From d8da9a7a792abe275f0ba080f0627c138ae0305e Mon Sep 17 00:00:00 2001
From: jenkins <jenkins@bstein.dev>
Date: Tue, 21 Jul 2026 21:08:11 -0300
Subject: [PATCH] agent: fix Hermes kubectl init permissions

---
 services/hermes/deployment.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/services/hermes/deployment.yaml b/services/hermes/deployment.yaml
index 8efea23ca..8c9813806 100644
--- a/services/hermes/deployment.yaml
+++ b/services/hermes/deployment.yaml
@@ -118,6 +118,9 @@ spec:
               cp "$(command -v kubectl)" /tools/kubectl
               chmod 0755 /tools/kubectl
               chown 10000:10000 /tools/kubectl
+          securityContext:
+            runAsUser: 0
+            runAsGroup: 0
           volumeMounts:
             - name: tools
               mountPath: /tools