openclaw helm release

Key	Types
route.app.hostnames[] (6) `- {{ .Release.Name }}.${SECRET_DOMAIN}`	string
route.app.parentRefs[].name (6) `envoy-internal`	string
route.app.parentRefs[].namespace (6) `network`	string
route.app.parentRefs[].sectionName (3) `https`	string
route.app.rules[].backendRefs[].port (6) `18789`	string, number
route.app.rules[].backendRefs[].identifier (4) `app`	string
route.app.rules[].backendRefs[].name (2) `{{ .Release.Name }}`	string
route.app.rules[].filters[].extensionRef.group (1) `traefik.io`	string
route.app.rules[].filters[].extensionRef.kind (1) `Middleware`	string
route.app.rules[].filters[].extensionRef.name (1) `rfc1918-ips`	string
route.app.rules[].filters[].type (1) `ExtensionRef`	string
route.app.annotations."gatus.io/enabled" (1) `true`	string
route.app.enabled (1) `true`	boolean
route.codeserver.hostnames[] (3) `- miso-code.cloudjur.com`	string
route.codeserver.parentRefs[].name (3) `envoy-internal`	string
route.codeserver.parentRefs[].namespace (3) `network`	string
route.codeserver.parentRefs[].sectionName (1) `https`	string
route.codeserver.rules[].backendRefs[].port (3) `12321`	number
route.codeserver.rules[].backendRefs[].name (2) `{{ .Release.Name }}`	string
route.codeserver.rules[].backendRefs[].identifier (1) `app`	string
route.opencode.hostnames[] (1) `- ${APP_DNS_OPENCODE:=opencode}`	string
route.opencode.parentRefs[].name (1) `envoy-internal`	string
route.opencode.parentRefs[].namespace (1) `ingress`	string
route.opencode.parentRefs[].sectionName (1) `internal`	string
route.opencode.rules[].backendRefs[].identifier (1) `opencode`	string
route.opencode.rules[].backendRefs[].port (1) `http`	string
service.app.ports.http.port (6) `18789`	number
service.app.ports.http.appProtocol (1) `http`	string
service.app.ports.http.protocol (1) `HTTP`	string
service.app.ports.http.targetPort (1) `8080`	number
service.app.ports.codeserver.port (3) `12321`	number
service.app.controller (4) `openclaw`	string
service.app.annotations."lbipam.cilium.io/ips" (1) `10.10.30.60`	string
service.app.externalTrafficPolicy (1) `Cluster`	string
service.app.ipFamilies[] (1) `- IPv4`	string
service.app.type (1) `LoadBalancer`	string
service.opencode.controller (1) `app`	string
service.opencode.ports.http.appProtocol (1) `http`	string
service.opencode.ports.http.port (1) `80`	number
service.opencode.ports.http.protocol (1) `HTTP`	string
service.opencode.ports.http.targetPort (1) `8081`	number
controllers.openclaw.containers.app.command[] (5) `- node`	string
controllers.openclaw.containers.app.env.HOME (5) `/home/node`	string
controllers.openclaw.containers.app.env.PATH (5) `/home/node/.local/bin:/home/node/.local/go/bin:/home/node/.local/homebrew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin`	string
controllers.openclaw.containers.app.env.TZ (4) `Asia/Shanghai`	string
controllers.openclaw.containers.app.env.GOPATH (3) `/home/node/go`	string
controllers.openclaw.containers.app.env.OPENCLAW_GATEWAY_PORT (3) `18789`	number
controllers.openclaw.containers.app.env.OPENCLAW_LOG_LEVEL (3) `debug`	string
controllers.openclaw.containers.app.env.PIP_BREAK_SYSTEM_PACKAGES (3) `1`	string
controllers.openclaw.containers.app.env.TERM (3) `xterm-256color`	string
controllers.openclaw.containers.app.env.BROWSER_WS_ENDPOINT (2) `ws://localhost:9222`	string
controllers.openclaw.containers.app.env.HOMEBREW_CELLAR (2) `/home/node/.local/homebrew/Cellar`	string
controllers.openclaw.containers.app.env.HOMEBREW_PREFIX (2) `/home/node/.local/homebrew`	string
controllers.openclaw.containers.app.env.HOMEBREW_REPOSITORY (2) `/home/node/.local/homebrew`	string
controllers.openclaw.containers.app.env.npm_config_prefix (2) `/home/node/.npm-global`	string
controllers.openclaw.containers.app.env.LANG (1) `C.UTF-8`	string
controllers.openclaw.containers.app.env.LC_ALL (1) `C.UTF-8`	string
controllers.openclaw.containers.app.env.OPENCLAW_EXTENSION_API_PATH (1) `/app/dist/extensionAPI.js`	string
controllers.openclaw.containers.app.env.RADARR_URL (1) `https://radarr.chestr.dev`	string
controllers.openclaw.containers.app.env.SONARR_URL (1) `https://sonarr.chestr.dev`	string
controllers.openclaw.containers.app.envFrom[].secretRef.name (5) `openclaw`	string
controllers.openclaw.containers.app.image.repository (5) `ghcr.io/openclaw/openclaw`	string
controllers.openclaw.containers.app.image.tag (5) `2026.6.10@sha256:af7ea052cf216f581fb18fabada01552356c53717461c0399b623cba7ecad4b1`	string
controllers.openclaw.containers.app.resources.limits.memory (5) `16Gi`	string
controllers.openclaw.containers.app.resources.limits.cpu (3) `10`	number, string
controllers.openclaw.containers.app.resources.requests.cpu (5) `1`	string, number
controllers.openclaw.containers.app.resources.requests.memory (5) `512Mi`	string
controllers.openclaw.containers.app.probes.liveness.enabled (2) `true`	boolean
controllers.openclaw.containers.app.probes.liveness.custom (1) `true`	boolean
controllers.openclaw.containers.app.probes.liveness.spec.initialDelaySeconds (1) `30`	number
controllers.openclaw.containers.app.probes.liveness.spec.periodSeconds (1) `30`	number
controllers.openclaw.containers.app.probes.liveness.spec.tcpSocket.port (1) `18789`	number
controllers.openclaw.containers.app.probes.readiness.enabled (2) `true`	boolean
controllers.openclaw.containers.app.probes.readiness.custom (1) `true`	boolean
controllers.openclaw.containers.app.probes.readiness.spec.initialDelaySeconds (1) `10`	number
controllers.openclaw.containers.app.probes.readiness.spec.periodSeconds (1) `10`	number
controllers.openclaw.containers.app.probes.readiness.spec.tcpSocket.port (1) `18789`	number
controllers.openclaw.containers.app.probes.startup.enabled (2) `true`	boolean
controllers.openclaw.containers.app.probes.startup.spec.failureThreshold (2) `30`	number
controllers.openclaw.containers.app.probes.startup.spec.periodSeconds (2) `10`	number
controllers.openclaw.containers.app.probes.startup.spec.tcpSocket.port (1) `18789`	number
controllers.openclaw.containers.app.probes.startup.custom (1) `true`	boolean
controllers.openclaw.containers.app.securityContext.allowPrivilegeEscalation (2) `false`	boolean
controllers.openclaw.containers.app.securityContext.capabilities.drop[] (2) `- ALL`	string
controllers.openclaw.containers.app.securityContext.readOnlyRootFilesystem (2) `true`	boolean
controllers.openclaw.containers.app.args[] (1) `- dist/index.js - gateway - --bind - lan - --port - "18789" - --allow-unconfigured`	string
controllers.openclaw.containers.codeserver.args[] (3) `- --auth - none - --user-data-dir - /home/node/.vscode - --extensions-dir - /home/node/.vscode - --port - "12321" - /config`	string
controllers.openclaw.containers.codeserver.env.TZ (3) `Asia/Kuala_Lumpur`	string
controllers.openclaw.containers.codeserver.env.HOME (1) `/home/node`	string
controllers.openclaw.containers.codeserver.env.PASSWORD.valueFrom.secretKeyRef.key (1) `OPENCLAW_GATEWAY_TOKEN`	string
controllers.openclaw.containers.codeserver.env.PASSWORD.valueFrom.secretKeyRef.name (1) `openclaw-secret`	string
controllers.openclaw.containers.codeserver.image.repository (3) `ghcr.io/coder/code-server`	string
controllers.openclaw.containers.codeserver.image.tag (3) `4.126.0@sha256:e1f03b5faaefd63ba6c7173a5290c6ec0526ac907f23acfe6bc949dd965279e4`	string
controllers.openclaw.containers.codeserver.resources.limits.memory (3) `1Gi`	string
controllers.openclaw.containers.codeserver.resources.requests.cpu (3) `10m`	string
controllers.openclaw.containers.codeserver.resources.requests.memory (1) `128Mi`	string
controllers.openclaw.containers.kube-mcp.args[] (1) `- --port - "8081"`	string
controllers.openclaw.containers.kube-mcp.image.repository (1) `ghcr.io/containers/kubernetes-mcp-server`	string
controllers.openclaw.containers.kube-mcp.image.tag (1) `v0.0.63@sha256:9317449ed47916a297f71b955eab57402064de852bf1fb007c4e0705754de2b3`	string
controllers.openclaw.containers.kube-mcp.resources.limits.memory (1) `256Mi`	string
controllers.openclaw.containers.kube-mcp.resources.requests.cpu (1) `10m`	string
controllers.openclaw.containers.kube-mcp.resources.requests.memory (1) `64Mi`	string
controllers.openclaw.containers.kube-mcp.securityContext.allowPrivilegeEscalation (1) `false`	boolean
controllers.openclaw.containers.kube-mcp.securityContext.capabilities.drop[] (1) `- ALL`	string
controllers.openclaw.containers.kube-mcp.securityContext.readOnlyRootFilesystem (1) `true`	boolean
controllers.openclaw.annotations."reloader.stakater.com/auto" (4) `true`	string
controllers.openclaw.initContainers.init-config.command[] (2) `- sh - -c`	string
controllers.openclaw.initContainers.init-config.image.repository (2) `ghcr.io/openclaw/openclaw`	string
controllers.openclaw.initContainers.init-config.image.tag (2) `2026.6.10@sha256:af7ea052cf216f581fb18fabada01552356c53717461c0399b623cba7ecad4b1`	string
controllers.openclaw.initContainers.init-config.args[] (1) - set -e mkdir -p /home/node/.openclaw /home/node/.local/bin /home/node/.local/go if [ ! -f /home/node/.openclaw/openclaw.json ]; then echo '{"gateway":{"mode":"local","trustedProxies":["10.0.0.0/8","172.16.0.0/12","192.168.0.0/16"]}}' > /home/node/.openclaw/openclaw.json fi node -e "const fs=require('fs');const p='/home/node/.openclaw/openclaw.json';let d=JSON.parse(fs.readFileSync(p));d.gateway=d.gateway\|\|{};d.gateway.controlUi=d.gateway.controlUi\|\|{};d.gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback=true;if(d.tools && d.tools.web && d.tools.web.fetch){delete d.tools.web.fetch.provider;delete d.tools.web.fetch.apiKey;};if(d.tools && d.tools.web && d.tools.web.search){delete d.tools.web.search.provider;delete d.tools.web.search.apiKey;};if(d.agents && d.agents.defaults && d.agents.defaults.models){const dep=['openai-codex/gpt-5.2','openai-codex/gpt-5.1','openai-codex/gpt-5.2-codex'];let val=null;dep.forEach(m=>{if(d.agents.defaults.models[m]){val=val\|\|d.agents.defaults.models[m];delete d.agents.defaults.models[m];}});if(val&&!d.agents.defaults.models['openai/gpt-5.5']){d.agents.defaults.models['openai/gpt-5.5']=val;}};fs.writeFileSync(p,JSON.stringify(d,null,2));" export PATH=/home/node/.local/bin:/home/node/.local/go/bin:$PATH # Install gh CLI if not present on PVC if [ ! -f /home/node/.local/bin/gh ]; then echo "Installing gh CLI..." cd /tmp curl -fsSL https://github.com/cli/cli/releases/download/v2.61.0/gh_2.61.0_linux_amd64.tar.gz -o gh.tar.gz tar xzf gh.tar.gz cp gh_2.61.0_linux_amd64/bin/gh /home/node/.local/bin/ rm -rf gh.tar.gz gh_2.61.0_linux_amd64 fi # Install Go if not present on PVC # Skipping go installation due to download issues # Install Homebrew if not present on PVC if [ ! -f /home/node/.local/homebrew/bin/brew ]; then echo "Installing Homebrew..." export HOMEBREW_PREFIX=/home/node/.local/homebrew export HOMEBREW_CELLAR=/home/node/.local/homebrew/Cellar export HOMEBREW_REPOSITORY=/home/node/.local/homebrew mkdir -p $HOMEBREW_PREFIX cd /tmp git clone --depth 1 https://github.com/Homebrew/brew $HOMEBREW_PREFIX fi # Check if pip is available set +e if command -v pip3 >/dev/null 2>&1 \|\| command -v pip >/dev/null 2>&1 \|\| python3 -m pip --version >/dev/null 2>&1; then echo "pip is available" else echo "Installing pip..." cd /tmp curl -fsSL https://bootstrap.pypa.io/get-pip.py -o get-pip.py python3 get-pip.py --user --no-warn-script-location --break-system-packages \|\| \ python3 get-pip.py --user --no-warn-script-location \|\| \ echo "pip install skipped (use python3 -m pip instead)" rm -f get-pip.py fi set -e echo "Init container completed successfully"	string
controllers.openclaw.initContainers.init-config.securityContext.runAsGroup (1) `1000`	number
controllers.openclaw.initContainers.init-config.securityContext.runAsUser (1) `1000`	number
controllers.openclaw.initContainers.init.command[] (1) `- sh - -c - set -euo pipefail chmod u+w /home/node/.openclaw \|\| true rm -f /home/node/.openclaw/openclaw.json cp /tmp/openclaw.json /home/node/.openclaw/openclaw.json chown 1000:100 /home/node/.openclaw/openclaw.json chmod 400 /home/node/.openclaw/openclaw.json`	string
controllers.openclaw.initContainers.init.image.repository (1) `docker.io/library/alpine`	string
controllers.openclaw.initContainers.init.image.tag (1) `3.24`	string
controllers.openclaw.initContainers.install-gh.command[] (1) - sh - -c - set -eu # renovate: datasource=github-releases depName=cli/cli GH_VERSION=2.95.0 BIN=/home/node/.local/bin mkdir -p "$BIN" if [ "$(cat "$BIN/.ghver" 2>/dev/null)" != "$GH_VERSION" ]; then wget -qO /tmp/gh.tar.gz "https://github.com/cli/cli/releases/download/v$GH_VERSION/gh_${GH_VERSION}_linux_amd64.tar.gz" tar -xzf /tmp/gh.tar.gz -C /tmp cp "/tmp/gh_${GH_VERSION}_linux_amd64/bin/gh" "$BIN/gh" chmod +x "$BIN/gh" printf '%s' "$GH_VERSION" > "$BIN/.ghver" rm -rf /tmp/gh.tar.gz "/tmp/gh_${GH_VERSION}_linux_amd64" fi	string
controllers.openclaw.initContainers.install-gh.image.repository (1) `docker.io/library/busybox`	string
controllers.openclaw.initContainers.install-gh.image.tag (1) `1.38`	string
controllers.openclaw.initContainers.install-signal-cli.command[] (1) `- sh - -c - set -eu # renovate: datasource=github-releases depName=AsamK/signal-cli SIGNAL_CLI_VERSION=0.14.5 BIN=/home/node/.openclaw/bin mkdir -p "$BIN" if [ ! -x "$BIN/signal-cli" ]; then wget -qO /tmp/signal-cli.tar.gz "https://github.com/AsamK/signal-cli/releases/download/v$SIGNAL_CLI_VERSION/signal-cli-$SIGNAL_CLI_VERSION-Linux-native.tar.gz" tar -xzf /tmp/signal-cli.tar.gz -C "$BIN" chmod +x "$BIN/signal-cli" fi`	string
controllers.openclaw.initContainers.install-signal-cli.image.repository (1) `docker.io/library/busybox`	string
controllers.openclaw.initContainers.install-signal-cli.image.tag (1) `1.38`	string
controllers.openclaw.pod.securityContext.fsGroup (1) `1000`	number
controllers.openclaw.pod.securityContext.runAsGroup (1) `1000`	number
controllers.openclaw.pod.securityContext.runAsUser (1) `1000`	number
controllers.app.containers.app.env.BROWSER_WS_ENDPOINT (1) `ws://localhost:9222`	string
controllers.app.containers.app.env.GOPATH (1) `$(HOME)/go`	string
controllers.app.containers.app.env.HOME (1) `/home/openclaw`	string
controllers.app.containers.app.env.OPENCLAW_GATEWAY_PORT (1) `8080`	number
controllers.app.containers.app.env.OPENCLAW_HOME (1) `/home/openclaw`	string
controllers.app.containers.app.env.OPENCLAW_LOG_LEVEL (1) `debug`	string
controllers.app.containers.app.env.PATH (1) `$(HOME)/.local/bin:$(HOME)/.local/share/mise/shims:$(HOME)/.local/go/bin:/home/linuxbrew/.linuxbrew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin`	string
controllers.app.containers.app.env.PIP_BREAK_SYSTEM_PACKAGES (1) `1`	string
controllers.app.containers.app.env.TERM (1) `xterm-256color`	string
controllers.app.containers.app.env.TZ (1) `${CONFIG_TZ}`	string
controllers.app.containers.app.envFrom[].secretRef.name (1) `openclaw-secrets`	string
controllers.app.containers.app.image.repository (1) `ghcr.io/openclaw/openclaw`	string
controllers.app.containers.app.image.tag (1) `2026.6.10@sha256:af7ea052cf216f581fb18fabada01552356c53717461c0399b623cba7ecad4b1`	string
controllers.app.containers.app.probes.liveness.enabled (1) `true`	boolean
controllers.app.containers.app.probes.readiness.enabled (1) `true`	boolean
controllers.app.containers.app.securityContext.allowPrivilegeEscalation (1) `false`	boolean
controllers.app.containers.app.securityContext.capabilities.drop[] (1) `- ALL`	string
controllers.app.containers.app.securityContext.readOnlyRootFilesystem (1) `true`	boolean
controllers.app.containers.opencode.args[] (1) `- web - --hostname - "0.0.0.0" - --port - $(HTTP_PORT) - --cors - ${APP_DNS_OPENCODE:=opencode}`	string
controllers.app.containers.opencode.command[] (1) `- /usr/local/bin/opencode`	string
controllers.app.containers.opencode.env.BROWSER_WS_ENDPOINT (1) `ws://localhost:9222`	string
controllers.app.containers.opencode.env.GOPATH (1) `$(HOME)/go`	string
controllers.app.containers.opencode.env.HOME (1) `/home/openclaw`	string
controllers.app.containers.opencode.env.HTTP_PORT (1) `8081`	number
controllers.app.containers.opencode.env.OPENCLAW_GATEWAY_PORT (1) `8080`	number
controllers.app.containers.opencode.env.OPENCLAW_HOME (1) `/home/openclaw`	string
controllers.app.containers.opencode.env.OPENCLAW_LOG_LEVEL (1) `debug`	string
controllers.app.containers.opencode.env.PATH (1) `$(HOME)/.local/bin:$(HOME)/.local/share/mise/shims:$(HOME)/.local/go/bin:/home/linuxbrew/.linuxbrew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin`	string
controllers.app.containers.opencode.env.PIP_BREAK_SYSTEM_PACKAGES (1) `1`	string
controllers.app.containers.opencode.env.TERM (1) `xterm-256color`	string
controllers.app.containers.opencode.env.TZ (1) `${CONFIG_TZ}`	string
controllers.app.containers.opencode.envFrom[].secretRef.name (1) `openclaw-secrets`	string
controllers.app.containers.opencode.image.repository (1) `ghcr.io/anomalyco/opencode`	string
controllers.app.containers.opencode.image.tag (1) `1.17.11@sha256:c38a7cb4449f342166c43ff4a69e1b02f12ef1959bbfdd83993cdff8cea698a7`	string
controllers.app.containers.opencode.probes.liveness.enabled (1) `true`	boolean
controllers.app.containers.opencode.probes.readiness.enabled (1) `true`	boolean
controllers.app.containers.opencode.securityContext.allowPrivilegeEscalation (1) `false`	boolean
controllers.app.containers.opencode.securityContext.capabilities.drop[] (1) `- ALL`	string
controllers.app.containers.opencode.securityContext.readOnlyRootFilesystem (1) `true`	boolean
controllers.app.containers.opencode.workingDir (1) `/home/openclaw`	string
controllers.app.initContainers.setup.command[] (1) - sh - -c - while [ ! -z "$(pgrep node)" ] \|\| [ ! -s $(HOME)/.openclaw/openclaw.json ]; do echo 'OpenClaw has not been setup, please exec to this container and run `openclaw setup` for the app to startup!'; sleep 60; done;	string
controllers.app.initContainers.setup.env.BROWSER_WS_ENDPOINT (1) `ws://localhost:9222`	string
controllers.app.initContainers.setup.env.GOPATH (1) `$(HOME)/go`	string
controllers.app.initContainers.setup.env.HOME (1) `/home/openclaw`	string
controllers.app.initContainers.setup.env.OPENCLAW_GATEWAY_PORT (1) `8080`	number
controllers.app.initContainers.setup.env.OPENCLAW_HOME (1) `/home/openclaw`	string
controllers.app.initContainers.setup.env.OPENCLAW_LOG_LEVEL (1) `debug`	string
controllers.app.initContainers.setup.env.PATH (1) `$(HOME)/.local/bin:$(HOME)/.local/share/mise/shims:$(HOME)/.local/go/bin:/home/linuxbrew/.linuxbrew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin`	string
controllers.app.initContainers.setup.env.PIP_BREAK_SYSTEM_PACKAGES (1) `1`	string
controllers.app.initContainers.setup.env.TERM (1) `xterm-256color`	string
controllers.app.initContainers.setup.env.TZ (1) `${CONFIG_TZ}`	string
controllers.app.initContainers.setup.image.repository (1) `ghcr.io/anomalyco/opencode`	string
controllers.app.initContainers.setup.image.tag (1) `1.17.11@sha256:c38a7cb4449f342166c43ff4a69e1b02f12ef1959bbfdd83993cdff8cea698a7`	string
controllers.app.initContainers.setup.securityContext.allowPrivilegeEscalation (1) `false`	boolean
controllers.app.initContainers.setup.securityContext.capabilities.drop[] (1) `- ALL`	string
controllers.app.initContainers.setup.securityContext.readOnlyRootFilesystem (1) `true`	boolean
controllers.app.pod.annotations."ipam.cilium.io/ip-pool" (1) `vpn-vlan`	string
controllers.app.pod.annotations."ipam.cilium.io/require-pool-match" (1) `true`	string
controllers.app.pod.hostname (1) `openclaw`	string
controllers.app.pod.labels."dns.home.arpa/l7" (1) `true`	string
controllers.app.pod.labels."egress.home.arpa/apiserver" (1) `allow`	string
controllers.app.pod.labels."egress.home.arpa/cloudflare" (1) `allow`	string
controllers.app.pod.labels."egress.home.arpa/github" (1) `allow`	string
controllers.app.pod.labels."ingress.home.arpa/envoy-internal" (1) `allow`	string
controllers.app.pod.resources.limits.cpu (1) `4`	string
controllers.app.pod.resources.limits.memory (1) `2Gi`	string
controllers.app.pod.resources.requests.cpu (1) `10m`	string
controllers.app.replicas (1) `1`	number
controllers.app.serviceAccount.identifier (1) `app`	string
controllers.app.type (1) `deployment`	string
defaultPodOptions.securityContext.fsGroup (5) `100`	number
defaultPodOptions.securityContext.fsGroupChangePolicy (5) `OnRootMismatch`	string
defaultPodOptions.securityContext.runAsGroup (5) `100`	number
defaultPodOptions.securityContext.runAsUser (5) `1000`	number
defaultPodOptions.securityContext.runAsNonRoot (2) `true`	boolean
defaultPodOptions.securityContext.seccompProfile.type (2) `RuntimeDefault`	string
defaultPodOptions.automountServiceAccountToken (3) `true`	boolean
defaultPodOptions.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].key (1) `fuckoff.home.arpa/{{ .Release.Name }}`	string
defaultPodOptions.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].operator (1) `DoesNotExist`	string
defaultPodOptions.dnsConfig.options[].name (1) `ndots`	string
defaultPodOptions.dnsConfig.options[].value (1) `1`	string
defaultPodOptions.runtimeClassName (1) `gvisor`	string
defaultPodOptions.shareProcessNamespace (1) `true`	boolean
persistence.config.globalMounts[].path (4) `/home/node`	string
persistence.config.globalMounts[].subPath (1) `openclaw.json`	string
persistence.config.existingClaim (3) `openclaw`	string
persistence.config.defaultMode (1) `400`	number
persistence.config.name (1) `openclaw-config`	string
persistence.config.type (1) `configMap`	string
persistence.data.globalMounts[].path (4) `/home/node/.openclaw`	string
persistence.data.globalMounts[].subPath (1) `data`	string
persistence.data.existingClaim (3) `openclaw`	string
persistence.data.enabled (1) `true`	boolean
persistence.data.path (1) `/tank/Apps/openclaw`	string
persistence.data.server (1) `smb.cloudjur.com`	string
persistence.data.type (1) `nfs`	string
persistence.tmp.type (3) `emptyDir`	string
persistence.tmp.globalMounts[].path (2) `/tmp`	string
persistence.tmp.globalMounts[].subPath (1) `tmp`	string
persistence.tmp.medium (1) `Memory`	string
persistence.configmap.defaultMode (2) `755`	number
persistence.configmap.globalMounts[].path (2) `/tmp/openclaw.json`	string
persistence.configmap.globalMounts[].subPath (2) `openclaw.json`	string
persistence.configmap.name (2) `{{ .Release.Name }}-config`	string
persistence.configmap.type (2) `configMap`	string
persistence.downloads.globalMounts[].path (1) `/downloads`	string
persistence.downloads.globalMounts[].subPath (1) `metube`	string
persistence.downloads.path (1) `/tank/Storage/Downloads`	string
persistence.downloads.server (1) `smb.cloudjur.com`	string
persistence.downloads.type (1) `nfs`	string
persistence.home.accessMode (1) `ReadWriteOnce`	string
persistence.home.forceRename (1) `openclaw-home`	string
persistence.home.globalMounts[].path (1) `/home/node`	string
persistence.home.size (1) `5Gi`	string
persistence.images.globalMounts[].path (1) `/home/node/.openclaw/workspace/images`	string
persistence.images.path (1) `/tank/Apps/comfyui/output`	string
persistence.images.server (1) `smb.cloudjur.com`	string
persistence.images.type (1) `nfs`	string
persistence.misc.existingClaim (1) `openclaw-misc`	string
persistence.misc.globalMounts[].path (1) `/home/linuxbrew /nix /home/openclaw/go /home/openclaw/.local/go /home/openclaw/.local/share/mise /home/openclaw/.gradle`	string
persistence.misc.globalMounts[].subPath (1) `brew nix go go-local mise gradle`	string
persistence.openclaw-home.type (1) `emptyDir`	string
rbac.bindings.openclaw-exec-deploy-llm.roleRef.identifier (2) `openclaw-exec-deploy-llm`	string
rbac.bindings.openclaw-exec-deploy-llm.subjects[].identifier (2) `app`	string
rbac.bindings.openclaw-exec-deploy-llm.subjects[].namespace (1) `llm`	string
rbac.bindings.openclaw-exec-deploy-llm.subjects[].serviceAccount (1) `openclaw`	string
rbac.bindings.openclaw-exec-deploy-llm.type (2) `RoleBinding`	string
rbac.bindings.openclaw-pod-delete-cluster-wide.roleRef.identifier (2) `openclaw-pod-delete-cluster-wide`	string
rbac.bindings.openclaw-pod-delete-cluster-wide.subjects[].identifier (2) `openclaw`	string
rbac.bindings.openclaw-pod-delete-cluster-wide.subjects[].serviceAccount (2) `openclaw`	string
rbac.bindings.openclaw-pod-delete-cluster-wide.type (2) `ClusterRoleBinding`	string
rbac.bindings.cluster-read-only.roleRef.kind (1) `ClusterRole`	string
rbac.bindings.cluster-read-only.roleRef.name (1) `view`	string
rbac.bindings.cluster-read-only.subjects[].identifier (1) `app`	string
rbac.bindings.cluster-read-only.type (1) `ClusterRoleBinding`	string
rbac.bindings.openclaw-exec-deploy-openclaw.roleRef.identifier (1) `openclaw-exec-deploy-openclaw`	string
rbac.bindings.openclaw-exec-deploy-openclaw.subjects[].identifier (1) `openclaw`	string
rbac.bindings.openclaw-exec-deploy-openclaw.subjects[].namespace (1) `openclaw`	string
rbac.bindings.openclaw-exec-deploy-openclaw.subjects[].serviceAccount (1) `openclaw`	string
rbac.bindings.openclaw-exec-deploy-openclaw.type (1) `RoleBinding`	string
rbac.bindings.openclaw-read-all.roleRef.identifier (1) `openclaw-read-all`	string
rbac.bindings.openclaw-read-all.subjects[].identifier (1) `openclaw`	string
rbac.bindings.openclaw-read-all.subjects[].serviceAccount (1) `openclaw`	string
rbac.bindings.openclaw-read-all.type (1) `ClusterRoleBinding`	string
rbac.roles.openclaw-exec-deploy-llm.rules[].apiGroups[] (2) `- - apps`	string
rbac.roles.openclaw-exec-deploy-llm.rules[].resources[] (2) `- pods/exec - deployments`	string
rbac.roles.openclaw-exec-deploy-llm.rules[].verbs[] (2) `- create - patch - update`	string
rbac.roles.openclaw-exec-deploy-llm.type (2) `Role`	string
rbac.roles.openclaw-pod-delete-cluster-wide.rules[].apiGroups[] (2) `-`	string
rbac.roles.openclaw-pod-delete-cluster-wide.rules[].resources[] (2) `- pods`	string
rbac.roles.openclaw-pod-delete-cluster-wide.rules[].verbs[] (2) `- delete`	string
rbac.roles.openclaw-pod-delete-cluster-wide.type (2) `ClusterRole`	string
rbac.roles.openclaw-exec-deploy-openclaw.rules[].apiGroups[] (1) `- - apps`	string
rbac.roles.openclaw-exec-deploy-openclaw.rules[].resources[] (1) `- pods/exec - deployments`	string
rbac.roles.openclaw-exec-deploy-openclaw.rules[].verbs[] (1) `- create - patch - update`	string
rbac.roles.openclaw-exec-deploy-openclaw.type (1) `Role`	string
rbac.roles.openclaw-read-all.rules[].apiGroups[] (1) `- - apps - batch - networking.k8s.io - storage.k8s.io - autoscaling - policy - coordination.k8s.io - rbac.authorization.k8s.io - apiextensions.k8s.io - apiregistration.k8s.io - metrics.k8s.io - helm.toolkit.fluxcd.io - kustomize.toolkit.fluxcd.io - source.toolkit.fluxcd.io - external-secrets.io - monitoring.coreos.com - snapshot.storage.k8s.io`	string
rbac.roles.openclaw-read-all.rules[].resources[] (1) - pods - pods/log - nodes - services - namespaces - configmaps - persistentvolumes - persistentvolumeclaims - endpoints - resourcequotas - limitranges - serviceaccounts - events - deployments - daemonsets - statefulsets - replicasets - controllerrevisions - jobs - cronjobs - ingresses - ingressclasses - networkpolicies - storageclasses - csinodes - csidrivers - volumeattachments - horizontalpodautoscalers - poddisruptionbudgets - leases - roles - rolebindings - clusterroles - clusterrolebindings - customresourcedefinitions - apiservices - nodes - pods - helmreleases - kustomizations - gitrepositories - helmrepositories - ocirepositories - buckets - helmcharts - externalsecrets - secretstores - clustersecretstores - prometheuses - alertmanagers - servicemonitors - podmonitors - prometheusrules - thanosrulers - probes - volumesnapshots - volumesnapshotcontents - volumesnapshotclasses	string
rbac.roles.openclaw-read-all.rules[].verbs[] (1) `- get - list - watch - get - list - watch - get - list - watch - get - list - watch - get - list - watch - get - list - watch - get - list - watch - get - list - watch - get - list - watch - get - list - watch - get - list - watch - get - list - watch - get - list - watch - get - list - watch - get - list - watch - get - list - watch - get - list - watch - get - list - watch`	string
rbac.roles.openclaw-read-all.type (1) `ClusterRole`	string
networkpolicies.app.controller (1) `app`	string
networkpolicies.app.policyTypes[] (1) `- Ingress - Egress`	string
networkpolicies.app.rules.egress[].to[].namespaceSelector.matchLabels."kubernetes.io/metadata.name" (1) `llama-cpp searxng soft-serve`	string

Key

Types

route.app.hostnames[] (6)

- {{ .Release.Name }}.${SECRET_DOMAIN}

string

route.app.parentRefs[].name (6)

envoy-internal

string

route.app.parentRefs[].namespace (6)

network

string

route.app.parentRefs[].sectionName (3)

https

string

route.app.rules[].backendRefs[].port (6)

string, number

route.app.rules[].backendRefs[].identifier (4)

app

string

route.app.rules[].backendRefs[].name (2)

{{ .Release.Name }}

string

route.app.rules[].filters[].extensionRef.group (1)

traefik.io

string

route.app.rules[].filters[].extensionRef.kind (1)

Middleware

string

route.app.rules[].filters[].extensionRef.name (1)

rfc1918-ips

string

route.app.rules[].filters[].type (1)

ExtensionRef

string

route.app.annotations."gatus.io/enabled" (1)

true

string

route.app.enabled (1)

true

boolean

route.codeserver.hostnames[] (3)

- miso-code.cloudjur.com

string

route.codeserver.parentRefs[].name (3)

envoy-internal

string

route.codeserver.parentRefs[].namespace (3)

network

string

route.codeserver.parentRefs[].sectionName (1)

https

string

route.codeserver.rules[].backendRefs[].port (3)

number

route.codeserver.rules[].backendRefs[].name (2)

{{ .Release.Name }}

string

route.codeserver.rules[].backendRefs[].identifier (1)

app

string

route.opencode.hostnames[] (1)

- ${APP_DNS_OPENCODE:=opencode}

string

route.opencode.parentRefs[].name (1)

envoy-internal

string

route.opencode.parentRefs[].namespace (1)

ingress

string

route.opencode.parentRefs[].sectionName (1)

internal

string

route.opencode.rules[].backendRefs[].identifier (1)

opencode

string

route.opencode.rules[].backendRefs[].port (1)

http

string

service.app.ports.http.port (6)

number

service.app.ports.http.appProtocol (1)

http

string

service.app.ports.http.protocol (1)

HTTP

string

service.app.ports.http.targetPort (1)

number

service.app.ports.codeserver.port (3)

number

service.app.controller (4)

openclaw

string

service.app.annotations."lbipam.cilium.io/ips" (1)

10.10.30.60

string

service.app.externalTrafficPolicy (1)

Cluster

string

service.app.ipFamilies[] (1)

- IPv4

string

service.app.type (1)

LoadBalancer

string

service.opencode.controller (1)

app

string

service.opencode.ports.http.appProtocol (1)

http

string

service.opencode.ports.http.port (1)

number

service.opencode.ports.http.protocol (1)

HTTP

string

service.opencode.ports.http.targetPort (1)

number

controllers.openclaw.containers.app.command[] (5)

- node

string

controllers.openclaw.containers.app.env.HOME (5)

/home/node

string

controllers.openclaw.containers.app.env.PATH (5)

/home/node/.local/bin:/home/node/.local/go/bin:/home/node/.local/homebrew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

string

controllers.openclaw.containers.app.env.TZ (4)

Asia/Shanghai

string

controllers.openclaw.containers.app.env.GOPATH (3)

/home/node/go

string

controllers.openclaw.containers.app.env.OPENCLAW_GATEWAY_PORT (3)

number

controllers.openclaw.containers.app.env.OPENCLAW_LOG_LEVEL (3)

debug

string

controllers.openclaw.containers.app.env.PIP_BREAK_SYSTEM_PACKAGES (3)

string

controllers.openclaw.containers.app.env.TERM (3)

xterm-256color

string

controllers.openclaw.containers.app.env.BROWSER_WS_ENDPOINT (2)

ws://localhost:9222

string

controllers.openclaw.containers.app.env.HOMEBREW_CELLAR (2)

/home/node/.local/homebrew/Cellar

string

controllers.openclaw.containers.app.env.HOMEBREW_PREFIX (2)

/home/node/.local/homebrew

string

controllers.openclaw.containers.app.env.HOMEBREW_REPOSITORY (2)

/home/node/.local/homebrew

string

controllers.openclaw.containers.app.env.npm_config_prefix (2)

/home/node/.npm-global

string

controllers.openclaw.containers.app.env.LANG (1)

C.UTF-8

string

controllers.openclaw.containers.app.env.LC_ALL (1)

C.UTF-8

string

controllers.openclaw.containers.app.env.OPENCLAW_EXTENSION_API_PATH (1)

/app/dist/extensionAPI.js

string

controllers.openclaw.containers.app.env.RADARR_URL (1)

https://radarr.chestr.dev

string

controllers.openclaw.containers.app.env.SONARR_URL (1)

https://sonarr.chestr.dev

string

controllers.openclaw.containers.app.envFrom[].secretRef.name (5)

openclaw

string

controllers.openclaw.containers.app.image.repository (5)

ghcr.io/openclaw/openclaw

string

controllers.openclaw.containers.app.image.tag (5)

2026.6.10@sha256:af7ea052cf216f581fb18fabada01552356c53717461c0399b623cba7ecad4b1

string

controllers.openclaw.containers.app.resources.limits.memory (5)

16Gi

string

controllers.openclaw.containers.app.resources.limits.cpu (3)

number, string

controllers.openclaw.containers.app.resources.requests.cpu (5)

string, number

controllers.openclaw.containers.app.resources.requests.memory (5)

512Mi

string

controllers.openclaw.containers.app.probes.liveness.enabled (2)

true

boolean

controllers.openclaw.containers.app.probes.liveness.custom (1)

true

boolean

controllers.openclaw.containers.app.probes.liveness.spec.initialDelaySeconds (1)

number

controllers.openclaw.containers.app.probes.liveness.spec.periodSeconds (1)

number

controllers.openclaw.containers.app.probes.liveness.spec.tcpSocket.port (1)

number

controllers.openclaw.containers.app.probes.readiness.enabled (2)

true

boolean

controllers.openclaw.containers.app.probes.readiness.custom (1)

true

boolean

controllers.openclaw.containers.app.probes.readiness.spec.initialDelaySeconds (1)

number

controllers.openclaw.containers.app.probes.readiness.spec.periodSeconds (1)

number

controllers.openclaw.containers.app.probes.readiness.spec.tcpSocket.port (1)

number

controllers.openclaw.containers.app.probes.startup.enabled (2)

true

boolean

controllers.openclaw.containers.app.probes.startup.spec.failureThreshold (2)

number

controllers.openclaw.containers.app.probes.startup.spec.periodSeconds (2)

number

controllers.openclaw.containers.app.probes.startup.spec.tcpSocket.port (1)

number

controllers.openclaw.containers.app.probes.startup.custom (1)

true

boolean

controllers.openclaw.containers.app.securityContext.allowPrivilegeEscalation (2)

false

boolean

controllers.openclaw.containers.app.securityContext.capabilities.drop[] (2)

- ALL

string

controllers.openclaw.containers.app.securityContext.readOnlyRootFilesystem (2)

true

boolean

controllers.openclaw.containers.app.args[] (1)

- dist/index.js
- gateway
- --bind
- lan
- --port
- "18789"
- --allow-unconfigured

string

controllers.openclaw.containers.codeserver.args[] (3)

- --auth
- none
- --user-data-dir
- /home/node/.vscode
- --extensions-dir
- /home/node/.vscode
- --port
- "12321"
- /config

string

controllers.openclaw.containers.codeserver.env.TZ (3)

Asia/Kuala_Lumpur

string

controllers.openclaw.containers.codeserver.env.HOME (1)

/home/node

string

controllers.openclaw.containers.codeserver.env.PASSWORD.valueFrom.secretKeyRef.key (1)

OPENCLAW_GATEWAY_TOKEN

string

controllers.openclaw.containers.codeserver.env.PASSWORD.valueFrom.secretKeyRef.name (1)

openclaw-secret

string

controllers.openclaw.containers.codeserver.image.repository (3)

ghcr.io/coder/code-server

string

controllers.openclaw.containers.codeserver.image.tag (3)

4.126.0@sha256:e1f03b5faaefd63ba6c7173a5290c6ec0526ac907f23acfe6bc949dd965279e4

string

controllers.openclaw.containers.codeserver.resources.limits.memory (3)

1Gi

string

controllers.openclaw.containers.codeserver.resources.requests.cpu (3)

10m

string

controllers.openclaw.containers.codeserver.resources.requests.memory (1)

128Mi

string

controllers.openclaw.containers.kube-mcp.args[] (1)

- --port
- "8081"

string

controllers.openclaw.containers.kube-mcp.image.repository (1)

ghcr.io/containers/kubernetes-mcp-server

string

controllers.openclaw.containers.kube-mcp.image.tag (1)

v0.0.63@sha256:9317449ed47916a297f71b955eab57402064de852bf1fb007c4e0705754de2b3

string

controllers.openclaw.containers.kube-mcp.resources.limits.memory (1)

256Mi

string

controllers.openclaw.containers.kube-mcp.resources.requests.cpu (1)

10m

string

controllers.openclaw.containers.kube-mcp.resources.requests.memory (1)

64Mi

string

controllers.openclaw.containers.kube-mcp.securityContext.allowPrivilegeEscalation (1)

false

boolean

controllers.openclaw.containers.kube-mcp.securityContext.capabilities.drop[] (1)

- ALL

string

controllers.openclaw.containers.kube-mcp.securityContext.readOnlyRootFilesystem (1)

true

boolean

controllers.openclaw.annotations."reloader.stakater.com/auto" (4)

true

string

controllers.openclaw.initContainers.init-config.command[] (2)

- sh
- -c

string

controllers.openclaw.initContainers.init-config.image.repository (2)

ghcr.io/openclaw/openclaw

string

controllers.openclaw.initContainers.init-config.image.tag (2)

2026.6.10@sha256:af7ea052cf216f581fb18fabada01552356c53717461c0399b623cba7ecad4b1

string

controllers.openclaw.initContainers.init-config.args[] (1)

- set -e
mkdir -p /home/node/.openclaw /home/node/.local/bin /home/node/.local/go

if [ ! -f /home/node/.openclaw/openclaw.json ]; then
  echo '{"gateway":{"mode":"local","trustedProxies":["10.0.0.0/8","172.16.0.0/12","192.168.0.0/16"]}}' > /home/node/.openclaw/openclaw.json
fi
node -e "const fs=require('fs');const p='/home/node/.openclaw/openclaw.json';let d=JSON.parse(fs.readFileSync(p));d.gateway=d.gateway||{};d.gateway.controlUi=d.gateway.controlUi||{};d.gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback=true;if(d.tools && d.tools.web && d.tools.web.fetch){delete d.tools.web.fetch.provider;delete d.tools.web.fetch.apiKey;};if(d.tools && d.tools.web && d.tools.web.search){delete d.tools.web.search.provider;delete d.tools.web.search.apiKey;};if(d.agents && d.agents.defaults && d.agents.defaults.models){const dep=['openai-codex/gpt-5.2','openai-codex/gpt-5.1','openai-codex/gpt-5.2-codex'];let val=null;dep.forEach(m=>{if(d.agents.defaults.models[m]){val=val||d.agents.defaults.models[m];delete d.agents.defaults.models[m];}});if(val&&!d.agents.defaults.models['openai/gpt-5.5']){d.agents.defaults.models['openai/gpt-5.5']=val;}};fs.writeFileSync(p,JSON.stringify(d,null,2));"

export PATH=/home/node/.local/bin:/home/node/.local/go/bin:$PATH

# Install gh CLI if not present on PVC
if [ ! -f /home/node/.local/bin/gh ]; then
  echo "Installing gh CLI..."
  cd /tmp
  curl -fsSL https://github.com/cli/cli/releases/download/v2.61.0/gh_2.61.0_linux_amd64.tar.gz -o gh.tar.gz
  tar xzf gh.tar.gz
  cp gh_2.61.0_linux_amd64/bin/gh /home/node/.local/bin/
  rm -rf gh.tar.gz gh_2.61.0_linux_amd64
fi

# Install Go if not present on PVC
# Skipping go installation due to download issues

# Install Homebrew if not present on PVC
if [ ! -f /home/node/.local/homebrew/bin/brew ]; then
  echo "Installing Homebrew..."
  export HOMEBREW_PREFIX=/home/node/.local/homebrew
  export HOMEBREW_CELLAR=/home/node/.local/homebrew/Cellar
  export HOMEBREW_REPOSITORY=/home/node/.local/homebrew
  mkdir -p $HOMEBREW_PREFIX
  cd /tmp
  git clone --depth 1 https://github.com/Homebrew/brew $HOMEBREW_PREFIX
fi

# Check if pip is available
set +e
if command -v pip3 >/dev/null 2>&1 || command -v pip >/dev/null 2>&1 || python3 -m pip --version >/dev/null 2>&1; then
  echo "pip is available"
else
  echo "Installing pip..."
  cd /tmp
  curl -fsSL https://bootstrap.pypa.io/get-pip.py -o get-pip.py
  python3 get-pip.py --user --no-warn-script-location --break-system-packages || \
  python3 get-pip.py --user --no-warn-script-location || \
  echo "pip install skipped (use python3 -m pip instead)"
  rm -f get-pip.py
fi
set -e
echo "Init container completed successfully"

string

controllers.openclaw.initContainers.init-config.securityContext.runAsGroup (1)

number

controllers.openclaw.initContainers.init-config.securityContext.runAsUser (1)

number

controllers.openclaw.initContainers.init.command[] (1)

- sh
- -c
- set -euo pipefail
chmod u+w /home/node/.openclaw || true
rm -f /home/node/.openclaw/openclaw.json
cp /tmp/openclaw.json /home/node/.openclaw/openclaw.json
chown 1000:100 /home/node/.openclaw/openclaw.json
chmod 400 /home/node/.openclaw/openclaw.json

string

controllers.openclaw.initContainers.init.image.repository (1)

docker.io/library/alpine

string

controllers.openclaw.initContainers.init.image.tag (1)

3.24

string

controllers.openclaw.initContainers.install-gh.command[] (1)

- sh
- -c
- set -eu
# renovate: datasource=github-releases depName=cli/cli
GH_VERSION=2.95.0
BIN=/home/node/.local/bin
mkdir -p "$BIN"
if [ "$(cat "$BIN/.ghver" 2>/dev/null)" != "$GH_VERSION" ]; then
  wget -qO /tmp/gh.tar.gz "https://github.com/cli/cli/releases/download/v$GH_VERSION/gh_${GH_VERSION}_linux_amd64.tar.gz"
  tar -xzf /tmp/gh.tar.gz -C /tmp
  cp "/tmp/gh_${GH_VERSION}_linux_amd64/bin/gh" "$BIN/gh"
  chmod +x "$BIN/gh"
  printf '%s' "$GH_VERSION" > "$BIN/.ghver"
  rm -rf /tmp/gh.tar.gz "/tmp/gh_${GH_VERSION}_linux_amd64"
fi

string

controllers.openclaw.initContainers.install-gh.image.repository (1)

docker.io/library/busybox

string

controllers.openclaw.initContainers.install-gh.image.tag (1)

1.38

string

controllers.openclaw.initContainers.install-signal-cli.command[] (1)

- sh
- -c
- set -eu
# renovate: datasource=github-releases depName=AsamK/signal-cli
SIGNAL_CLI_VERSION=0.14.5
BIN=/home/node/.openclaw/bin
mkdir -p "$BIN"
if [ ! -x "$BIN/signal-cli" ]; then
  wget -qO /tmp/signal-cli.tar.gz "https://github.com/AsamK/signal-cli/releases/download/v$SIGNAL_CLI_VERSION/signal-cli-$SIGNAL_CLI_VERSION-Linux-native.tar.gz"
  tar -xzf /tmp/signal-cli.tar.gz -C "$BIN"
  chmod +x "$BIN/signal-cli"
fi

string

controllers.openclaw.initContainers.install-signal-cli.image.repository (1)

docker.io/library/busybox

string

controllers.openclaw.initContainers.install-signal-cli.image.tag (1)

1.38

string

controllers.openclaw.pod.securityContext.fsGroup (1)

number

controllers.openclaw.pod.securityContext.runAsGroup (1)

number

controllers.openclaw.pod.securityContext.runAsUser (1)

number

controllers.app.containers.app.env.BROWSER_WS_ENDPOINT (1)

ws://localhost:9222

string

controllers.app.containers.app.env.GOPATH (1)

$(HOME)/go

string

controllers.app.containers.app.env.HOME (1)

/home/openclaw

string

controllers.app.containers.app.env.OPENCLAW_GATEWAY_PORT (1)

number

controllers.app.containers.app.env.OPENCLAW_HOME (1)

/home/openclaw

string

controllers.app.containers.app.env.OPENCLAW_LOG_LEVEL (1)

debug

string

controllers.app.containers.app.env.PATH (1)

$(HOME)/.local/bin:$(HOME)/.local/share/mise/shims:$(HOME)/.local/go/bin:/home/linuxbrew/.linuxbrew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

string

controllers.app.containers.app.env.PIP_BREAK_SYSTEM_PACKAGES (1)

string

controllers.app.containers.app.env.TERM (1)

xterm-256color

string

controllers.app.containers.app.env.TZ (1)

${CONFIG_TZ}

string

controllers.app.containers.app.envFrom[].secretRef.name (1)

openclaw-secrets

string

controllers.app.containers.app.image.repository (1)

ghcr.io/openclaw/openclaw

string

controllers.app.containers.app.image.tag (1)

2026.6.10@sha256:af7ea052cf216f581fb18fabada01552356c53717461c0399b623cba7ecad4b1

string

controllers.app.containers.app.probes.liveness.enabled (1)

true

boolean

controllers.app.containers.app.probes.readiness.enabled (1)

true

boolean

controllers.app.containers.app.securityContext.allowPrivilegeEscalation (1)

false

boolean

controllers.app.containers.app.securityContext.capabilities.drop[] (1)

- ALL

string

controllers.app.containers.app.securityContext.readOnlyRootFilesystem (1)

true

boolean

controllers.app.containers.opencode.args[] (1)

- web
- --hostname
- "0.0.0.0"
- --port
- $(HTTP_PORT)
- --cors
- ${APP_DNS_OPENCODE:=opencode}

string

controllers.app.containers.opencode.command[] (1)

- /usr/local/bin/opencode

string

controllers.app.containers.opencode.env.BROWSER_WS_ENDPOINT (1)

ws://localhost:9222

string

controllers.app.containers.opencode.env.GOPATH (1)

$(HOME)/go

string

controllers.app.containers.opencode.env.HOME (1)

/home/openclaw

string

controllers.app.containers.opencode.env.HTTP_PORT (1)

number

controllers.app.containers.opencode.env.OPENCLAW_GATEWAY_PORT (1)

number

controllers.app.containers.opencode.env.OPENCLAW_HOME (1)

/home/openclaw

string

controllers.app.containers.opencode.env.OPENCLAW_LOG_LEVEL (1)

debug

string

controllers.app.containers.opencode.env.PATH (1)

$(HOME)/.local/bin:$(HOME)/.local/share/mise/shims:$(HOME)/.local/go/bin:/home/linuxbrew/.linuxbrew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

string

controllers.app.containers.opencode.env.PIP_BREAK_SYSTEM_PACKAGES (1)

string

controllers.app.containers.opencode.env.TERM (1)

xterm-256color

string

controllers.app.containers.opencode.env.TZ (1)

${CONFIG_TZ}

string

controllers.app.containers.opencode.envFrom[].secretRef.name (1)

openclaw-secrets

string

controllers.app.containers.opencode.image.repository (1)

ghcr.io/anomalyco/opencode

string

controllers.app.containers.opencode.image.tag (1)

1.17.11@sha256:c38a7cb4449f342166c43ff4a69e1b02f12ef1959bbfdd83993cdff8cea698a7

string

controllers.app.containers.opencode.probes.liveness.enabled (1)

true

boolean

controllers.app.containers.opencode.probes.readiness.enabled (1)

true

boolean

controllers.app.containers.opencode.securityContext.allowPrivilegeEscalation (1)

false

boolean

controllers.app.containers.opencode.securityContext.capabilities.drop[] (1)

- ALL

string

controllers.app.containers.opencode.securityContext.readOnlyRootFilesystem (1)

true

boolean

controllers.app.containers.opencode.workingDir (1)

/home/openclaw

string

controllers.app.initContainers.setup.command[] (1)

- sh
- -c
- while [ ! -z "$(pgrep node)" ] || [ ! -s $(HOME)/.openclaw/openclaw.json ]; do
  echo 'OpenClaw has not been setup, please exec to this container and run `openclaw setup` for the app to startup!';
  sleep 60;
done;

string

controllers.app.initContainers.setup.env.BROWSER_WS_ENDPOINT (1)

ws://localhost:9222

string

controllers.app.initContainers.setup.env.GOPATH (1)

$(HOME)/go

string

controllers.app.initContainers.setup.env.HOME (1)

/home/openclaw

string

controllers.app.initContainers.setup.env.OPENCLAW_GATEWAY_PORT (1)

number

controllers.app.initContainers.setup.env.OPENCLAW_HOME (1)

/home/openclaw

string

controllers.app.initContainers.setup.env.OPENCLAW_LOG_LEVEL (1)

debug

string

controllers.app.initContainers.setup.env.PATH (1)

$(HOME)/.local/bin:$(HOME)/.local/share/mise/shims:$(HOME)/.local/go/bin:/home/linuxbrew/.linuxbrew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

string

controllers.app.initContainers.setup.env.PIP_BREAK_SYSTEM_PACKAGES (1)

string

controllers.app.initContainers.setup.env.TERM (1)

xterm-256color

string

controllers.app.initContainers.setup.env.TZ (1)

${CONFIG_TZ}

string

controllers.app.initContainers.setup.image.repository (1)

ghcr.io/anomalyco/opencode

string

controllers.app.initContainers.setup.image.tag (1)

1.17.11@sha256:c38a7cb4449f342166c43ff4a69e1b02f12ef1959bbfdd83993cdff8cea698a7

string

controllers.app.initContainers.setup.securityContext.allowPrivilegeEscalation (1)

false

boolean

controllers.app.initContainers.setup.securityContext.capabilities.drop[] (1)

- ALL

string

controllers.app.initContainers.setup.securityContext.readOnlyRootFilesystem (1)

true

boolean

controllers.app.pod.annotations."ipam.cilium.io/ip-pool" (1)

vpn-vlan

string

controllers.app.pod.annotations."ipam.cilium.io/require-pool-match" (1)

true

string

controllers.app.pod.hostname (1)

openclaw

string

controllers.app.pod.labels."dns.home.arpa/l7" (1)

true

string

controllers.app.pod.labels."egress.home.arpa/apiserver" (1)

allow

string

controllers.app.pod.labels."egress.home.arpa/cloudflare" (1)

allow

string

controllers.app.pod.labels."egress.home.arpa/github" (1)

allow

string

controllers.app.pod.labels."ingress.home.arpa/envoy-internal" (1)

allow

string

controllers.app.pod.resources.limits.cpu (1)

string

controllers.app.pod.resources.limits.memory (1)

2Gi

string

controllers.app.pod.resources.requests.cpu (1)

10m

string

controllers.app.replicas (1)

number

controllers.app.serviceAccount.identifier (1)

app

string

controllers.app.type (1)

deployment

string

defaultPodOptions.securityContext.fsGroup (5)

number

defaultPodOptions.securityContext.fsGroupChangePolicy (5)

OnRootMismatch

string

defaultPodOptions.securityContext.runAsGroup (5)

number

defaultPodOptions.securityContext.runAsUser (5)

number

defaultPodOptions.securityContext.runAsNonRoot (2)

true

boolean

defaultPodOptions.securityContext.seccompProfile.type (2)

RuntimeDefault

string

defaultPodOptions.automountServiceAccountToken (3)

true

boolean

defaultPodOptions.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].key (1)

fuckoff.home.arpa/{{ .Release.Name }}

string

defaultPodOptions.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].operator (1)

DoesNotExist

string

defaultPodOptions.dnsConfig.options[].name (1)

ndots

string

defaultPodOptions.dnsConfig.options[].value (1)

string

defaultPodOptions.runtimeClassName (1)

gvisor

string

defaultPodOptions.shareProcessNamespace (1)

true

boolean

persistence.config.globalMounts[].path (4)

/home/node

string

persistence.config.globalMounts[].subPath (1)

openclaw.json

string

persistence.config.existingClaim (3)

openclaw

string

persistence.config.defaultMode (1)

number

persistence.config.name (1)

openclaw-config

string

persistence.config.type (1)

configMap

string

persistence.data.globalMounts[].path (4)

/home/node/.openclaw

string

persistence.data.globalMounts[].subPath (1)

data

string

persistence.data.existingClaim (3)

openclaw

string

persistence.data.enabled (1)

true

boolean

persistence.data.path (1)

/tank/Apps/openclaw

string

persistence.data.server (1)

smb.cloudjur.com

string

persistence.data.type (1)

nfs

string

persistence.tmp.type (3)

emptyDir

string

persistence.tmp.globalMounts[].path (2)

/tmp

string

persistence.tmp.globalMounts[].subPath (1)

tmp

string

persistence.tmp.medium (1)

Memory

string

persistence.configmap.defaultMode (2)

number

persistence.configmap.globalMounts[].path (2)

/tmp/openclaw.json

string

persistence.configmap.globalMounts[].subPath (2)

openclaw.json

string

persistence.configmap.name (2)

{{ .Release.Name }}-config

string

persistence.configmap.type (2)

configMap

string

persistence.downloads.globalMounts[].path (1)

/downloads

string

persistence.downloads.globalMounts[].subPath (1)

metube

string

persistence.downloads.path (1)

/tank/Storage/Downloads

string

persistence.downloads.server (1)

smb.cloudjur.com

string

persistence.downloads.type (1)

nfs

string

persistence.home.accessMode (1)

ReadWriteOnce

string

persistence.home.forceRename (1)

openclaw-home

string

persistence.home.globalMounts[].path (1)

/home/node

string

persistence.home.size (1)

5Gi

string

persistence.images.globalMounts[].path (1)

/home/node/.openclaw/workspace/images

string

persistence.images.path (1)

/tank/Apps/comfyui/output

string

persistence.images.server (1)

smb.cloudjur.com

string

persistence.images.type (1)

nfs

string

persistence.misc.existingClaim (1)

openclaw-misc

string

persistence.misc.globalMounts[].path (1)

/home/linuxbrew
/nix
/home/openclaw/go
/home/openclaw/.local/go
/home/openclaw/.local/share/mise
/home/openclaw/.gradle

string

persistence.misc.globalMounts[].subPath (1)

brew
nix
go
go-local
mise
gradle

string

persistence.openclaw-home.type (1)

emptyDir

string

rbac.bindings.openclaw-exec-deploy-llm.roleRef.identifier (2)

openclaw-exec-deploy-llm

string

rbac.bindings.openclaw-exec-deploy-llm.subjects[].identifier (2)

app

string

rbac.bindings.openclaw-exec-deploy-llm.subjects[].namespace (1)

llm

string

rbac.bindings.openclaw-exec-deploy-llm.subjects[].serviceAccount (1)

openclaw

string

rbac.bindings.openclaw-exec-deploy-llm.type (2)

RoleBinding

string

rbac.bindings.openclaw-pod-delete-cluster-wide.roleRef.identifier (2)

openclaw-pod-delete-cluster-wide

string

rbac.bindings.openclaw-pod-delete-cluster-wide.subjects[].identifier (2)

openclaw

string

rbac.bindings.openclaw-pod-delete-cluster-wide.subjects[].serviceAccount (2)

openclaw

string

rbac.bindings.openclaw-pod-delete-cluster-wide.type (2)

ClusterRoleBinding

string

rbac.bindings.cluster-read-only.roleRef.kind (1)

ClusterRole

string

rbac.bindings.cluster-read-only.roleRef.name (1)

view

string

rbac.bindings.cluster-read-only.subjects[].identifier (1)

app

string

rbac.bindings.cluster-read-only.type (1)

ClusterRoleBinding

string

rbac.bindings.openclaw-exec-deploy-openclaw.roleRef.identifier (1)

openclaw-exec-deploy-openclaw

string

rbac.bindings.openclaw-exec-deploy-openclaw.subjects[].identifier (1)

openclaw

string

rbac.bindings.openclaw-exec-deploy-openclaw.subjects[].namespace (1)

openclaw

string

rbac.bindings.openclaw-exec-deploy-openclaw.subjects[].serviceAccount (1)

openclaw

string

rbac.bindings.openclaw-exec-deploy-openclaw.type (1)

RoleBinding

string

rbac.bindings.openclaw-read-all.roleRef.identifier (1)

openclaw-read-all

string

rbac.bindings.openclaw-read-all.subjects[].identifier (1)

openclaw

string

rbac.bindings.openclaw-read-all.subjects[].serviceAccount (1)

openclaw

string

rbac.bindings.openclaw-read-all.type (1)

ClusterRoleBinding

string

rbac.roles.openclaw-exec-deploy-llm.rules[].apiGroups[] (2)

- 
- apps

string

rbac.roles.openclaw-exec-deploy-llm.rules[].resources[] (2)

- pods/exec
- deployments

string

rbac.roles.openclaw-exec-deploy-llm.rules[].verbs[] (2)

- create
- patch
- update

string

rbac.roles.openclaw-exec-deploy-llm.type (2)

Role

string

rbac.roles.openclaw-pod-delete-cluster-wide.rules[].apiGroups[] (2)

string

rbac.roles.openclaw-pod-delete-cluster-wide.rules[].resources[] (2)

- pods

string

rbac.roles.openclaw-pod-delete-cluster-wide.rules[].verbs[] (2)

- delete

string

rbac.roles.openclaw-pod-delete-cluster-wide.type (2)

ClusterRole

string

rbac.roles.openclaw-exec-deploy-openclaw.rules[].apiGroups[] (1)

- 
- apps

string

rbac.roles.openclaw-exec-deploy-openclaw.rules[].resources[] (1)

- pods/exec
- deployments

string

rbac.roles.openclaw-exec-deploy-openclaw.rules[].verbs[] (1)

- create
- patch
- update

string

rbac.roles.openclaw-exec-deploy-openclaw.type (1)

Role

string

rbac.roles.openclaw-read-all.rules[].apiGroups[] (1)

- 
- apps
- batch
- networking.k8s.io
- storage.k8s.io
- autoscaling
- policy
- coordination.k8s.io
- rbac.authorization.k8s.io
- apiextensions.k8s.io
- apiregistration.k8s.io
- metrics.k8s.io
- helm.toolkit.fluxcd.io
- kustomize.toolkit.fluxcd.io
- source.toolkit.fluxcd.io
- external-secrets.io
- monitoring.coreos.com
- snapshot.storage.k8s.io

string

rbac.roles.openclaw-read-all.rules[].resources[] (1)

- pods
- pods/log
- nodes
- services
- namespaces
- configmaps
- persistentvolumes
- persistentvolumeclaims
- endpoints
- resourcequotas
- limitranges
- serviceaccounts
- events
- deployments
- daemonsets
- statefulsets
- replicasets
- controllerrevisions
- jobs
- cronjobs
- ingresses
- ingressclasses
- networkpolicies
- storageclasses
- csinodes
- csidrivers
- volumeattachments
- horizontalpodautoscalers
- poddisruptionbudgets
- leases
- roles
- rolebindings
- clusterroles
- clusterrolebindings
- customresourcedefinitions
- apiservices
- nodes
- pods
- helmreleases
- kustomizations
- gitrepositories
- helmrepositories
- ocirepositories
- buckets
- helmcharts
- externalsecrets
- secretstores
- clustersecretstores
- prometheuses
- alertmanagers
- servicemonitors
- podmonitors
- prometheusrules
- thanosrulers
- probes
- volumesnapshots
- volumesnapshotcontents
- volumesnapshotclasses

string

rbac.roles.openclaw-read-all.rules[].verbs[] (1)

- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch

string

rbac.roles.openclaw-read-all.type (1)

ClusterRole

string

networkpolicies.app.controller (1)

app

string

networkpolicies.app.policyTypes[] (1)

- Ingress
- Egress

string

networkpolicies.app.rules.egress[].to[].namespaceSelector.matchLabels."kubernetes.io/metadata.name" (1)

llama-cpp
searxng
soft-serve

string

openclaw helm

Install

Examples

Top Repositories (3 out of 6)

Values