From de221a0ae213f35b68a9d634b6835218778f42a7 Mon Sep 17 00:00:00 2001
From: jenkins <brad@bstein.dev>
Date: Tue, 18 Aug 2026 16:05:50 -0300
Subject: [PATCH] hermes: fit agent pod on constrained workers

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 services/hermes/agent-deployment.yaml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/services/hermes/agent-deployment.yaml b/services/hermes/agent-deployment.yaml
index c36a792e..ddc47895 100644
--- a/services/hermes/agent-deployment.yaml
+++ b/services/hermes/agent-deployment.yaml
@@ -686,7 +686,7 @@ spec:
             seccompProfile:
               type: RuntimeDefault
           resources:
-            requests: {cpu: 300m, memory: 768Mi}
+            requests: {cpu: 200m, memory: 512Mi}
             limits: {cpu: "3", memory: 6Gi}
         - name: oauth2-proxy
           image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.3@sha256:10a1165743a192e1940b4708fb9647027185ce11a681a1c5519b442ff7f1f561
@@ -910,7 +910,7 @@ spec:
             timeoutSeconds: 5
             failureThreshold: 3
           resources:
-            requests: {cpu: 100m, memory: 256Mi}
+            requests: {cpu: 50m, memory: 192Mi}
             limits: {cpu: "2", memory: 6Gi}
         - name: model-steward
           image: registry.bstein.dev/bstein/hermes-agent@sha256:81970563e542f0720773e72297810b3a844b83e381e278f25c0916c78d930107
@@ -1086,7 +1086,7 @@ spec:
             - {name: image-policy, mountPath: /etc/hermes-image-policy, readOnly: true}
             - {name: tmp, mountPath: /tmp}
           resources:
-            requests: {cpu: 50m, memory: 128Mi}
+            requests: {cpu: 25m, memory: 64Mi}
             limits: {cpu: "1", memory: 1Gi}
         - name: codex-broker
           image: registry.bstein.dev/bstein/hermes-agent@sha256:81970563e542f0720773e72297810b3a844b83e381e278f25c0916c78d930107
@@ -1133,7 +1133,7 @@ spec:
             - {name: tmp, mountPath: /tmp}
             - {name: routing-catalog, mountPath: /routing-catalog, readOnly: true}
           resources:
-            requests: {cpu: 50m, memory: 128Mi}
+            requests: {cpu: 25m, memory: 64Mi}
             limits: {cpu: "1", memory: 1Gi}
         - name: claude-broker
           image: registry.bstein.dev/bstein/hermes-agent@sha256:81970563e542f0720773e72297810b3a844b83e381e278f25c0916c78d930107
@@ -1186,7 +1186,7 @@ spec:
             - {name: tmp, mountPath: /tmp}
             - {name: routing-catalog, mountPath: /routing-catalog, readOnly: true}
           resources:
-            requests: {cpu: 100m, memory: 256Mi}
+            requests: {cpu: 50m, memory: 128Mi}
             limits: {cpu: "3", memory: 3Gi}
       volumes:
         - name: home