# services/hermes/agent-image-prewarm.yaml
apiVersion: batch/v1
kind: Job
metadata:
  name: hermes-agent-image-prewarm-20260811
  namespace: hermes
  labels:
    app: hermes-agent-image-prewarm
spec:
  backoffLimit: 2
  template:
    metadata:
      labels:
        app: hermes-agent-image-prewarm
    spec:
      serviceAccountName: hermes-agent
      restartPolicy: Never
      nodeSelector:
        kubernetes.io/hostname: titan-12
      containers:
        - name: prewarm
          image: registry.bstein.dev/bstein/hermes-agent@sha256:b413be5fcc0c01b0dd3e9ae0d54c23314a14f5e58f55da0d7cb47b408a2447e0
          imagePullPolicy: IfNotPresent
          command: [/bin/true]
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop: [ALL]
            seccompProfile:
              type: RuntimeDefault
          resources:
            requests: {cpu: 10m, memory: 16Mi}
            limits: {cpu: 100m, memory: 64Mi}