From dc05c440bc83e651c7d0522774887e11fac6535a Mon Sep 17 00:00:00 2001
From: Viktor Barzin <vbarzin@gmail.com>
Date: Wed, 22 Apr 2026 14:31:50 +0000
Subject: [PATCH] =?UTF-8?q?[hermes-agent]=20disable=20deployment=20?=
 =?UTF-8?q?=E2=80=94=20PVC=20permission=20mismatch?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Main container crashes with "mkdir: cannot create directory '/opt/data':
Permission denied". Init container writes fine but main container runs
with different fsGroup/runAsUser. Scaling to 0 until the PVC permission
model is reworked.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
---
 stacks/hermes-agent/main.tf | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/stacks/hermes-agent/main.tf b/stacks/hermes-agent/main.tf
index 89de6d6b..0881932f 100644
--- a/stacks/hermes-agent/main.tf
+++ b/stacks/hermes-agent/main.tf
@@ -220,7 +220,8 @@ resource "kubernetes_deployment" "hermes_agent" {
     strategy {
       type = "Recreate"
     }
-    replicas = 1
+    # Disabled 2026-04-22 — main container fails with "mkdir: cannot create directory '/opt/data': Permission denied" (fsGroup/runAsUser mismatch vs init container). Re-enable after fixing PVC permissions.
+    replicas = 0
     selector {
       match_labels = {
         app = "hermes-agent"