爱马仕更新

hermes/deploy.yaml

@@ -4,6 +4,7 @@ metadata:
   name: hermes
   namespace: hermes
 spec:
+
   strategy:
     type: Recreate
   replicas: 1
@@ -15,11 +16,23 @@ spec:
       labels:
         app: hermes
     spec:
+      securityContext:
+        fsGroup: 1000
       volumes:
       - name: data
         hostPath:
           path: /data/hermes
           type: DirectoryOrCreate
+      - name: tools
+        hostPath:
+          path: /data/tools
+          type: DirectoryOrCreate
+      - name: projects
+        hostPath:
+          path: /data/code-server/coder
+          type: DirectoryOrCreate
+      - name: tmp
+        emptyDir: {}
       containers:
       - name: gateway 
         #image: cr.wetofu.me/nousresearch/hermes-agent:v2026.5.16
@@ -43,9 +56,21 @@ spec:
         - secretRef:
             name: hermes
             optional: true
+        - configMapRef:
+            name: hermes
         volumeMounts:
         - name: data
           mountPath: /opt/data
+        - name: tools
+          mountPath: /opt/data/home/.local
+          subPath: .local
+        - name: tools
+          mountPath: /opt/data/home/.config
+          subPath: .config
+        - name: projects
+          mountPath: /opt/data/workspace/Projects
+        - name: tmp
+          mountPath: /tmp
         resources:
           requests:
             memory: "1Gi"
@@ -73,9 +98,13 @@ spec:
         - secretRef:
             name: hermes
             optional: true
+        - configMapRef:
+            name: hermes
         volumeMounts:
-          - name: data
+        - name: data
-            mountPath: /opt/data
+          mountPath: /opt/data
+        - name: tmp
+          mountPath: /tmp
         resources:
           requests:
             memory: "256Mi"

hermes/kustomization.yaml

@@ -15,5 +15,10 @@ secretGenerator:
   - secrets/TELEGRAM_BOT_TOKEN
   - secrets/DEEPSEEK_API_KEY
   - secrets/API_SERVER_KEY
-  - secrets/GATEWAY_ALLOW_ALL_USERS
   type: Opaque
+configMapGenerator:
+- name: hermes
+  files:
+  - config/GATEWAY_ALLOW_ALL_USERS
+  - config/TELEGRAM_OBSERVE_UNMENTIONED_GROUP_MESSAGES
+  - config/TELEGRAM_REQUIRE_MENTION

hermes/secrets/GATEWAY_ALLOW_ALL_USERS

@@ -1 +0,0 @@
-true