Smallest possible instance: an image, a 10Gi PVC, and the operator's default-deny NetworkPolicy. No gateways enabled, no Honcho, no backup, no auto-update. Useful as a smoke test.
kubectl create namespace agents
kubectl apply -n agents -f hermesinstance.yamlkubectl get hi -n agents
# NAME READY PHASE IMAGE AGE
# minimal True Ready ghcr.io/paperclipinc/hermes-agent:v2026.5.29.2 30s
kubectl describe hi minimal -n agents | grep -A1 "Ready"
# Type: Ready
# Status: TrueStatefulSet/minimalwith one replica running hermes-agent.Service/minimal(ClusterIP).PersistentVolumeClaim/minimal-data(10Gi, default StorageClass).NetworkPolicy/minimal-network(default-deny ingress and egress except DNS).ConfigMap/minimal-configwith an empty config (the agent uses built-in defaults).ServiceAccount/minimalfor the pod.
kubectl delete hi minimal -n agentsThe finalizer for backup-on-delete is not active (no backup configured),
so deletion completes immediately. The PVC's persistentVolumeReclaimPolicy
is whatever the default StorageClass dictates.