chore(hermes): promote validated image release

This commit is contained in:
flux-bot 2026-08-24 22:47:03 +00:00
parent 4d93ef5a0e
commit 88f8e9e629
3 changed files with 9 additions and 9 deletions

View File

@ -1361,7 +1361,7 @@ spec:
# foundation as the only enabled card until the Worker lifecycle gates
# in docs/hux/WORKER-PLAN.md pass on this instance.
- name: hux
image: registry.bstein.dev/bstein/hermes-webui:git-3fd760de0eda63a13ee842c324f62b9daf5cb8fe-build-25-release@sha256:7e8a1305a8ca521e32ca1a20499afdde1c43161d38f132ab00d893fde50391ea # {"$imagepolicy": "hermes:hermes-webui-release"}
image: registry.bstein.dev/bstein/hermes-webui:git-4d93ef5a0e9bb073a483616e135a3161f5ac2598-build-29-release@sha256:6887c2ad7d97db5c47028644e65bd0513780b60b8ad9627cfe1334857e9ebaa1 # {"$imagepolicy": "hermes:hermes-webui-release"}
imagePullPolicy: IfNotPresent
command: [/opt/hermes/.venv/bin/python, -m, hux.server]
ports:
@ -1380,9 +1380,9 @@ spec:
- {name: HUX_CONTEXT_KEY_FILE, value: /var/lib/hux/context/context-key}
- {name: HUX_CANARY_FILE, value: /var/lib/hux/context/redaction-canary}
- name: HUX_IMAGE_TAG
value: git-3fd760de0eda63a13ee842c324f62b9daf5cb8fe-build-25-release # {"$imagepolicy": "hermes:hermes-webui-release:tag"}
value: git-4d93ef5a0e9bb073a483616e135a3161f5ac2598-build-29-release # {"$imagepolicy": "hermes:hermes-webui-release:tag"}
- name: HUX_IMAGE_DIGEST
value: sha256:7e8a1305a8ca521e32ca1a20499afdde1c43161d38f132ab00d893fde50391ea # {"$imagepolicy": "hermes:hermes-webui-release:digest"}
value: sha256:6887c2ad7d97db5c47028644e65bd0513780b60b8ad9627cfe1334857e9ebaa1 # {"$imagepolicy": "hermes:hermes-webui-release:digest"}
- {name: HUX_READS_PER_MINUTE, value: "600"}
- {name: HUX_WRITES_PER_MINUTE, value: "120"}
- {name: HUX_REQUEST_TIMEOUT_SECONDS, value: "10"}

View File

@ -487,7 +487,7 @@ spec:
requests: {cpu: 250m, memory: 256Mi}
limits: {cpu: "1", memory: 2Gi}
- name: webui
image: registry.bstein.dev/bstein/hermes-webui:git-3fd760de0eda63a13ee842c324f62b9daf5cb8fe-build-25-release@sha256:7e8a1305a8ca521e32ca1a20499afdde1c43161d38f132ab00d893fde50391ea # {"$imagepolicy": "hermes:hermes-webui-release"}
image: registry.bstein.dev/bstein/hermes-webui:git-4d93ef5a0e9bb073a483616e135a3161f5ac2598-build-29-release@sha256:6887c2ad7d97db5c47028644e65bd0513780b60b8ad9627cfe1334857e9ebaa1 # {"$imagepolicy": "hermes:hermes-webui-release"}
imagePullPolicy: IfNotPresent
command: [/bin/sh, -ec]
args:
@ -565,7 +565,7 @@ spec:
requests: {cpu: 100m, memory: 224Mi}
limits: {cpu: 750m, memory: 1Gi}
- name: hux
image: registry.bstein.dev/bstein/hermes-webui:git-3fd760de0eda63a13ee842c324f62b9daf5cb8fe-build-25-release@sha256:7e8a1305a8ca521e32ca1a20499afdde1c43161d38f132ab00d893fde50391ea # {"$imagepolicy": "hermes:hermes-webui-release"}
image: registry.bstein.dev/bstein/hermes-webui:git-4d93ef5a0e9bb073a483616e135a3161f5ac2598-build-29-release@sha256:6887c2ad7d97db5c47028644e65bd0513780b60b8ad9627cfe1334857e9ebaa1 # {"$imagepolicy": "hermes:hermes-webui-release"}
imagePullPolicy: IfNotPresent
command: [/bin/sh, -ec]
args:
@ -593,9 +593,9 @@ spec:
- {name: HUX_CONTEXT_KEY_FILE, value: /var/lib/hux/context/context-key}
- {name: HUX_CANARY_FILE, value: /var/lib/hux/context/redaction-canary}
- name: HUX_IMAGE_TAG
value: git-3fd760de0eda63a13ee842c324f62b9daf5cb8fe-build-25-release # {"$imagepolicy": "hermes:hermes-webui-release:tag"}
value: git-4d93ef5a0e9bb073a483616e135a3161f5ac2598-build-29-release # {"$imagepolicy": "hermes:hermes-webui-release:tag"}
- name: HUX_IMAGE_DIGEST
value: sha256:7e8a1305a8ca521e32ca1a20499afdde1c43161d38f132ab00d893fde50391ea # {"$imagepolicy": "hermes:hermes-webui-release:digest"}
value: sha256:6887c2ad7d97db5c47028644e65bd0513780b60b8ad9627cfe1334857e9ebaa1 # {"$imagepolicy": "hermes:hermes-webui-release:digest"}
- {name: HUX_SWITCHYARD_ROUTE_CATALOG, value: 'atlas/manual/codex/luna,atlas/manual/codex/terra,atlas/manual/codex/sol,atlas/manual/claude/haiku,atlas/manual/claude/fable,atlas/manual/claude/sonnet,atlas/manual/claude/opus,atlas/manual/local/qwen-14b'}
- {name: HUX_RELEASE_EVIDENCE_KEY_FILE, value: /run/hermes-hux-evidence/evidence-key}
- {name: HUX_RELEASE_EVIDENCE_POLICY_FILE, value: /etc/hux-evidence/policy.json}
@ -641,7 +641,7 @@ spec:
requests: {cpu: 25m, memory: 64Mi}
limits: {cpu: 250m, memory: 256Mi}
- name: hux-evidence-producer
image: registry.bstein.dev/bstein/hermes-webui:git-3fd760de0eda63a13ee842c324f62b9daf5cb8fe-build-25-release@sha256:7e8a1305a8ca521e32ca1a20499afdde1c43161d38f132ab00d893fde50391ea # {"$imagepolicy": "hermes:hermes-webui-release"}
image: registry.bstein.dev/bstein/hermes-webui:git-4d93ef5a0e9bb073a483616e135a3161f5ac2598-build-29-release@sha256:6887c2ad7d97db5c47028644e65bd0513780b60b8ad9627cfe1334857e9ebaa1 # {"$imagepolicy": "hermes:hermes-webui-release"}
imagePullPolicy: IfNotPresent
command: [/bin/sh, -ec]
args:

View File

@ -388,7 +388,7 @@ spec:
cpu: "2"
memory: 4Gi
- name: webui
image: registry.bstein.dev/bstein/hermes-webui:git-3fd760de0eda63a13ee842c324f62b9daf5cb8fe-build-25-release@sha256:7e8a1305a8ca521e32ca1a20499afdde1c43161d38f132ab00d893fde50391ea # {"$imagepolicy": "hermes:hermes-webui-release"}
image: registry.bstein.dev/bstein/hermes-webui:git-4d93ef5a0e9bb073a483616e135a3161f5ac2598-build-29-release@sha256:6887c2ad7d97db5c47028644e65bd0513780b60b8ad9627cfe1334857e9ebaa1 # {"$imagepolicy": "hermes:hermes-webui-release"}
imagePullPolicy: IfNotPresent
command: [/bin/sh, -ec]
args: