fix(hermes): grant Whisper the Jetson video device group

2026-08-10 01:06:03 -03:00 · 2026-08-10 01:06:03 -03:00 · a2220f7ae9
commit a2220f7ae9
parent 7e14abedb8
2 changed files with 3 additions and 0 deletions
--- a/services/hermes/voice-deployment.yaml
+++ b/services/hermes/voice-deployment.yaml
@ -25,6 +25,8 @@ spec:
      runtimeClassName: nvidia
      automountServiceAccountToken: false
      enableServiceLinks: false
+      securityContext:
+        supplementalGroups: [44]
      nodeSelector:
        kubernetes.io/hostname: titan-21
      containers:
--- a/testing/tests/test_hermes_chat_quality.py
+++ b/testing/tests/test_hermes_chat_quality.py
@ -232,6 +232,7 @@ def test_voice_workloads_have_deliberate_xavier_placement():
    assert stt["enableServiceLinks"] is False
    assert tts["enableServiceLinks"] is False
    assert stt["runtimeClassName"] == "nvidia"
+    assert stt["securityContext"]["supplementalGroups"] == [44]
    stt_resources = stt["containers"][0]["resources"]
    assert stt_resources["requests"]["nvidia.com/gpu.shared"] == 1
    assert stt_resources["limits"]["nvidia.com/gpu.shared"] == 1