From ea97d37524b79011e786e9a8f416d240381c5f27 Mon Sep 17 00:00:00 2001
From: jenkins <brad@bstein.dev>
Date: Tue, 18 Aug 2026 16:19:28 -0300
Subject: [PATCH] hermes: derive execution pool key with a supported template
 function

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 services/hermes/execution-coordinator-patch.yaml | 2 +-
 services/hermes/execution-mediator.yaml          | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/services/hermes/execution-coordinator-patch.yaml b/services/hermes/execution-coordinator-patch.yaml
index ec9ab80b..b0526d8e 100644
--- a/services/hermes/execution-coordinator-patch.yaml
+++ b/services/hermes/execution-coordinator-patch.yaml
@@ -11,7 +11,7 @@ spec:
         vault.hashicorp.com/agent-inject-perms-execution-pool-key: "0600"
         vault.hashicorp.com/agent-inject-template-execution-pool-key: |
           {{- with secret "kv/data/atlas/hermes/agent-tokens" -}}
-          {{ printf "hermes-execution-pool-root-v2:%s" .Data.data.agent_api_key | sha256sum }}
+          {{ printf "hermes-execution-pool-root-v2:%s" .Data.data.agent_api_key | sha256Hex }}
           {{- end }}
     spec:
       containers:
diff --git a/services/hermes/execution-mediator.yaml b/services/hermes/execution-mediator.yaml
index 4970aa4f..36266453 100644
--- a/services/hermes/execution-mediator.yaml
+++ b/services/hermes/execution-mediator.yaml
@@ -71,7 +71,7 @@ spec:
         vault.hashicorp.com/agent-inject-perms-execution-pool-key: "0600"
         vault.hashicorp.com/agent-inject-template-execution-pool-key: |
           {{- with secret "kv/data/atlas/hermes/agent-tokens" -}}
-          {{ printf "hermes-execution-pool-root-v2:%s" .Data.data.agent_api_key | sha256sum }}
+          {{ printf "hermes-execution-pool-root-v2:%s" .Data.data.agent_api_key | sha256Hex }}
           {{- end }}
         vault.hashicorp.com/agent-pre-populate-only: "true"
         vault.hashicorp.com/agent-init-first: "true"
@@ -214,7 +214,7 @@ spec:
         vault.hashicorp.com/agent-inject-perms-execution-pool-key: "0600"
         vault.hashicorp.com/agent-inject-template-execution-pool-key: |
           {{- with secret "kv/data/atlas/hermes/agent-tokens" -}}
-          {{ printf "hermes-execution-pool-root-v2:%s" .Data.data.agent_api_key | sha256sum }}
+          {{ printf "hermes-execution-pool-root-v2:%s" .Data.data.agent_api_key | sha256Hex }}
           {{- end }}
         vault.hashicorp.com/agent-pre-populate-only: "true"
         vault.hashicorp.com/agent-init-first: "true"
@@ -357,7 +357,7 @@ spec:
         vault.hashicorp.com/agent-inject-perms-execution-pool-key: "0600"
         vault.hashicorp.com/agent-inject-template-execution-pool-key: |
           {{- with secret "kv/data/atlas/hermes/agent-tokens" -}}
-          {{ printf "hermes-execution-pool-root-v2:%s" .Data.data.agent_api_key | sha256sum }}
+          {{ printf "hermes-execution-pool-root-v2:%s" .Data.data.agent_api_key | sha256Hex }}
           {{- end }}
         vault.hashicorp.com/agent-pre-populate-only: "true"
         vault.hashicorp.com/agent-init-first: "true"