From 0da2483dd376abffc99c553659fb0519f5754527 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 23 Aug 2026 17:20:01 +0000 Subject: [PATCH] chore(hermes): promote validated image release --- services/hermes/chat-statefulset.yaml | 16 ++++++++-------- services/hermes/deployment.yaml | 6 +++--- 2 files changed, 11 insertions(+), 11 deletions(-) diff --git a/services/hermes/chat-statefulset.yaml b/services/hermes/chat-statefulset.yaml index 0a2c2e30..95890bb4 100644 --- a/services/hermes/chat-statefulset.yaml +++ b/services/hermes/chat-statefulset.yaml @@ -276,7 +276,7 @@ spec: - {name: HOME, value: /opt/data/home} - {name: TERMINAL_CWD, value: /opt/data/workspace} - {name: HERMES_WRITE_SAFE_ROOT, value: /opt/data/workspace} - - {name: PATH, value: /opt/data/home/.local/bin:/opt/hermes/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin} + - {name: PATH, value: '/opt/data/home/.local/bin:/opt/hermes/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin'} - {name: PLAYWRIGHT_BROWSERS_PATH, value: /opt/hermes/.playwright} - {name: AGENT_BROWSER_EXECUTABLE_PATH, value: /opt/hermes/.playwright/chromium_headless_shell-1228/chrome-linux/headless_shell} - {name: AGENT_BROWSER_ARGS, value: "--no-sandbox,--disable-dev-shm-usage"} @@ -284,8 +284,8 @@ spec: - {name: API_SERVER_ENABLED, value: "true"} - {name: API_SERVER_HOST, value: 0.0.0.0} - {name: API_SERVER_PORT, value: "8642"} - - {name: API_SERVER_CORS_ORIGINS, value: https://chat.bstein.dev} - - {name: HERMES_IMAGE_BROKER_URL, value: http://hermes-image-broker.hermes.svc.cluster.local:9002} + - {name: API_SERVER_CORS_ORIGINS, value: 'https://chat.bstein.dev'} + - {name: HERMES_IMAGE_BROKER_URL, value: 'http://hermes-image-broker.hermes.svc.cluster.local:9002'} - {name: HERMES_IMAGE_BROKER_KEY_FILE, value: /runtime-access/chat-relay-key} - {name: HERMES_AUTO_ROUTER_PROFILE, value: chat} volumeMounts: @@ -320,7 +320,7 @@ spec: requests: {cpu: 250m, memory: 256Mi} limits: {cpu: "1", memory: 2Gi} - name: webui - image: registry.bstein.dev/bstein/hermes-webui@sha256:c276a9e17c9057237472f39640c9ebac9d4359d9f62a34df52a759eef43167bf # {"$imagepolicy": "hermes:hermes-webui-release:digest"} + image: sha256:67a65c91e6027f382c0e912c160cc8375d7130373add9783b9289c232e7fa9e5 # {"$imagepolicy": "hermes:hermes-webui-release:digest"} imagePullPolicy: IfNotPresent command: [/bin/sh, -ec] args: @@ -342,7 +342,7 @@ spec: - {name: HERMES_WEBUI_STATE_DIR, value: /opt/data/webui} - {name: HERMES_WEBUI_DEFAULT_WORKSPACE, value: /opt/data/workspace} - {name: HERMES_WEBUI_CHAT_BACKEND, value: gateway} - - {name: HERMES_WEBUI_GATEWAY_BASE_URL, value: http://127.0.0.1:8642} + - {name: HERMES_WEBUI_GATEWAY_BASE_URL, value: 'http://127.0.0.1:8642'} - {name: HERMES_WEBUI_GATEWAY_USE_RUNS_API, value: "true"} - {name: HERMES_WEBUI_SKIP_ONBOARDING, value: "1"} - {name: HERMES_WEBUI_SECURE, value: "1"} @@ -352,13 +352,13 @@ spec: # NetworkPolicy admits this port only from hermes-chat-router; the # CIDR lets the WebUI validate that router's changing pod address. - {name: HERMES_WEBUI_TRUSTED_PROXY_CIDRS, value: 10.42.0.0/16} - - {name: HERMES_WEBUI_ALLOWED_ORIGINS, value: https://chat.bstein.dev} + - {name: HERMES_WEBUI_ALLOWED_ORIGINS, value: 'https://chat.bstein.dev'} - {name: HERMES_WEBUI_TRUST_FORWARDED_HOST, value: "1"} - {name: HERMES_WEBUI_TRUST_FORWARDED_PROTO, value: "1"} - {name: HERMES_ROUTER_PROFILE, value: chat} - - {name: HERMES_STT_URL, value: http://hermes-stt.hermes.svc.cluster.local:9000/v1/audio/transcriptions} + - {name: HERMES_STT_URL, value: 'http://hermes-stt.hermes.svc.cluster.local:9000/v1/audio/transcriptions'} - {name: HERMES_LOCAL_STT_COMMAND, value: "/opt/hermes/.venv/bin/python /opt/coordinator/hermes_stt_client.py {input_path} --output-dir {output_dir} --language {language} --model {model}"} - - {name: HERMES_WEBUI_ATLAS_TTS_URL, value: http://hermes-tts.hermes.svc.cluster.local:9001/v1/audio/speech} + - {name: HERMES_WEBUI_ATLAS_TTS_URL, value: 'http://hermes-tts.hermes.svc.cluster.local:9001/v1/audio/speech'} volumeMounts: - {name: home, mountPath: /opt/data} - {name: workspace, mountPath: /opt/data/workspace} diff --git a/services/hermes/deployment.yaml b/services/hermes/deployment.yaml index 329b5b5f..13454204 100644 --- a/services/hermes/deployment.yaml +++ b/services/hermes/deployment.yaml @@ -385,7 +385,7 @@ spec: cpu: "2" memory: 4Gi - name: webui - image: registry.bstein.dev/bstein/hermes-webui@sha256:ac6ba7bfd8a86227f31a9a96ebea41227ccf70391f7dcf34206f4d58e835e50e # {"$imagepolicy": "hermes:hermes-webui-release:digest"} + image: sha256:67a65c91e6027f382c0e912c160cc8375d7130373add9783b9289c232e7fa9e5 # {"$imagepolicy": "hermes:hermes-webui-release:digest"} imagePullPolicy: IfNotPresent command: [/bin/sh, -ec] args: @@ -407,11 +407,11 @@ spec: - {name: HERMES_WEBUI_STATE_DIR, value: /opt/data/webui} - {name: HERMES_WEBUI_DEFAULT_WORKSPACE, value: /opt/data/workspace} - {name: HERMES_WEBUI_CHAT_BACKEND, value: gateway} - - {name: HERMES_WEBUI_GATEWAY_BASE_URL, value: http://127.0.0.1:8642} + - {name: HERMES_WEBUI_GATEWAY_BASE_URL, value: 'http://127.0.0.1:8642'} - {name: HERMES_WEBUI_GATEWAY_USE_RUNS_API, value: "true"} - {name: HERMES_WEBUI_SKIP_ONBOARDING, value: "1"} - {name: HERMES_WEBUI_SECURE, value: "1"} - - {name: HERMES_WEBUI_ALLOWED_ORIGINS, value: https://triage.bstein.dev} + - {name: HERMES_WEBUI_ALLOWED_ORIGINS, value: 'https://triage.bstein.dev'} - {name: HERMES_WEBUI_TRUST_FORWARDED_HOST, value: "1"} - {name: HERMES_WEBUI_TRUST_FORWARDED_PROTO, value: "1"} - {name: HERMES_ROUTER_PROFILE, value: triage}