOST (1)

0.0.0.0

string

controllers.hermes.containers.app.env.BLUEBUBBLES_WEBHOOK_PATH (1)

/bluebubbles-webhook

string

controllers.hermes.containers.app.env.BLUEBUBBLES_WEBHOOK_PORT (1)

string

controllers.hermes.containers.app.env.DISCORD_WEBHOOK.valueFrom.secretKeyRef.key (1)

DISCORD_WEBHOOK

string

controllers.hermes.containers.app.env.DISCORD_WEBHOOK.valueFrom.secretKeyRef.name (1)

hermes-config

string

controllers.hermes.containers.app.env.DOCKER_CERT_PATH (1)

/certs/client

string

controllers.hermes.containers.app.env.DOCKER_HOST (1)

tcp://localhost:2376

string

controllers.hermes.containers.app.env.DOCKER_TLS_VERIFY (1)

string

controllers.hermes.containers.app.env.GATEWAY_ALLOW_ALL_USERS (1)

true

boolean

controllers.hermes.containers.app.env.HERMES_DASHBOARD_INSECURE (1)

string

controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_REDIRECT_URI (1)

https://hermes.rnatr.com/api/auth/oidc/callback

string

controllers.hermes.containers.app.env.HOMEBREW_NO_ANALYTICS (1)

string

controllers.hermes.containers.app.env.HOMEBREW_NO_AUTO_UPDATE (1)

string

controllers.hermes.containers.app.env.HONCHO_WORKSPACE_ID (1)

hermes

string

controllers.hermes.containers.app.env.LM_BASE_URL (1)

http://10.50.0.81:1234/v1

string

controllers.hermes.containers.app.env.MATRIX_ALLOWED_USERS (1)

@andrew:goyangi.io

string

controllers.hermes.containers.app.env.MATRIX_HOMESERVER (1)

https://matrix.goyangi.io

string

controllers.hermes.containers.app.env.MATRIX_USER_ID (1)

@hermes:goyangi.io

string

controllers.hermes.containers.app.env.MEMINI_HOME (1)

personal/jan

string

controllers.hermes.containers.app.env.OPENCODE_GO_BASE_URL (1)

https://opencode.ai/zen/go/v1

string

controllers.hermes.containers.app.env.PYTHONPATH (1)

/opt/hermes/.venv/lib/python3.13/site-packages/

string

controllers.hermes.containers.app.image.repository (11)

nousresearch/hermes-agent

string

controllers.hermes.containers.app.image.tag (11)

v2026.8.3@sha256:16788311e2fa3035456bdc1bafb8ec2b1777db64ebf020af9bb7eb73c3712c9e

string

controllers.hermes.containers.app.resources.limits.memory (11)

2Gi

string

controllers.hermes.containers.app.resources.limits.cpu (2)

number

controllers.hermes.containers.app.resources.requests.cpu (11)

500m

string

controllers.hermes.containers.app.resources.requests.memory (10)

1Gi

string

controllers.hermes.containers.app.envFrom[].secretRef.name (10)

hermes-secret

string

controllers.hermes.containers.app.securityContext.allowPrivilegeEscalation (8)

false

boolean

controllers.hermes.containers.app.securityContext.readOnlyRootFilesystem (8)

false

boolean

controllers.hermes.containers.app.securityContext.capabilities.drop[] (6)

- ALL

string

controllers.hermes.containers.app.securityContext.capabilities.add[] (5)

- CHOWN
- DAC_OVERRIDE
- FOWNER
- FSETID
- SETGID
- SETUID

string

controllers.hermes.containers.app.securityContext.runAsGroup (5)

number

controllers.hermes.containers.app.securityContext.runAsUser (5)

number

controllers.hermes.containers.app.securityContext.runAsNonRoot (3)

false

boolean

controllers.hermes.containers.app.probes.liveness.enabled (5)

true

boolean

controllers.hermes.containers.app.probes.liveness.custom (4)

true

boolean

controllers.hermes.containers.app.probes.liveness.spec.periodSeconds (4)

number

controllers.hermes.containers.app.probes.liveness.spec.failureThreshold (3)

number

controllers.hermes.containers.app.probes.liveness.spec.httpGet.path (3)

/health

string

controllers.hermes.containers.app.probes.liveness.spec.httpGet.port (3)

number

controllers.hermes.containers.app.probes.liveness.spec.initialDelaySeconds (3)

number

controllers.hermes.containers.app.probes.liveness.spec.timeoutSeconds (3)

number

controllers.hermes.containers.app.probes.liveness.spec.tcpSocket.port (1)

number

controllers.hermes.containers.app.probes.readiness.enabled (5)

true

boolean

controllers.hermes.containers.app.probes.readiness.custom (4)

true

boolean

controllers.hermes.containers.app.probes.readiness.spec.periodSeconds (4)

number

controllers.hermes.containers.app.probes.readiness.spec.failureThreshold (3)

number

controllers.hermes.containers.app.probes.readiness.spec.httpGet.path (3)

/health

string

controllers.hermes.containers.app.probes.readiness.spec.httpGet.port (3)

number

controllers.hermes.containers.app.probes.readiness.spec.initialDelaySeconds (3)

number

controllers.hermes.containers.app.probes.readiness.spec.timeoutSeconds (3)

number

controllers.hermes.containers.app.probes.readiness.spec.tcpSocket.port (1)

number

controllers.hermes.containers.app.probes.startup.enabled (5)

false

boolean

controllers.hermes.containers.app.probes.startup.custom (1)

true

boolean

controllers.hermes.containers.app.probes.startup.spec.failureThreshold (1)

number

controllers.hermes.containers.app.probes.startup.spec.httpGet.path (1)

/health

string

controllers.hermes.containers.app.probes.startup.spec.httpGet.port (1)

number

controllers.hermes.containers.app.probes.startup.spec.periodSeconds (1)

number

controllers.hermes.containers.app.ports[].containerPort (3)

8642
9119

number

controllers.hermes.containers.app.ports[].name (3)

http
dashboard

string

controllers.hermes.containers.app.ports[].protocol (3)

TCP
TCP

string

controllers.hermes.containers.app.command[] (1)

- /opt/hermes/bin/hermes

string

controllers.hermes.containers.codeserver.args[] (5)

- --auth
- none
- --user-data-dir
- /opt/data/.vscode
- --extensions-dir
- /opt/data/.vscode
- --port
- "12321"
- /opt/data

string

controllers.hermes.containers.codeserver.image.repository (5)

ghcr.io/coder/code-server

string

controllers.hermes.containers.codeserver.image.tag (5)

4.131.0@sha256:3623e6362abdec6258472882b06fdeec9d6ce2ad3fda316b3c5d7ed092b89add

string

controllers.hermes.containers.codeserver.resources.limits.memory (5)

1Gi

string

controllers.hermes.containers.codeserver.resources.requests.cpu (5)

10m

string

controllers.hermes.containers.codeserver.securityContext.allowPrivilegeEscalation (4)

false

boolean

controllers.hermes.containers.codeserver.securityContext.capabilities.drop[] (4)

- ALL

string

controllers.hermes.containers.codeserver.env.GH_TOKEN.valueFrom.secretKeyRef.key (2)

GH_TOKEN

string

controllers.hermes.containers.codeserver.env.GH_TOKEN.valueFrom.secretKeyRef.name (2)

hermes-config

string

controllers.hermes.containers.codeserver.env.TZ (2)

Europe/Paris

string

controllers.hermes.containers.codeserver.env.DISCORD_WEBHOOK.valueFrom.secretKeyRef.key (1)

DISCORD_WEBHOOK

string

controllers.hermes.containers.codeserver.env.DISCORD_WEBHOOK.valueFrom.secretKeyRef.name (1)

hermes-config

string

controllers.hermes.containers.codeserver.env.GITHUB_TOKEN.valueFrom.secretKeyRef.key (1)

GITHUB_TOKEN

string

controllers.hermes.containers.codeserver.env.GITHUB_TOKEN.valueFrom.secretKeyRef.name (1)

hermes-secret

string

controllers.hermes.containers.codeserver.ports[].containerPort (1)

number

controllers.hermes.containers.codeserver.ports[].name (1)

codeserver

string

controllers.hermes.containers.codeserver.ports[].protocol (1)

TCP

string

controllers.hermes.containers.dashboard.args[] (3)

- dashboard
- --host
- "0.0.0.0"

string

controllers.hermes.containers.dashboard.env.GATEWAY_HEALTH_URL (3)

http://localhost:8642

string

controllers.hermes.containers.dashboard.env.TZ (2)

America/Edmonton

string

controllers.hermes.containers.dashboard.env.HERMES_DASHBOARD_OIDC_SCOPES (1)

openid profile email offline_access

string

controllers.hermes.containers.dashboard.env.HERMES_DASHBOARD_PUBLIC_URL (1)

https://${APP}.${SECRET_DOMAIN}

string

controllers.hermes.containers.dashboard.image.repository (3)

nousresearch/hermes-agent

string

controllers.hermes.containers.dashboard.image.tag (3)

v2026.8.3@sha256:16788311e2fa3035456bdc1bafb8ec2b1777db64ebf020af9bb7eb73c3712c9e

string

controllers.hermes.containers.dashboard.resources.limits.memory (3)

1Gi

string

controllers.hermes.containers.dashboard.resources.requests.cpu (2)

500m

string

controllers.hermes.containers.dashboard.resources.requests.memory (1)

256Mi

string

controllers.hermes.containers.dashboard.envFrom[].secretRef.name (2)

hermes-dashboard

string

controllers.hermes.containers.dashboard.ports[].containerPort (2)

number

controllers.hermes.containers.dashboard.ports[].name (2)

http

string

controllers.hermes.containers.dashboard.ports[].protocol (2)

TCP

string

controllers.hermes.containers.dashboard.command[] (1)

- /opt/hermes/bin/hermes

string

controllers.hermes.containers.dashboard.securityContext.runAsGroup (1)

number

controllers.hermes.containers.dashboard.securityContext.runAsUser (1)

number

controllers.hermes.containers.gateway.args[] (1)

- gateway
- run

string

controllers.hermes.containers.gateway.env._HERMES_FORCE_GITHUB_TOKEN.valueFrom.secretKeyRef.key (1)

GITHUB_TOKEN

string

controllers.hermes.containers.gateway.env._HERMES_FORCE_GITHUB_TOKEN.valueFrom.secretKeyRef.name (1)

hermes-secrets

string

controllers.hermes.containers.gateway.env.API_SERVER_ENABLED (1)

true

boolean

controllers.hermes.containers.gateway.env.API_SERVER_HOST (1)

0.0.0.0

string

controllers.hermes.containers.gateway.env.API_SERVER_PORT (1)

string

controllers.hermes.containers.gateway.env.CRAWL4AI_API_URL (1)

http://crawl4ai.ai.svc.cluster.local:11235

string

controllers.hermes.containers.gateway.env.HERMES_HOME (1)

/opt/data

string

controllers.hermes.containers.gateway.env.HERMES_STREAM_READ_TIMEOUT (1)

string

controllers.hermes.containers.gateway.env.HERMES_STREAM_STALE_TIMEOUT (1)

string

controllers.hermes.containers.gateway.env.HOME (1)

/opt/data/home

string

controllers.hermes.containers.gateway.env.HOMEBREW_NO_ANALYTICS (1)

string

controllers.hermes.containers.gateway.env.HOMEBREW_NO_AUTO_UPDATE (1)

string

controllers.hermes.containers.gateway.env.HOMEBREW_NO_ENV_HINTS (1)

string

controllers.hermes.containers.gateway.env.MEMINI_BASE_URL (1)

http://memini.ai.svc.cluster.local:8080

string

controllers.hermes.containers.gateway.env.MEMINI_NAMESPACE (1)

hermes

string

controllers.hermes.containers.gateway.env.OPENAI_BASE_URL (1)

http://bifrost.ai.svc.cluster.local:8080/v1

string

controllers.hermes.containers.gateway.env.PATH (1)

/opt/data/bin:/home/linuxbrew/.linuxbrew/bin:/opt/hermes/.venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

string

controllers.hermes.containers.gateway.env.S6_READ_ONLY_ROOT (1)

string

controllers.hermes.containers.gateway.env.S6_YES_I_WANT_A_WORLD_WRITABLE_RUN_BECAUSE_KUBERNETES (1)

string

controllers.hermes.containers.gateway.env.SEARXNG_URL (1)

http://searxng.tools.svc.cluster.local:8080

string

controllers.hermes.containers.gateway.env.TZ (1)

Europe/Berlin

string

controllers.hermes.containers.gateway.envFrom[].secretRef.name (1)

hermes-secrets

string

controllers.hermes.containers.gateway.image.repository (1)

ghcr.io/gabrielcosi/hermes-agent

string

controllers.hermes.containers.gateway.image.tag (1)

v2026.8.3@sha256:956bb99b771239518aa8b39c2fcfb563c5525461f955b20519be4c1f50155992

string

controllers.hermes.containers.gateway.resources.limits.memory (1)

2Gi

string

controllers.hermes.containers.gateway.resources.requests.cpu (1)

50m

string

controllers.hermes.containers.gateway.resources.requests.memory (1)

512Mi

string

controllers.hermes.containers.gateway.securityContext.allowPrivilegeEscalation (1)

false

boolean

controllers.hermes.containers.gateway.securityContext.capabilities.drop[] (1)

- ALL

string

controllers.hermes.containers.gateway.securityContext.readOnlyRootFilesystem (1)

true

boolean

controllers.hermes.initContainers.init.command[] (9)

- sh
- -c
- set -euo pipefail
mkdir -p /opt/data
cp /run/config/config.yaml /opt/data/config.yaml
cp /run/config/env /opt/data/.env
chmod 600 /opt/data/.env

string

controllers.hermes.initContainers.init.image.repository (9)

docker.io/library/alpine

string

controllers.hermes.initContainers.init.image.tag (9)

3.24

string

controllers.hermes.initContainers.init.securityContext.runAsGroup (5)

number

controllers.hermes.initContainers.init.securityContext.runAsUser (5)

number

controllers.hermes.initContainers.init.securityContext.allowPrivilegeEscalation (4)

false

boolean

controllers.hermes.initContainers.init.securityContext.capabilities.drop[] (4)

- ALL

string

controllers.hermes.initContainers.install-tools.command[] (6)

- /bin/sh
- -c
- set -e
mkdir -p /opt/data/.local/bin /opt/data/.local/go

rm -f /opt/data/.local/bin/hermes /opt/data/.local/bin/docker

if [ ! -f /opt/data/.local/go/bin/go ]; then
  cd /tmp
  curl -fsSL https://go.dev/dl/go1.23.5.linux-amd64.tar.gz -o go.tar.gz
  tar xzf go.tar.gz
  mv go /opt/data/.local/
  rm -rf go.tar.gz
fi

if [ ! -f /opt/data/.local/homebrew/bin/brew ]; then
  export HOMEBREW_PREFIX=/opt/data/.local/homebrew
  mkdir -p $HOMEBREW_PREFIX
  git clone --depth 1 https://github.com/Homebrew/brew $HOMEBREW_PREFIX
fi

if [ ! -d /opt/data/plugins/memini ]; then
  hermes plugins install eleboucher/memini-hermes
fi

string

controllers.hermes.initContainers.install-tools.image.repository (6)

nousresearch/hermes-agent

string

controllers.hermes.initContainers.install-tools.image.tag (6)

v2026.7.7.2@sha256:9c841866021c54c4596849f6135717e8a4d52ba510b7f52c50aef1de1a283973

string

controllers.hermes.initContainers.install-tools.securityContext.allowPrivilegeEscalation (3)

false

boolean

controllers.hermes.initContainers.install-tools.securityContext.capabilities.drop[] (3)

- ALL

string

controllers.hermes.initContainers.install-tools.securityContext.runAsGroup (3)

number

controllers.hermes.initContainers.install-tools.securityContext.runAsUser (3)

number

controllers.hermes.initContainers.install-tools.env.HERMES_HOME (1)

/opt/data

string

controllers.hermes.initContainers.install-tools.env.HOME (1)

/opt/data

string

controllers.hermes.initContainers.install-tools.env.PATH (1)

/opt/hermes/.venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

string

controllers.hermes.initContainers.copy-agent-source.command[] (3)

- /bin/sh
- -c
- set -e
cp -r /opt/hermes/. /agent-src/ 2>/tmp/cp.err || true
if grep -v 'Permission denied' /tmp/cp.err; then exit 1; fi
test -e /agent-src/.venv

string

controllers.hermes.initContainers.copy-agent-source.image.repository (3)

nousresearch/hermes-agent

string

controllers.hermes.initContainers.copy-agent-source.image.tag (3)

v2026.7.7.2@sha256:9c841866021c54c4596849f6135717e8a4d52ba510b7f52c50aef1de1a283973

string

controllers.hermes.initContainers.copy-agent-source.securityContext.allowPrivilegeEscalation (3)

false

boolean

controllers.hermes.initContainers.copy-agent-source.securityContext.capabilities.drop[] (3)

- ALL

string

controllers.hermes.initContainers.copy-agent-source.securityContext.runAsGroup (3)

number

controllers.hermes.initContainers.copy-agent-source.securityContext.runAsUser (3)

number

controllers.hermes.initContainers.fix-run.command[] (2)

- sh
- -c
- chown 10000:10000 /run && chmod 755 /run

string

controllers.hermes.initContainers.fix-run.image.repository (2)

docker.io/library/busybox

string

controllers.hermes.initContainers.fix-run.image.tag (2)

latest

string

controllers.hermes.initContainers.fix-run.securityContext.runAsGroup (2)

number

controllers.hermes.initContainers.fix-run.securityContext.runAsNonRoot (2)

false

boolean

controllers.hermes.initContainers.fix-run.securityContext.runAsUser (2)

number

controllers.hermes.initContainers.01-agent-source.command[] (1)

- /bin/sh
- -c
- set -e
cp -r /opt/hermes/. /agent-src/
chown -R 10000:10000 /agent-src/
chmod -R u+rwX /agent-src/plugins/

string

controllers.hermes.initContainers.01-agent-source.image.repository (1)

docker.io/nousresearch/hermes-agent

string

controllers.hermes.initContainers.01-agent-source.image.tag (1)

v2026.8.3@sha256:16788311e2fa3035456bdc1bafb8ec2b1777db64ebf020af9bb7eb73c3712c9e

string

controllers.hermes.initContainers.01-agent-source.securityContext.allowPrivilegeEscalation (1)

true

boolean

controllers.hermes.initContainers.01-agent-source.securityContext.runAsGroup (1)

number

controllers.hermes.initContainers.01-agent-source.securityContext.runAsUser (1)

number

controllers.hermes.initContainers.02-init-config.command[] (1)

- sh
- -c
- set -euo pipefail
mkdir -p /opt/data
cp /run/config/config.yaml /opt/data/config.yaml
sed -i "s|\${LITELLM_API_KEY}|$LITELLM_API_KEY|g" /opt/data/config.yaml
sed -i "s|\${SECRET_DOMAIN}|$SECRET_DOMAIN|g" /opt/data/config.yaml
chown 10000:10000 /opt/data/config.yaml

string

controllers.hermes.initContainers.02-init-config.envFrom[].secretRef.name (1)

{{ .Release.Name }}-secret

string

controllers.hermes.initContainers.02-init-config.image.repository (1)

docker.io/library/alpine

string

controllers.hermes.initContainers.02-init-config.image.tag (1)

3.24

string

controllers.hermes.initContainers.02-init-config.securityContext.allowPrivilegeEscalation (1)

false

boolean

controllers.hermes.initContainers.02-init-config.securityContext.capabilities.drop[] (1)

- ALL

string

controllers.hermes.initContainers.02-init-config.securityContext.runAsGroup (1)

number

controllers.hermes.initContainers.02-init-config.securityContext.runAsUser (1)

number

controllers.hermes.initContainers.03-install-tools.command[] (1)

- /bin/sh
- -c
- set -e
mkdir -p /opt/data/.local/bin /opt/data/.local/go

rm -f /opt/data/.local/bin/hermes /opt/data/.local/bin/docker

if [ ! -f /opt/data/.local/bin/gh ]; then
  cd /tmp
  curl -fsSL https://github.com/cli/cli/releases/download/v2.61.0/gh_2.61.0_linux_amd64.tar.gz -o gh.tar.gz
  tar xzf gh.tar.gz
  cp gh_2.61.0_linux_amd64/bin/gh /opt/data/.local/bin/
  rm -rf gh.tar.gz gh_2.61.0_linux_amd64
fi

if [ ! -f /opt/data/.local/go/bin/go ]; then
  cd /tmp
  curl -fsSL https://go.dev/dl/go1.23.5.linux-amd64.tar.gz -o go.tar.gz
  tar xzf go.tar.gz
  mv go /opt/data/.local/
  rm -rf go.tar.gz
fi

if [ ! -f /opt/data/.local/homebrew/bin/brew ]; then
  export HOMEBREW_PREFIX=/opt/data/.local/homebrew
  mkdir -p $HOMEBREW_PREFIX
  git clone --depth 1 https://github.com/Homebrew/brew $HOMEBREW_PREFIX
fi

if [ -f /opt/hermes/plugins/platforms/photon/sidecar/package.json ]; then
  cd /opt/hermes/plugins/platforms/photon/sidecar && npm ci 2>/dev/null || npm install
fi

string

controllers.hermes.initContainers.03-install-tools.image.repository (1)

docker.io/nousresearch/hermes-agent

string

controllers.hermes.initContainers.03-install-tools.image.tag (1)

v2026.8.3@sha256:16788311e2fa3035456bdc1bafb8ec2b1777db64ebf020af9bb7eb73c3712c9e

string

controllers.hermes.initContainers.03-install-tools.securityContext.allowPrivilegeEscalation (1)

false

boolean

controllers.hermes.initContainers.03-install-tools.securityContext.capabilities.drop[] (1)

- ALL

string

controllers.hermes.initContainers.03-install-tools.securityContext.runAsGroup (1)

number

controllers.hermes.initContainers.03-install-tools.securityContext.runAsUser (1)

number

controllers.hermes.initContainers.copy-config.command[] (1)

- sh
- -c
- set -euo pipefail
mkdir -p /opt/data
cp /run/config/config.yaml /opt/data/config.yaml
chown 10000:10000 /opt/data/config.yaml

string

controllers.hermes.initContainers.copy-config.image.repository (1)

docker.io/library/alpine

string

controllers.hermes.initContainers.copy-config.image.tag (1)

3.24

string

controllers.hermes.initContainers.daemon.env.DOCKER_TLS_CERTDIR (1)

/certs

string

controllers.hermes.initContainers.daemon.image.repository (1)

docker

string

controllers.hermes.initContainers.daemon.image.tag (1)

29.7.1-dind@sha256:e8faad5a8dc5279dff929afc5449f2791736912fff9f99351d742db2fad01b4c

string

controllers.hermes.initContainers.daemon.probes.liveness.custom (1)

true

boolean

controllers.hermes.initContainers.daemon.probes.liveness.enabled (1)

true

boolean

controllers.hermes.initContainers.daemon.probes.liveness.spec.exec.command[] (1)

- docker
- info

string

controllers.hermes.initContainers.daemon.probes.liveness.spec.failureThreshold (1)

number

controllers.hermes.initContainers.daemon.probes.liveness.spec.periodSeconds (1)

number

controllers.hermes.initContainers.daemon.probes.liveness.spec.timeoutSeconds (1)

number

controllers.hermes.initContainers.daemon.probes.readiness.custom (1)

true

boolean

controllers.hermes.initContainers.daemon.probes.readiness.enabled (1)

true

boolean

controllers.hermes.initContainers.daemon.probes.readiness.spec.exec.command[] (1)

- docker
- info

string

controllers.hermes.initContainers.daemon.probes.readiness.spec.failureThreshold (1)

number

controllers.hermes.initContainers.daemon.probes.readiness.spec.periodSeconds (1)

number

controllers.hermes.initContainers.daemon.probes.readiness.spec.timeoutSeconds (1)

number

controllers.hermes.initContainers.daemon.probes.startup.custom (1)

true

boolean

controllers.hermes.initContainers.daemon.probes.startup.enabled (1)

true

boolean

controllers.hermes.initContainers.daemon.probes.startup.spec.exec.command[] (1)

- docker
- info

string

controllers.hermes.initContainers.daemon.probes.startup.spec.failureThreshold (1)

number

controllers.hermes.initContainers.daemon.probes.startup.spec.periodSeconds (1)

number

controllers.hermes.initContainers.daemon.probes.startup.spec.timeoutSeconds (1)

number

controllers.hermes.initContainers.daemon.restartPolicy (1)

Always

string

controllers.hermes.initContainers.daemon.securityContext.allowPrivilegeEscalation (1)

true

boolean

controllers.hermes.initContainers.daemon.securityContext.privileged (1)

true

boolean

controllers.hermes.initContainers.daemon.securityContext.runAsGroup (1)

number

controllers.hermes.initContainers.daemon.securityContext.runAsUser (1)

number

controllers.hermes.initContainers.install-memini-plugin.command[] (1)

- sh
- -c
- set -e
if [ ! -d /opt/data/plugins/memini ]; then
  mkdir -p /opt/data/plugins
  cd /tmp
  rm -rf memini-src
  git clone --depth 1 --branch main https://github.com/eleboucher/memini memini-src
  mv memini-src/integrations/hermes/plugin/memini /opt/data/plugins/memini
  rm -rf memini-src
fi

string

controllers.hermes.initContainers.install-memini-plugin.image.repository (1)

docker.io/alpine/git

string

controllers.hermes.initContainers.install-memini-plugin.image.tag (1)

v2.54.0

string

controllers.hermes.initContainers.install-memini-plugin.securityContext.allowPrivilegeEscalation (1)

false

boolean

controllers.hermes.initContainers.install-memini-plugin.securityContext.capabilities.drop[] (1)

- ALL

string

controllers.hermes.initContainers.seed-config.command[] (1)

- sh
- -c
- set -eu
if [ ! -f /opt/data/config.yaml ]; then
  echo "seed-config: no persisted config; seeding from git source."
  cp /config-src/config.yaml /opt/data/config.yaml
  cp /config-src/config.yaml /opt/data/.config.git-base.yaml
  exit 0
fi
cp /opt/data/config.yaml /tmp/config.work.yaml
if [ -f /opt/data/.config.git-base.yaml ]; then
  yq -o=json -I=0 '[... | path] | .[] | select(length > 0) | select(.[-1] | tag == "!!str")' /opt/data/.config.git-base.yaml | sort -u > /tmp/base.keys
  yq -o=json -I=0 '[... | path] | .[] | select(length > 0) | select(.[-1] | tag == "!!str")' /config-src/config.yaml | sort -u > /tmp/src.keys
  if [ -s /tmp/src.keys ]; then
    grep -Fxv -f /tmp/src.keys /tmp/base.keys > /tmp/removed.keys || true
    if [ -s /tmp/removed.keys ]; then
      echo "seed-config: pruning keys removed from git since last reconcile:"
      cat /tmp/removed.keys
      yq ea -p=json -o=json -I=0 '[.]' /tmp/removed.keys > /tmp/removed.json
      yq -i 'del(.. | select( ([path] - load("/tmp/removed.json")) | length == 0 ))' /tmp/config.work.yaml
    fi
  fi
fi
yq eval-all 'select(fileIndex == 0) * select(fileIndex == 1)' /tmp/config.work.yaml /config-src/config.yaml > /tmp/config.final.yaml
cp /tmp/config.final.yaml /opt/data/config.yaml
cp /config-src/config.yaml /opt/data/.config.git-base.yaml
echo "seed-config: merged git over persisted config (git wins; runtime-only keys kept; git deletions pruned)."

string

controllers.hermes.initContainers.seed-config.image.repository (1)

mikefarah/yq

string

controllers.hermes.initContainers.seed-config.image.tag (1)

4.53.3

string

controllers.hermes.initContainers.seed-config.securityContext.allowPrivilegeEscalation (1)

false

boolean

controllers.hermes.initContainers.seed-config.securityContext.capabilities.drop[] (1)

- ALL

string

controllers.hermes.initContainers.seed-config.securityContext.readOnlyRootFilesystem (1)

true

boolean

controllers.hermes.initContainers.seed-tools.command[] (1)

- sh
- -c
- set -e
if [ -e /homebrew-runtime/.seeded ]; then
  echo "Homebrew already seeded; skipping."
else
  echo "Resetting incomplete Homebrew seed."
  chmod -R u+w /homebrew-runtime 2>/dev/null || true
  find /homebrew-runtime -mindepth 1 -maxdepth 1 -exec rm -rf {} +
  echo "Seeding Homebrew from image /home/linuxbrew/.linuxbrew into /homebrew-runtime."
  cp -RP /home/linuxbrew/.linuxbrew/. /homebrew-runtime/
  touch /homebrew-runtime/.seeded
  echo "Homebrew seed complete."
fi
echo "Linking memini plugin into /opt/data/plugins."
mkdir -p /opt/data/plugins
ln -sfn /opt/memini /opt/data/plugins/memini
echo "Ensuring /opt/data/home and /opt/data/bin exist."
mkdir -p /opt/data/home /opt/data/bin
echo "Writing /opt/data/home/.profile with PATH."
printf '%s\n' 'export PATH="/opt/data/bin:/home/linuxbrew/.linuxbrew/bin:/opt/hermes/.venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"' > /opt/data/home/.profile
echo "Mirroring .profile to /opt/data/home/.bashrc."
cp /opt/data/home/.profile /opt/data/home/.bashrc
echo "Shell dotfiles ready."

string

controllers.hermes.initContainers.seed-tools.image.repository (1)

ghcr.io/gabrielcosi/hermes-agent

string

controllers.hermes.initContainers.seed-tools.image.tag (1)

v2026.8.3@sha256:956bb99b771239518aa8b39c2fcfb563c5525461f955b20519be4c1f50155992

string

controllers.hermes.initContainers.seed-tools.securityContext.allowPrivilegeEscalation (1)

false

boolean

controllers.hermes.initContainers.seed-tools.securityContext.capabilities.drop[] (1)

- ALL

string

controllers.hermes.initContainers.seed-tools.securityContext.readOnlyRootFilesystem (1)

true

boolean

controllers.hermes.strategy (8)

Recreate

string

controllers.hermes.replicas (4)

number

controllers.hermes.type (4)

deployment

string

controllers.hermes.pod.securityContext.fsGroup (1)

number

controllers.hermes.pod.securityContext.fsGroupChangePolicy (1)

OnRootMismatch

string

controllers.hermes.pod.securityContext.runAsGroup (1)

number

controllers.hermes.pod.securityContext.runAsNonRoot (1)

true

boolean

controllers.hermes.pod.securityContext.runAsUser (1)

number

controllers.hermes.pod.securityContext.seccompProfile.type (1)

RuntimeDefault

string

controllers.hermes.serviceAccount.identifier (1)

hermes

string

controllers.codeserver.containers.codeserver.args[] (1)

- --auth
- none
- --user-data-dir
- /opt/data/.vscode
- --extensions-dir
- /opt/data/.vscode
- --port
- "12321"
- /opt/data

string

controllers.codeserver.containers.codeserver.env.GOPATH (1)

/opt/data/go

string

controllers.codeserver.containers.codeserver.env.HOME (1)

/opt/data

string

controllers.codeserver.containers.codeserver.env.HOMEBREW_CELLAR (1)

/opt/data/.local/homebrew/Cellar

string

controllers.codeserver.containers.codeserver.env.HOMEBREW_PREFIX (1)

/opt/data/.local/homebrew

string

controllers.codeserver.containers.codeserver.env.HOMEBREW_REPOSITORY (1)

/opt/data/.local/homebrew

string

controllers.codeserver.containers.codeserver.env.PATH (1)

/opt/data/.local/bin:/opt/data/.local/go/bin:/opt/data/.local/homebrew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

string

controllers.codeserver.containers.codeserver.env.TZ (1)

Pacific/Auckland

string

controllers.codeserver.containers.codeserver.image.repository (1)

ghcr.io/coder/code-server

string

controllers.codeserver.containers.codeserver.image.tag (1)

4.131.0@sha256:3623e6362abdec6258472882b06fdeec9d6ce2ad3fda316b3c5d7ed092b89add

string

controllers.codeserver.containers.codeserver.resources.limits.memory (1)

1Gi

string

controllers.codeserver.containers.codeserver.resources.requests.cpu (1)

10m

string

controllers.codeserver.pod.affinity.podAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchLabels."app.kubernetes.io/controller" (1)

hermes

string

controllers.codeserver.pod.affinity.podAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchLabels."app.kubernetes.io/name" (1)

hermes

string

controllers.codeserver.pod.affinity.podAffinity.requiredDuringSchedulingIgnoredDuringExecution[].topologyKey (1)

kubernetes.io/hostname

string

controllers.codeserver.pod.securityContext.runAsGroup (1)

number

controllers.codeserver.pod.securityContext.runAsUser (1)

number

controllers.codeserver.strategy (1)

Recreate

string

defaultPodOptions.securityContext.fsGroup (10)

number

defaultPodOptions.securityContext.fsGroupChangePolicy (10)

OnRootMismatch

string

defaultPodOptions.securityContext.seccompProfile.type (9)

RuntimeDefault

string

defaultPodOptions.securityContext.runAsGroup (5)

number

defaultPodOptions.securityContext.runAsUser (5)

number

defaultPodOptions.securityContext.runAsNonRoot (2)

true

boolean

defaultPodOptions.terminationGracePeriodSeconds (5)

number

defaultPodOptions.automountServiceAccountToken (4)

true

boolean

defaultPodOptions.nodeSelector."kubernetes.io/arch" (1)

amd64

string

persistence.data.existingClaim (10)

hermes

string

persistence.data.globalMounts[].path (6)

/opt/data

string

persistence.data.advancedMounts.hermes.app[].path (4)

/opt/data

string

persistence.data.advancedMounts.hermes.codeserver[].path (4)

/opt/data

string

persistence.data.advancedMounts.hermes.init[].path (3)

/opt/data

string

persistence.data.advancedMounts.hermes.install-tools[].path (3)

/opt/data

string

persistence.data.advancedMounts.hermes.02-init-config[].path (1)

/opt/data

string

persistence.data.advancedMounts.hermes.03-install-tools[].path (1)

/opt/data

string

persistence.data.advancedMounts.hermes.dashboard[].path (1)

/opt/data

string

persistence.tmp.type (9)

emptyDir

string

persistence.tmp.globalMounts[].path (8)

/tmp

string

persistence.config.name (8)

hermes-config

string

persistence.config.type (8)

configMap

string

persistence.config.defaultMode (6)

number

persistence.config.globalMounts[].path (5)

/opt/data

string

persistence.config.globalMounts[].subPath (2)

config.yaml

string

persistence.config.globalMounts[].readOnly (1)

true

boolean

persistence.config.advancedMounts.hermes.init[].path (3)

/run/config/env

string

persistence.config.advancedMounts.hermes.init[].subPath (3)

env

string

persistence.config.advancedMounts.hermes.copy-config[].path (1)

/run/config/config.yaml

string

persistence.config.advancedMounts.hermes.copy-config[].subPath (1)

config.yaml

string

persistence.config.advancedMounts.hermes.seed-config[].path (1)

/config-src/config.yaml

string

persistence.config.advancedMounts.hermes.seed-config[].readOnly (1)

true

boolean

persistence.config.advancedMounts.hermes.seed-config[].subPath (1)

config.yaml

string

persistence.config.existingClaim (2)

{{ .Release.Name }}

string

persistence.run.type (5)

emptyDir

string

persistence.run.advancedMounts.hermes.app[].path (3)

/run

string

persistence.run.globalMounts[].path (2)

/run

string

persistence.agent-source.advancedMounts.hermes.app[].path (4)

/opt/hermes

string

persistence.agent-source.advancedMounts.hermes.copy-agent-source[].path (3)

/agent-src

string

persistence.agent-source.advancedMounts.hermes.install-tools[].path (3)

/opt/hermes

string

persistence.agent-source.advancedMounts.hermes.01-agent-source[].path (1)

/agent-src

string

persistence.agent-source.advancedMounts.hermes.03-install-tools[].path (1)

/opt/hermes

string

persistence.agent-source.advancedMounts.hermes.dashboard[].path (1)

/opt/hermes

string

persistence.agent-source.type (4)

emptyDir

string

persistence.config-yaml.advancedMounts.hermes.init[].path (4)

/run/config/config.yaml

string

persistence.config-yaml.advancedMounts.hermes.init[].subPath (4)

config.yaml

string

persistence.config-yaml.defaultMode (4)

number

persistence.config-yaml.name (4)

hermes-configmap

string

persistence.config-yaml.type (4)

configMap

string

persistence.configmap.defaultMode (2)

number

persistence.configmap.globalMounts[].path (2)

/tmp/config.yaml

string

persistence.configmap.globalMounts[].subPath (2)

config.yaml

string

persistence.configmap.name (2)

{{ .Release.Name }}-config

string

persistence.configmap.type (2)

configMap

string

persistence.certs.globalMounts[].path (1)

/certs

string

persistence.certs.type (1)

emptyDir

string

persistence.config-secret.defaultMode (1)

number

persistence.config-secret.globalMounts[].path (1)

/tmp/config.yaml
/tmp/.env

string

persistence.config-secret.globalMounts[].subPath (1)

config.yaml
env

string

persistence.config-secret.name (1)

hermes-secret

string

persistence.config-secret.type (1)

secret

string

persistence.gallery.globalMounts[].path (1)

/mnt/gallery

string

persistence.gallery.path (1)

/mnt/daena/comfyui/output

string

persistence.gallery.server (1)

voyager.internal

string

persistence.gallery.type (1)

nfs

string

persistence.homebrew.accessMode (1)

ReadWriteOnce

string

persistence.homebrew.advancedMounts.hermes.gateway[].path (1)

/home/linuxbrew/.linuxbrew

string

persistence.homebrew.advancedMounts.hermes.seed-tools[].path (1)

/homebrew-runtime

string

persistence.homebrew.forceRename (1)

hermes-homebrew

string

persistence.homebrew.size (1)

1Gi

string

persistence.homebrew.storageClass (1)

miroir-replicated

string

persistence.homebrew.type (1)

persistentVolumeClaim

string

persistence.media.globalMounts[].path (1)

/media

string

persistence.media.globalMounts[].readOnly (1)

true

boolean

persistence.media.path (1)

/mnt/world/media

string

persistence.media.server (1)

nas.internal

string

persistence.media.type (1)

nfs

string

persistence.nfs.globalMounts[].path (1)

/nfs-data

string

persistence.nfs.path (1)

/mnt/nas/data/shares/hermes

string

persistence.nfs.server (1)

truenas.internal

string

persistence.nfs.type (1)

nfs

string

persistence.plugin-agentmemory.globalMounts[].path (1)

/opt/hermes/plugins/agentmemory

string

persistence.plugin-agentmemory.name (1)

hermes-agentmemory-plugin

string

persistence.plugin-agentmemory.type (1)

configMap

string

persistence.skill-commit-watcher.advancedMounts.hermes.init[].path (1)

/run/skills/homelab-commit-watcher

string

persistence.skill-commit-watcher.defaultMode (1)

number

persistence.skill-commit-watcher.name (1)

hermes-skill-homelab-commit-watcher

string

persistence.skill-commit-watcher.type (1)

configMap

string

persistence.tmpfs.globalMounts[].path (1)

/tmp
/cache

string

persistence.tmpfs.globalMounts[].subPath (1)

tmp
cache

string

persistence.tmpfs.type (1)

emptyDir

string

service.app.controller (9)

hermes

string

service.app.ports.codeserver.port (5)

number

service.app.ports.dashboard.port (5)

number

service.app.ports.gateway.port (4)

number

service.app.ports.http.port (4)

number

service.app.ports.api.port (1)

number

service.app.ipFamilies[] (3)

- IPv4

string

service.dashboard.controller (5)

hermes

string

service.dashboard.ports.http.port (5)

number

service.api.controller (1)

hermes

string

service.api.ports.http.port (1)

number

service.codeserver.controller (1)

codeserver

string

service.codeserver.ports.http.port (1)

number

service.hermes.controller (1)

hermes

string

service.hermes.ports.agent.port (1)

number

service.hermes.ports.dashboard.port (1)

number

service.webhook.controller (1)

hermes

string

service.webhook.ports.http.port (1)

number

rbac.bindings.hermes-read-all.roleRef.identifier (7)

hermes-read-all

string

rbac.bindings.hermes-read-all.subjects[].identifier (7)

hermes

string

rbac.bindings.hermes-read-all.subjects[].serviceAccount (7)

hermes

string

rbac.bindings.hermes-read-all.type (7)

ClusterRoleBinding

string

rbac.bindings.hermes-exec-deploy.roleRef.identifier (5)

hermes-exec-deploy

string

rbac.bindings.hermes-exec-deploy.subjects[].identifier (5)

hermes

string

rbac.bindings.hermes-exec-deploy.subjects[].namespace (5)

ai

string

rbac.bindings.hermes-exec-deploy.subjects[].serviceAccount (5)

hermes

string

rbac.bindings.hermes-exec-deploy.type (5)

RoleBinding

string

rbac.bindings.hermes-pod-delete.roleRef.identifier (5)

hermes-pod-delete

string

rbac.bindings.hermes-pod-delete.subjects[].identifier (5)

hermes

string

rbac.bindings.hermes-pod-delete.subjects[].serviceAccount (5)

hermes

string

rbac.bindings.hermes-pod-delete.type (5)

ClusterRoleBinding

string

rbac.bindings.hermes-cluster-ops.roleRef.identifier (1)

hermes-cluster-ops

string

rbac.bindings.hermes-cluster-ops.subjects[].identifier (1)

hermes

string

rbac.bindings.hermes-cluster-ops.subjects[].serviceAccount (1)

hermes

string

rbac.bindings.hermes-cluster-ops.type (1)

ClusterRoleBinding

string

rbac.bindings.hermes-write-restricted.roleRef.identifier (1)

hermes-write-restricted

string

rbac.bindings.hermes-write-restricted.subjects[].identifier (1)

hermes

string

rbac.bindings.hermes-write-restricted.subjects[].serviceAccount (1)

hermes

string

rbac.bindings.hermes-write-restricted.type (1)

RoleBinding

string

rbac.roles.hermes-read-all.rules[].apiGroups[] (7)

- 
- apps
- batch
- networking.k8s.io
- storage.k8s.io
- helm.toolkit.fluxcd.io
- kustomize.toolkit.fluxcd.io
- source.toolkit.fluxcd.io
- external-secrets.io

string

rbac.roles.hermes-read-all.rules[].resources[] (7)

- pods
- pods/log
- nodes
- services
- namespaces
- configmaps
- persistentvolumes
- persistentvolumeclaims
- endpoints
- resourcequotas
- limitranges
- serviceaccounts
- events
- deployments
- daemonsets
- statefulsets
- replicasets
- controllerrevisions
- jobs
- cronjobs
- ingresses
- ingressclasses
- networkpolicies
- storageclasses
- csinodes
- csidrivers
- volumeattachments
- helmreleases
- kustomizations
- gitrepositories
- helmrepositories
- ocirepositories
- buckets
- helmcharts
- externalsecrets
- secretstores
- clustersecretstores

string

rbac.roles.hermes-read-all.rules[].verbs[] (7)

- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch

string

rbac.roles.hermes-read-all.type (7)

ClusterRole

string

rbac.roles.hermes-exec-deploy.rules[].apiGroups[] (5)

- 
- apps

string

rbac.roles.hermes-exec-deploy.rules[].resources[] (5)

- pods/exec
- deployments

string

rbac.roles.hermes-exec-deploy.rules[].verbs[] (5)

- create
- patch
- update

string

rbac.roles.hermes-exec-deploy.type (5)

Role

string

rbac.roles.hermes-pod-delete.rules[].apiGroups[] (5)

string

rbac.roles.hermes-pod-delete.rules[].resources[] (5)

- pods

string

rbac.roles.hermes-pod-delete.rules[].verbs[] (5)

- delete

string

rbac.roles.hermes-pod-delete.type (5)

ClusterRole

string

rbac.roles.hermes-cluster-ops.rules[].apiGroups[] (1)

- helm.toolkit.fluxcd.io
-

string

rbac.roles.hermes-cluster-ops.rules[].resources[] (1)

- helmreleases
- persistentvolumes

string

rbac.roles.hermes-cluster-ops.rules[].verbs[] (1)

- patch
- update
- delete
- patch

string

rbac.roles.hermes-cluster-ops.type (1)

ClusterRole

string

rbac.roles.hermes-write-restricted.rules[].apiGroups[] (1)

- 
- batch
- 
- apps

string

rbac.roles.hermes-write-restricted.rules[].resources[] (1)

- pods
- jobs
- pods/exec
- deployments

string

rbac.roles.hermes-write-restricted.rules[].verbs[] (1)

- delete
- delete
- create
- patch
- update

string

rbac.roles.hermes-write-restricted.type (1)

Role

string

route.app.hostnames[] (6)

- hermes.dcunha.io

string

route.app.parentRefs[].name (6)

envoy-internal

string

route.app.parentRefs[].namespace (6)

network

string

route.app.rules[].backendRefs[].identifier (6)

app

string

route.app.rules[].backendRefs[].port (6)

number, string

route.codeserver.hostnames[] (6)

- hermes-code.dcunha.io

string

route.codeserver.parentRefs[].name (6)

envoy-internal

string

route.codeserver.parentRefs[].namespace (6)

network

string

route.codeserver.parentRefs[].sectionName (1)

https

string

route.codeserver.rules[].backendRefs[].identifier (6)

app

string

route.codeserver.rules[].backendRefs[].port (6)

number, string

route.dashboard.hostnames[] (3)

- hermes.${SECRET_DOMAIN}

string

route.dashboard.parentRefs[].name (3)

envoy-internal

string

route.dashboard.parentRefs[].namespace (3)

networking

string

route.dashboard.parentRefs[].sectionName (2)

https

string

route.dashboard.rules[].backendRefs[].identifier (3)

dashboard

string

route.dashboard.rules[].backendRefs[].port (3)

http

string

route.dashboard.annotations."gatus.home-operations.com/endpoint" (1)

url: https://hermes.nikola.wtf/login

string

route.hermes.hostnames[] (1)

- hermes.mcgrath.nz

string

route.hermes.parentRefs[].name (1)

envoy-internal

string

route.hermes.parentRefs[].namespace (1)

networking

string

route.hermes.parentRefs[].sectionName (1)

https

string

route.hermes.rules[].backendRefs[].identifier (1)

hermes

string

route.hermes.rules[].backendRefs[].port (1)

dashboard

string

route.hermes.rules[].filters[].requestHeaderModifier.set[].name (1)

Origin

string

route.hermes.rules[].filters[].requestHeaderModifier.set[].value (1)

http://localhost:9119

string

route.hermes.rules[].filters[].type (1)

RequestHeaderModifier

string

serviceAccount.hermes.annotations."reloader.stakater.com/match" (1)

true

string

serviceAccount.hermes.enabled (1)

true

boolean

hermes helm

Install

Examples

Top Repositories (2 out of 12)

Values