做了一个启动脚本，原来那个不合适

hermes/deploy.yaml

@@ -4,7 +4,6 @@ metadata:
   name: hermes
   namespace: hermes
 spec:
-
   strategy:
     type: Recreate
   replicas: 1
@@ -16,10 +15,6 @@ spec:
       labels:
         app: hermes
     spec:
-      securityContext:
-        runAsUser: 10000
-        supplementalGroups:
-        - 1000
       volumes:
       - name: data
         hostPath:
@@ -35,6 +30,10 @@ spec:
           type: DirectoryOrCreate
       - name: tmp
         emptyDir: {}
+      - name: start-sh
+        configMap:
+          name: hermes-start
+          defaultMode: 0555
       containers:
       - name: gateway 
         #image: cr.wetofu.me/nousresearch/hermes-agent:v2026.5.16
@@ -43,7 +42,7 @@ spec:
           httpGet:
             path: /health
             port: 8642
-          initialDelaySeconds: 30
+          initialDelaySeconds: 60
           periodSeconds: 10
           successThreshold: 1
           failureThreshold: 3
@@ -58,6 +57,8 @@ spec:
         ports:
         - containerPort: 8642
           name: gateway
+        - containerPort: 9119
+          name: dashboard
         args:
         - gateway
         - run
@@ -70,6 +71,16 @@ spec:
           value: "0.0.0.0"
         - name: API_SERVER_CORS_ORIGINS
           value: '*'
+        - name: HERMES_UID
+          value: '1000'
+        - name: HERMES_GID
+          value: '1000'
+        - name: HERMES_DASHBOARD
+          value: 'true'
+        - name: HERMES_DASHBOARD_HOST
+          value: '::'
+        - name: HERMES_DASHBOARD_HOST
+          value: '9119'
         envFrom:
         - secretRef:
             name: hermes
@@ -89,6 +100,9 @@ spec:
           mountPath: /opt/data/workspace/Projects
         - name: tmp
           mountPath: /tmp
+        - name: start-sh
+          mountPath: /opt/hermes/docker/entrypoint.sh
+          subPath: entrypoint.sh
         resources:
           requests:
             memory: "1Gi"
@@ -96,37 +110,3 @@ spec:
           limits:
             memory: "4Gi"
             cpu: "2"
-      - name: dashboard
-        image: image
-        args:
-        - dashboard
-        ports:
-        - containerPort: 9119
-          name: dashboard
-        env:
-        - name: TZ
-          value: Asia/Shanghai
-        - name: GATEWAY_HEALTH_URL
-          value: localhost:8642
-        - name: GATEWAY_HEALTH_TIMEOUT
-          value: "3"
-        - name: HERMES_DASHBOARD_HOST
-          value: "::"
-        envFrom:
-        - secretRef:
-            name: hermes
-            optional: true
-        - configMapRef:
-            name: hermes
-        volumeMounts:
-        - name: data
-          mountPath: /opt/data
-        - name: tmp
-          mountPath: /tmp
-        resources:
-          requests:
-            memory: "256Mi"
-            cpu: "100m"
-          limits:
-            memory: "512Mi"
-            cpu: "500m"