hermes-operator/test/conformance/testdata/maximal.yaml at bf299ff88689d8c4c2a77586a810ffad14a7c340 · paperclipinc/hermes-operator · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
apiVersion: hermes.agent/v1
kind: HermesInstance
metadata:
  name: conformance-maximal
  annotations:
    hermes.agent/test: "conformance-maximal"
spec:
  image:
    repository: ghcr.io/paperclipinc/hermes-agent
    tag: "v2026.5.29.2"
    pullPolicy: IfNotPresent
  storage:
    persistence:
      enabled: true
      size: 10Gi
      storageClassName: standard
  resources:
    requests:
      cpu: 250m
      memory: 512Mi
    limits:
      cpu: "2"
      memory: 2Gi
  security:
    rbac:
      createServiceAccount: true
      annotations:
        eks.amazonaws.com/role-arn: arn:aws:iam::123456789012:role/hermes-role
    networkPolicy:
      enabled: true
      allowDNS: true
      allowedEgressCIDRs:
        - 10.0.0.0/8
  networking:
    service:
      type: ClusterIP
      ports:
        - name: gateway
          port: 8443
          protocol: TCP
    ingress:
      enabled: true
      host: hermes-maximal.example.com
      className: nginx
      pathType: Prefix
      path: /
      servicePortName: gateway
      tls:
        - secretName: hermes-maximal-tls
          hosts:
            - hermes-maximal.example.com
  observability:
    metrics:
      enabled: true
      port: 9090
    serviceMonitor:
      enabled: true
      interval: 30s
      scrapeTimeout: 10s
    logging:
      format: json
      level: info
  availability:
    podDisruptionBudget:
      enabled: true
      maxUnavailable: 1
    horizontalPodAutoscaler:
      enabled: true
      minReplicas: 1
      maxReplicas: 5
      targetCPUUtilization: 80
  probes:
    liveness:
      httpGet:
        path: /healthz
        port: 8443
      initialDelaySeconds: 30
      periodSeconds: 10
    readiness:
      httpGet:
        path: /readyz
        port: 8443
      initialDelaySeconds: 10
      periodSeconds: 5
  scheduling:
    nodeSelector:
      kubernetes.io/os: linux
    tolerations:
      - key: "node-role.kubernetes.io/control-plane"
        operator: Exists
        effect: NoSchedule
  env:
    - name: HERMES_LOG_LEVEL
      value: info
    - name: HERMES_ENV
      value: conformance
  envFrom:
    - secretRef:
        name: hermes-maximal-extra-env
  sidecars:
    - name: log-shipper
      image: fluent/fluent-bit:latest
      resources:
        requests:
          cpu: 50m
          memory: 64Mi
  runtime:
    python: "3.11"
    uv:
      enabled: true
    ffmpeg:
      enabled: true
    ripgrep:
      enabled: true