titan/atlas-iac
3
0
Fork 0
Code Issues Pull Requests 9 Actions Packages Projects Releases Wiki Activity

fix(hermes): retain full automated image refs

Browse Source
This commit is contained in:
jenkins 2026-08-23 14:22:26 -03:00
parent 0da2483dd3
commit 8d9b75a28c
3 changed files with 11 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
services/hermes/chat-statefulset.yaml
View File

@ -320,7 +320,7 @@ spec:
requests: {cpu: 250m, memory: 256Mi}
limits: {cpu: "1", memory: 2Gi}
- name: webui
image: sha256:67a65c91e6027f382c0e912c160cc8375d7130373add9783b9289c232e7fa9e5 # {"$imagepolicy": "hermes:hermes-webui-release:digest"}
image: registry.bstein.dev/bstein/hermes-webui:git-ad487b5e1c19e42b0fe574f057be13ee12b3b1dc-build-5-release@sha256:67a65c91e6027f382c0e912c160cc8375d7130373add9783b9289c232e7fa9e5 # {"$imagepolicy": "hermes:hermes-webui-release"}
imagePullPolicy: IfNotPresent
command: [/bin/sh, -ec]
args:

2
services/hermes/deployment.yaml
View File

@ -385,7 +385,7 @@ spec:
cpu: "2"
memory: 4Gi
- name: webui
image: sha256:67a65c91e6027f382c0e912c160cc8375d7130373add9783b9289c232e7fa9e5 # {"$imagepolicy": "hermes:hermes-webui-release:digest"}
image: registry.bstein.dev/bstein/hermes-webui:git-ad487b5e1c19e42b0fe574f057be13ee12b3b1dc-build-5-release@sha256:67a65c91e6027f382c0e912c160cc8375d7130373add9783b9289c232e7fa9e5 # {"$imagepolicy": "hermes:hermes-webui-release"}
imagePullPolicy: IfNotPresent
command: [/bin/sh, -ec]
args:

10
testing/tests/test_hermes_image_automation.py
View File

@ -62,6 +62,14 @@ def test_flux_updates_only_the_three_hermes_image_digests() -> None:
"path": "services/hermes",
}
assert agent.count('"$imagepolicy": "hermes:hermes-agent-release:digest"') == 1
webui_marker = '"$imagepolicy": "hermes:hermes-webui-release:digest"'
webui_marker = '"$imagepolicy": "hermes:hermes-webui-release"'
assert chat.count(webui_marker) == 1
assert dashboard.count(webui_marker) == 1
# A digest-only setter replaces the complete YAML scalar with ``sha256:...``.
# Whole-image setters must retain the registry and repository in pod specs.
for workload in (chat, dashboard):
marked_line = next(
line for line in workload.splitlines() if webui_marker in line
)
assert "registry.bstein.dev/bstein/hermes-webui:" in marked_line
assert "@sha256:" in marked_line