hermes: prewarm arm64 agent image

services/hermes/agent-image-prewarm.yaml

@@ -0,0 +1,33 @@
+# services/hermes/agent-image-prewarm.yaml
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: hermes-agent-image-prewarm-20260811
+  namespace: hermes
+  labels:
+    app: hermes-agent-image-prewarm
+spec:
+  backoffLimit: 2
+  template:
+    metadata:
+      labels:
+        app: hermes-agent-image-prewarm
+    spec:
+      serviceAccountName: hermes-agent
+      restartPolicy: Never
+      nodeSelector:
+        kubernetes.io/hostname: titan-12
+      containers:
+        - name: prewarm
+          image: registry.bstein.dev/bstein/hermes-agent@sha256:b413be5fcc0c01b0dd3e9ae0d54c23314a14f5e58f55da0d7cb47b408a2447e0
+          imagePullPolicy: IfNotPresent
+          command: [/bin/true]
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop: [ALL]
+            seccompProfile:
+              type: RuntimeDefault
+          resources:
+            requests: {cpu: 10m, memory: 16Mi}
+            limits: {cpu: 100m, memory: 64Mi}

services/hermes/kustomization.yaml

@@ -21,6 +21,7 @@ resources:
   - networkpolicy.yaml
   - ollama-deployment.yaml
   - deployment.yaml
+  - agent-image-prewarm.yaml
   - agent-deployment.yaml
   - voice-deployment.yaml
   - chat-statefulset.yaml