From 9bffc077e850e63c53a8dca4b53f2b81903a3e16 Mon Sep 17 00:00:00 2001
From: jenkins <brad@bstein.dev>
Date: Sat, 22 Aug 2026 17:38:42 -0300
Subject: [PATCH] hermes: avoid recursive home ownership rollout

---
 services/hermes/agent-deployment.yaml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/services/hermes/agent-deployment.yaml b/services/hermes/agent-deployment.yaml
index 7ab8cf46..880763bf 100644
--- a/services/hermes/agent-deployment.yaml
+++ b/services/hermes/agent-deployment.yaml
@@ -95,8 +95,6 @@ spec:
       enableServiceLinks: false
       automountServiceAccountToken: true
       securityContext:
-        fsGroup: 10000
-        fsGroupChangePolicy: OnRootMismatch
         seccompProfile:
           type: RuntimeDefault
       affinity: