openclaw helm release

No introduction found. Create it?

Name	Repo	Stars	Version	Timestamp
openclaw	joryirving/home-ops	218	5.0.1	5 hours ago

Name

Repo

Stars

Version

Timestamp

openclaw

joryirving/home-ops

218

5.0.1

5 hours ago

Key	Types
controllers.openclaw.annotations."reloader.stakater.com/auto" (6) `true`	string
controllers.openclaw.containers.app.command[] (5) `- /bin/sh - -c - # Start gateway exec node dist/index.js gateway --bind lan`	string
controllers.openclaw.containers.app.env.HOME (5) `/home/node`	string
controllers.openclaw.containers.app.env.TZ (5) `${TZ}`	string
controllers.openclaw.containers.app.env.OPENCLAW_GATEWAY_PORT (4) `18789`	number, string
controllers.openclaw.containers.app.env.PATH (4) `/home/node/.local/bin:/home/node/.local/go/bin:/home/node/.local/homebrew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin`	string
controllers.openclaw.containers.app.env.TERM (4) `xterm-256color`	string
controllers.openclaw.containers.app.env.BROWSER_WS_ENDPOINT (3) `ws://localhost:9222`	string
controllers.openclaw.containers.app.env.GOPATH (3) `/home/node/go`	string
controllers.openclaw.containers.app.env.HOMEBREW_CELLAR (3) `/home/node/.local/homebrew/Cellar`	string
controllers.openclaw.containers.app.env.HOMEBREW_PREFIX (3) `/home/node/.local/homebrew`	string
controllers.openclaw.containers.app.env.HOMEBREW_REPOSITORY (3) `/home/node/.local/homebrew`	string
controllers.openclaw.containers.app.env.PIP_BREAK_SYSTEM_PACKAGES (3) `1`	string
controllers.openclaw.containers.app.env.DOCKER_CERT_PATH (2) `/certs/client`	string
controllers.openclaw.containers.app.env.DOCKER_HOST (2) `tcp://localhost:2376`	string
controllers.openclaw.containers.app.env.DOCKER_TLS_VERIFY (2) `1`	string
controllers.openclaw.containers.app.env.OPENCLAW_LOG_LEVEL (2) `debug`	string
controllers.openclaw.containers.app.env.MEMINI_API_KEY.valueFrom.secretKeyRef.key (1) `MEMINI_API_KEY`	string
controllers.openclaw.containers.app.env.MEMINI_API_KEY.valueFrom.secretKeyRef.name (1) `openclaw-config`	string
controllers.openclaw.containers.app.env.OPENAI_API_KEY.valueFrom.secretKeyRef.key (1) `OPENAI_API_KEY`	string
controllers.openclaw.containers.app.env.OPENAI_API_KEY.valueFrom.secretKeyRef.name (1) `openclaw-secret`	string
controllers.openclaw.containers.app.env.OPENAI_BASE_URL.valueFrom.secretKeyRef.key (1) `OPENAI_BASE_URL`	string
controllers.openclaw.containers.app.env.OPENAI_BASE_URL.valueFrom.secretKeyRef.name (1) `openclaw-secret`	string
controllers.openclaw.containers.app.env.OPENCLAW_CONFIG_DIR (1) `/home/node/.openclaw`	string
controllers.openclaw.containers.app.env.OPENCLAW_DISABLE_BONJOUR (1) `1`	string
controllers.openclaw.containers.app.env.OPENCLAW_WORKSPACE_DIR (1) `/home/node/.openclaw/workspace`	string
controllers.openclaw.containers.app.image.repository (5) `ghcr.io/openclaw/openclaw`	string
controllers.openclaw.containers.app.image.tag (5) `2026.6.9@sha256:c440a75f5580acb135409068f39ca701a5ca10fb9892cd9473a60ba0669cc0dc`	string
controllers.openclaw.containers.app.resources.requests.cpu (5) `100m`	string, number
controllers.openclaw.containers.app.resources.requests.memory (5) `2Gi`	string
controllers.openclaw.containers.app.resources.limits.memory (4) `16Gi`	string
controllers.openclaw.containers.app.resources.limits.cpu (3) `4`	number, string
controllers.openclaw.containers.app.envFrom[].secretRef.name (3) `openclaw`	string
controllers.openclaw.containers.app.probes.liveness.enabled (2) `false`	boolean
controllers.openclaw.containers.app.probes.liveness.custom (1) `true`	boolean
controllers.openclaw.containers.app.probes.liveness.spec.failureThreshold (1) `5`	number
controllers.openclaw.containers.app.probes.liveness.spec.httpGet.path (1) `/health`	string
controllers.openclaw.containers.app.probes.liveness.spec.httpGet.port (1) `18789`	number
controllers.openclaw.containers.app.probes.liveness.spec.periodSeconds (1) `60`	number
controllers.openclaw.containers.app.probes.liveness.spec.timeoutSeconds (1) `15`	number
controllers.openclaw.containers.app.probes.readiness.enabled (2) `false`	boolean
controllers.openclaw.containers.app.probes.readiness.custom (1) `true`	boolean
controllers.openclaw.containers.app.probes.readiness.spec.failureThreshold (1) `3`	number
controllers.openclaw.containers.app.probes.readiness.spec.httpGet.path (1) `/health`	string
controllers.openclaw.containers.app.probes.readiness.spec.httpGet.port (1) `18789`	number
controllers.openclaw.containers.app.probes.readiness.spec.periodSeconds (1) `30`	number
controllers.openclaw.containers.app.probes.readiness.spec.timeoutSeconds (1) `10`	number
controllers.openclaw.containers.app.probes.startup.enabled (2) `false`	boolean
controllers.openclaw.containers.app.probes.startup.custom (1) `true`	boolean
controllers.openclaw.containers.app.probes.startup.spec.failureThreshold (1) `60`	number
controllers.openclaw.containers.app.probes.startup.spec.httpGet.path (1) `/health`	string
controllers.openclaw.containers.app.probes.startup.spec.httpGet.port (1) `18789`	number
controllers.openclaw.containers.app.probes.startup.spec.periodSeconds (1) `5`	number
controllers.openclaw.containers.app.probes.startup.spec.timeoutSeconds (1) `10`	number
controllers.openclaw.containers.app.securityContext.allowPrivilegeEscalation (2) `false`	boolean
controllers.openclaw.containers.app.securityContext.capabilities.drop[] (2) `- ALL`	string
controllers.openclaw.containers.chrome.command[] (2) `- chromium-browser - --headless=new - --disable-gpu - --remote-debugging-address=0.0.0.0 - --remote-debugging-port=9222 - --no-sandbox - --disable-dev-shm-usage - --disable-blink-features=AutomationControlled - --remote-allow-origins=* - --user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36`	string
controllers.openclaw.containers.chrome.env.TZ (2) `${TZ}`	string
controllers.openclaw.containers.chrome.image.repository (2) `zenika/alpine-chrome`	string
controllers.openclaw.containers.chrome.image.tag (2) `with-node`	string
controllers.openclaw.containers.chrome.resources.limits.cpu (2) `1000m`	string
controllers.openclaw.containers.chrome.resources.limits.memory (2) `1Gi`	string
controllers.openclaw.containers.chrome.resources.requests.cpu (2) `100m`	string
controllers.openclaw.containers.chrome.resources.requests.memory (2) `256Mi`	string
controllers.openclaw.containers.chrome.securityContext.allowPrivilegeEscalation (1) `false`	boolean
controllers.openclaw.containers.chrome.securityContext.capabilities.drop[] (1) `- ALL`	string
controllers.openclaw.containers.codeserver.args[] (2) `- --auth - none - --user-data-dir - /home/node/.vscode - --extensions-dir - /home/node/.vscode - --port - "12321" - /config`	string
controllers.openclaw.containers.codeserver.env.TZ (2) `${TZ}`	string
controllers.openclaw.containers.codeserver.image.repository (2) `ghcr.io/coder/code-server`	string
controllers.openclaw.containers.codeserver.image.tag (2) `4.125.0@sha256:9a7848dd2627158e3873f88bd8743807a4168e4d580f26ec0cbc132a9d9ee78e`	string
controllers.openclaw.containers.codeserver.resources.limits.memory (2) `1Gi`	string
controllers.openclaw.containers.codeserver.resources.requests.cpu (2) `10m`	string
controllers.openclaw.containers.codeserver.securityContext.allowPrivilegeEscalation (1) `false`	boolean
controllers.openclaw.containers.codeserver.securityContext.capabilities.drop[] (1) `- ALL`	string
controllers.openclaw.containers.openclaw.env.CONTROL_UI_ORIGIN (1) `https://openclaw.${SECRET_DOMAIN}`	string
controllers.openclaw.containers.openclaw.env.HOME (1) `/home/node`	string
controllers.openclaw.containers.openclaw.env.OPENCLAW_AUTH_PROFILE_SECRET_DIR (1) `/home/node/.openclaw/.secrets`	string
controllers.openclaw.containers.openclaw.env.OPENCLAW_GATEWAY_PORT (1) `18789`	number
controllers.openclaw.containers.openclaw.env.PATH (1) `/home/node/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin`	string
controllers.openclaw.containers.openclaw.env.TZ (1) `${CONFIG_TZ:=Etc/UTC}`	string
controllers.openclaw.containers.openclaw.envFrom[].secretRef.name (1) `openclaw-secret`	string
controllers.openclaw.containers.openclaw.image.repository (1) `ghcr.io/openclaw/openclaw`	string
controllers.openclaw.containers.openclaw.image.tag (1) `2026.6.8@sha256:9f55f0cb32b2925a983f40726440189b8f422ec61ae2a0fb0cf90403cf6d63d7`	string
controllers.openclaw.containers.openclaw.probes.liveness.custom (1) `true`	boolean
controllers.openclaw.containers.openclaw.probes.liveness.enabled (1) `true`	boolean
controllers.openclaw.containers.openclaw.probes.liveness.spec.failureThreshold (1) `3`	number
controllers.openclaw.containers.openclaw.probes.liveness.spec.initialDelaySeconds (1) `10`	number
controllers.openclaw.containers.openclaw.probes.liveness.spec.periodSeconds (1) `30`	number
controllers.openclaw.containers.openclaw.probes.liveness.spec.tcpSocket.port (1) `18789`	number
controllers.openclaw.containers.openclaw.probes.liveness.spec.timeoutSeconds (1) `5`	number
controllers.openclaw.containers.openclaw.probes.readiness.custom (1) `true`	boolean
controllers.openclaw.containers.openclaw.probes.readiness.enabled (1) `true`	boolean
controllers.openclaw.containers.openclaw.probes.readiness.spec.failureThreshold (1) `3`	number
controllers.openclaw.containers.openclaw.probes.readiness.spec.initialDelaySeconds (1) `10`	number
controllers.openclaw.containers.openclaw.probes.readiness.spec.periodSeconds (1) `30`	number
controllers.openclaw.containers.openclaw.probes.readiness.spec.tcpSocket.port (1) `18789`	number
controllers.openclaw.containers.openclaw.probes.readiness.spec.timeoutSeconds (1) `5`	number
controllers.openclaw.containers.openclaw.resources.limits.cpu (1) `4`	string
controllers.openclaw.containers.openclaw.resources.limits.memory (1) `2Gi`	string
controllers.openclaw.containers.openclaw.resources.requests.cpu (1) `25m`	string
controllers.openclaw.containers.openclaw.resources.requests.memory (1) `256Mi`	string
controllers.openclaw.containers.openclaw.securityContext.allowPrivilegeEscalation (1) `false`	boolean
controllers.openclaw.containers.openclaw.securityContext.capabilities.drop[] (1) `- ALL`	string
controllers.openclaw.containers.openclaw.securityContext.readOnlyRootFilesystem (1) `true`	boolean
controllers.openclaw.initContainers.install-tools.command[] (3) - /bin/sh - -c - set -e mkdir -p /home/node/.local/bin /home/node/.local/go if [ ! -f /home/node/.local/bin/gh ]; then cd /tmp curl -fsSL https://github.com/cli/cli/releases/download/v2.61.0/gh_2.61.0_linux_amd64.tar.gz -o gh.tar.gz tar xzf gh.tar.gz cp gh_2.61.0_linux_amd64/bin/gh /home/node/.local/bin/ rm -rf gh.tar.gz gh_2.61.0_linux_amd64 fi if [ ! -f /home/node/.local/bin/openclaw ]; then ln -s /app/openclaw.mjs /home/node/.local/bin/openclaw fi if [ ! -f /home/node/.local/bin/docker ]; then cd /tmp curl -fsSL https://download.docker.com/linux/static/stable/x86_64/docker-29.4.0.tgz -o docker.tgz tar xzf docker.tgz --strip-components=1 -C /home/node/.local/bin/ docker/docker rm -f docker.tgz fi if [ ! -f /home/node/.local/go/bin/go ]; then cd /tmp curl -fsSL https://go.dev/dl/go1.23.5.linux-amd64.tar.gz -o go.tar.gz tar xzf go.tar.gz mv go /home/node/.local/ rm -rf go.tar.gz fi if [ ! -f /home/node/.local/homebrew/bin/brew ]; then export HOMEBREW_PREFIX=/home/node/.local/homebrew mkdir -p $HOMEBREW_PREFIX git clone --depth 1 https://github.com/Homebrew/brew $HOMEBREW_PREFIX fi mkdir -p /home/node/.openclaw if [ ! -d /home/node/.openclaw/plugins/travel-hacking-toolkit ]; then mkdir -p /home/node/.openclaw/plugins git clone --depth 1 https://github.com/borski/travel-hacking-toolkit \ /home/node/.openclaw/plugins/travel-hacking-toolkit else cd /home/node/.openclaw/plugins/travel-hacking-toolkit git pull --ff-only \|\| true cd - fi export PATH=/home/node/.local/bin:$PATH	string
controllers.openclaw.initContainers.install-tools.image.repository (3) `ghcr.io/openclaw/openclaw`	string
controllers.openclaw.initContainers.install-tools.image.tag (3) `2026.6.9@sha256:c440a75f5580acb135409068f39ca701a5ca10fb9892cd9473a60ba0669cc0dc`	string
controllers.openclaw.initContainers.install-tools.securityContext.allowPrivilegeEscalation (1) `false`	boolean
controllers.openclaw.initContainers.install-tools.securityContext.capabilities.drop[] (1) `- ALL`	string
controllers.openclaw.initContainers.install-tools.securityContext.runAsGroup (1) `0`	number
controllers.openclaw.initContainers.install-tools.securityContext.runAsNonRoot (1) `false`	boolean
controllers.openclaw.initContainers.install-tools.securityContext.runAsUser (1) `0`	number
controllers.openclaw.initContainers.daemon.image.repository (2) `docker`	string
controllers.openclaw.initContainers.daemon.image.tag (2) `29.6.0-dind@sha256:7bb861a04bb42bda1d237fc2cb539f9823c9b666ecfbfdbd3e534ab74c8cb976`	string
controllers.openclaw.initContainers.daemon.probes.liveness.custom (2) `true`	boolean
controllers.openclaw.initContainers.daemon.probes.liveness.enabled (2) `true`	boolean
controllers.openclaw.initContainers.daemon.probes.liveness.spec.exec.command[] (2) `- docker - info`	string
controllers.openclaw.initContainers.daemon.probes.liveness.spec.failureThreshold (2) `3`	number
controllers.openclaw.initContainers.daemon.probes.liveness.spec.periodSeconds (2) `20`	number
controllers.openclaw.initContainers.daemon.probes.liveness.spec.timeoutSeconds (2) `3`	number
controllers.openclaw.initContainers.daemon.probes.readiness.custom (2) `true`	boolean
controllers.openclaw.initContainers.daemon.probes.readiness.enabled (2) `true`	boolean
controllers.openclaw.initContainers.daemon.probes.readiness.spec.exec.command[] (2) `- docker - info`	string
controllers.openclaw.initContainers.daemon.probes.readiness.spec.failureThreshold (2) `3`	number
controllers.openclaw.initContainers.daemon.probes.readiness.spec.periodSeconds (2) `5`	number
controllers.openclaw.initContainers.daemon.probes.readiness.spec.timeoutSeconds (2) `3`	number
controllers.openclaw.initContainers.daemon.probes.startup.custom (2) `true`	boolean
controllers.openclaw.initContainers.daemon.probes.startup.enabled (2) `true`	boolean
controllers.openclaw.initContainers.daemon.probes.startup.spec.exec.command[] (2) `- docker - info`	string
controllers.openclaw.initContainers.daemon.probes.startup.spec.failureThreshold (2) `60`	number
controllers.openclaw.initContainers.daemon.probes.startup.spec.periodSeconds (2) `2`	number
controllers.openclaw.initContainers.daemon.probes.startup.spec.timeoutSeconds (2) `3`	number
controllers.openclaw.initContainers.daemon.restartPolicy (2) `Always`	string
controllers.openclaw.initContainers.daemon.securityContext.privileged (2) `true`	boolean
controllers.openclaw.initContainers.daemon.securityContext.runAsGroup (2) `0`	number
controllers.openclaw.initContainers.daemon.securityContext.runAsUser (2) `0`	number
controllers.openclaw.initContainers.daemon.securityContext.allowPrivilegeEscalation (1) `true`	boolean
controllers.openclaw.initContainers.daemon.securityContext.runAsNonRoot (1) `false`	boolean
controllers.openclaw.initContainers.daemon.command[] (1) - /bin/sh - -c - chown 1000:1000 /home/node for p in \ /home/node/.cache \ /home/node/.openclaw/workspace/.venvs \ /home/node/.openclaw/workspace/.cache \ /home/node/.openclaw/workspace/.bun \ /home/node/.openclaw/workspace/.local \ /home/node/.openclaw/workspace/node_modules; do [ -e "$p" ] && chown 1000:1000 "$p" \|\| true done for d in dot-local dot-npm dot-cache workspace-bun workspace-venvs workspace-cache workspace-local workspace-node-modules; do mkdir -p "/transient-cache/$d" done chown -R 1000:1000 /transient-cache mkdir -p /etc/docker cat > /etc/docker/daemon.json <<EOF { "registry-mirrors": ["http://${NODE_IP}:29999"] } EOF dockerd-entrypoint.sh & DOCKERD_PID=$! until docker info >/dev/null 2>&1; do sleep 1; done docker pull ghcr.io/solanyn/openclaw-sandbox:5.0.1 \|\| true wait $DOCKERD_PID	string
controllers.openclaw.initContainers.daemon.env.DOCKER_TLS_CERTDIR (1) `/certs`	string
controllers.openclaw.initContainers.daemon.env[].name (1) `DOCKER_TLS_CERTDIR NODE_IP`	string
controllers.openclaw.initContainers.daemon.env[].value (1) `/certs`	string
controllers.openclaw.initContainers.daemon.env[].valueFrom.fieldRef.fieldPath (1) `status.hostIP`	string
controllers.openclaw.initContainers.init.command[] (2) `- sh - -c - set -euo pipefail mkdir -p /home/node/.openclaw chmod 700 /home/node/.openclaw cp /run/config/openclaw.json /home/node/.openclaw/openclaw.json chown 1000:100 /home/node/.openclaw/openclaw.json chmod 400 /home/node/.openclaw/openclaw.json`	string
controllers.openclaw.initContainers.init.image.repository (2) `docker.io/library/alpine`	string
controllers.openclaw.initContainers.init.image.tag (2) `3.24`	string
controllers.openclaw.initContainers.init.securityContext.allowPrivilegeEscalation (1) `false`	boolean
controllers.openclaw.initContainers.init.securityContext.capabilities.drop[] (1) `- ALL`	string
controllers.openclaw.initContainers.init.securityContext.runAsGroup (1) `100`	number
controllers.openclaw.initContainers.init.securityContext.runAsUser (1) `1000`	number
controllers.openclaw.initContainers.archive.command[] (1) `- /bin/sh - -c - apk add --no-cache rsync su-exec while true; do if [ -d /home/node/.openclaw/agents/main/sessions ]; then su-exec 1000:1000 rsync -a /home/node/.openclaw/agents/main/sessions/ /archive/ fi sleep 900 done`	string
controllers.openclaw.initContainers.archive.image.repository (1) `alpine`	string
controllers.openclaw.initContainers.archive.image.tag (1) `3.23`	number
controllers.openclaw.initContainers.archive.resources.requests.cpu (1) `10m`	string
controllers.openclaw.initContainers.archive.resources.requests.memory (1) `32Mi`	string
controllers.openclaw.initContainers.archive.restartPolicy (1) `Always`	string
controllers.openclaw.initContainers.archive.securityContext.runAsGroup (1) `0`	number
controllers.openclaw.initContainers.archive.securityContext.runAsNonRoot (1) `false`	boolean
controllers.openclaw.initContainers.archive.securityContext.runAsUser (1) `0`	number
controllers.openclaw.initContainers.fix-perms.command[] (1) `- sh - -c - set -euo pipefail chown 1000:100 /home/node/.openclaw chmod 700 /home/node/.openclaw`	string
controllers.openclaw.initContainers.fix-perms.image.repository (1) `docker.io/library/alpine`	string
controllers.openclaw.initContainers.fix-perms.image.tag (1) `3.24`	string
controllers.openclaw.initContainers.fix-perms.securityContext.allowPrivilegeEscalation (1) `false`	boolean
controllers.openclaw.initContainers.fix-perms.securityContext.capabilities.add[] (1) `- CHOWN - FOWNER`	string
controllers.openclaw.initContainers.fix-perms.securityContext.capabilities.drop[] (1) `- ALL`	string
controllers.openclaw.initContainers.fix-perms.securityContext.runAsGroup (1) `0`	number
controllers.openclaw.initContainers.fix-perms.securityContext.runAsUser (1) `0`	number
controllers.openclaw.initContainers.setup.command[] (1) - sh - -c - while [ ! -s "$HOME/.openclaw/openclaw.json" ]; do echo 'OpenClaw is not set up yet. Run: kubectl -n ai-sandbox exec -it <pod> -c setup -- openclaw setup'; sleep 60; done # Force an all-interfaces bind via the persisted config. The # bind mode is read ONLY from openclaw.json (or the --bind flag), # never from env — OPENCLAW_GATEWAY_BIND is inert in a plain pod # (confirmed in OpenClaw source v2026.6.8: only the Docker # setup.sh writes it to config). With no config value the default # is "auto", which resolves to 0.0.0.0 only when OpenClaw detects # a container runtime; gVisor isn't detected, so it fell back to # loopback (127.0.0.1) and was unreachable by Envoy + the kubelet # probe (CrashLoop). gateway.bind="lan" resolves to 0.0.0.0 # unconditionally. Also allowlist the Control UI browser origin: # the dashboard opens a WebSocket and the gateway rejects it unless # the page origin is in gateway.controlUi.allowedOrigins (exact # origin, no wildcards). Also wire the agent to the in-cluster # Qwen model (llmkube InferenceService qwen3-6-27b-mtp in the `ai` # namespace, OpenAI-compatible llama.cpp at :8080/v1 — reachable # per the egress policy). Registered as provider "local" (mode # merge keeps the bundled catalogs) and set as the agent's primary # model, replacing the default external openai/gpt-5.5. The dummy # apiKey satisfies credential resolution; llama.cpp ignores it (no # --api-key on the server). Idempotent; runs every start so it # self-heals if `openclaw setup` rewrites the config. node -e ' const fs = require("fs"), f = process.env.HOME + "/.openclaw/openclaw.json"; const c = JSON.parse(fs.readFileSync(f, "utf8")); c.gateway = Object.assign({}, c.gateway, { bind: "lan" }); c.gateway.controlUi = Object.assign({}, c.gateway.controlUi, { allowedOrigins: [process.env.CONTROL_UI_ORIGIN] }); c.models = Object.assign({}, c.models, { mode: "merge" }); c.models.providers = Object.assign({}, c.models.providers, { local: { baseUrl: "http://qwen3-6-27b-mtp.ai:8080/v1", api: "openai-completions", apiKey: "sk-local", models: [{ id: "qwen3-6-27b-mtp", name: "Qwen3.6 27B MTP (local)", reasoning: true, input: ["text"], cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 }, contextWindow: 262144, maxTokens: 8192, compat: { thinkingFormat: "qwen" } }] } }); c.agents = Object.assign({}, c.agents); c.agents.defaults = Object.assign({}, c.agents.defaults, { model: { primary: "local/qwen3-27b-mtp" } }); fs.writeFileSync(f, JSON.stringify(c, null, 2)); console.log("openclaw config: bind=lan, controlUi origin set, agent model=local/qwen3-27b-mtp"); '	string
controllers.openclaw.initContainers.setup.env.CONTROL_UI_ORIGIN (1) `https://openclaw.${SECRET_DOMAIN}`	string
controllers.openclaw.initContainers.setup.env.HOME (1) `/home/node`	string
controllers.openclaw.initContainers.setup.env.OPENCLAW_AUTH_PROFILE_SECRET_DIR (1) `/home/node/.openclaw/.secrets`	string
controllers.openclaw.initContainers.setup.env.OPENCLAW_GATEWAY_PORT (1) `18789`	number
controllers.openclaw.initContainers.setup.env.PATH (1) `/home/node/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin`	string
controllers.openclaw.initContainers.setup.env.TZ (1) `${CONFIG_TZ:=Etc/UTC}`	string
controllers.openclaw.initContainers.setup.envFrom[].secretRef.name (1) `openclaw-secret`	string
controllers.openclaw.initContainers.setup.image.repository (1) `ghcr.io/openclaw/openclaw`	string
controllers.openclaw.initContainers.setup.image.tag (1) `2026.6.8@sha256:9f55f0cb32b2925a983f40726440189b8f422ec61ae2a0fb0cf90403cf6d63d7`	string
controllers.openclaw.initContainers.setup.securityContext.allowPrivilegeEscalation (1) `false`	boolean
controllers.openclaw.initContainers.setup.securityContext.capabilities.drop[] (1) `- ALL`	string
controllers.openclaw.initContainers.setup.securityContext.readOnlyRootFilesystem (1) `true`	boolean
controllers.openclaw.pod.nodeSelector."kubernetes.io/hostname" (1) `talos1`	string
controllers.openclaw.replicas (1) `1`	number
controllers.openclaw.strategy (1) `Recreate`	string
controllers.openclaw.type (1) `deployment`	string
controllers.codeserver.containers.codeserver.args[] (1) `- --auth - none - --user-data-dir - /home/node/.vscode - --extensions-dir - /home/node/.vscode - --port - "12321" - /config`	string
controllers.codeserver.containers.codeserver.env.TZ (1) `Pacific/Auckland`	string
controllers.codeserver.containers.codeserver.image.repository (1) `ghcr.io/coder/code-server`	string
controllers.codeserver.containers.codeserver.image.tag (1) `4.125.0@sha256:9a7848dd2627158e3873f88bd8743807a4168e4d580f26ec0cbc132a9d9ee78e`	string
controllers.codeserver.containers.codeserver.resources.limits.memory (1) `1Gi`	string
controllers.codeserver.containers.codeserver.resources.requests.cpu (1) `10m`	string
defaultPodOptions.securityContext.fsGroup (6) `1000`	number
defaultPodOptions.securityContext.runAsUser (6) `1000`	number
defaultPodOptions.securityContext.fsGroupChangePolicy (5) `OnRootMismatch`	string
defaultPodOptions.securityContext.runAsGroup (5) `100`	number
defaultPodOptions.securityContext.seccompProfile.type (3) `RuntimeDefault`	string
defaultPodOptions.securityContext.runAsNonRoot (2) `true`	boolean
defaultPodOptions.automountServiceAccountToken (4) `true`	boolean
defaultPodOptions.shareProcessNamespace (2) `true`	boolean
defaultPodOptions.dnsConfig.options[].name (1) `ndots`	string
defaultPodOptions.dnsConfig.options[].value (1) `1`	string
defaultPodOptions.runtimeClassName (1) `gvisor`	string
persistence.config.existingClaim (5) `{{ .Release.Name }}`	string
persistence.config.globalMounts[].path (3) `/home/node`	string
persistence.config.advancedMounts.openclaw.app[].path (1) `/home/node`	string
persistence.config.advancedMounts.openclaw.archive[].path (1) `/home/node`	string
persistence.config.advancedMounts.openclaw.daemon[].path (1) `/home/node`	string
persistence.config.advancedMounts.openclaw.init[].path (1) `/run/config/openclaw.json`	string
persistence.config.advancedMounts.openclaw.init[].subPath (1) `openclaw.json`	string
persistence.config.advancedMounts.openclaw.install-tools[].path (1) `/home/node`	string
persistence.config.advancedMounts.openclaw.openclaw[].path (1) `/home/node`	string
persistence.config.advancedMounts.openclaw.setup[].path (1) `/home/node`	string
persistence.config.defaultMode (1) `256`	number
persistence.config.name (1) `openclaw-config`	string
persistence.config.type (1) `secret`	string
persistence.data.globalMounts[].path (3) `/data`	string
persistence.data.path (2) `/mnt/delta/miso`	string
persistence.data.server (2) `voyager.internal`	string
persistence.data.type (2) `nfs`	string
persistence.data.existingClaim (1) `openclaw`	string
persistence.certs.globalMounts[].path (2) `/certs`	string
persistence.certs.type (2) `emptyDir`	string
persistence.tmp.globalMounts[].path (2) `/tmp`	string
persistence.tmp.type (2) `emptyDir`	string
persistence.tmp.medium (1) `Memory`	string
persistence.cache.advancedMounts.openclaw.openclaw[].path (1) `/home/node/.cache`	string
persistence.cache.sizeLimit (1) `20Gi`	string
persistence.cache.type (1) `emptyDir`	string
persistence.configmap.defaultMode (1) `755`	number
persistence.configmap.globalMounts[].path (1) `/tmp/openclaw.json`	string
persistence.configmap.globalMounts[].subPath (1) `openclaw.json`	string
persistence.configmap.name (1) `{{ .Release.Name }}-config`	string
persistence.configmap.type (1) `configMap`	string
persistence.docker-data.accessMode (1) `ReadWriteOnce`	string
persistence.docker-data.advancedMounts.openclaw.daemon[].path (1) `/var/lib/docker`	string
persistence.docker-data.size (1) `10Gi`	string
persistence.docker-data.storageClass (1) `openebs-hostpath`	string
persistence.docker-data.suffix (1) `docker-data`	string
persistence.docker-data.type (1) `persistentVolumeClaim`	string
persistence.downloads.globalMounts[].path (1) `/downloads`	string
persistence.downloads.globalMounts[].subPath (1) `metube`	string
persistence.downloads.path (1) `/mnt/akademiya/data`	string
persistence.downloads.server (1) `voyager.internal`	string
persistence.downloads.type (1) `nfs`	string
persistence.hawow.globalMounts[].path (1) `/home/node/hawow`	string
persistence.hawow.path (1) `/mnt/world/hawow`	string
persistence.hawow.server (1) `nas.internal`	string
persistence.hawow.type (1) `nfs`	string
persistence.home.accessMode (1) `ReadWriteOnce`	string
persistence.home.forceRename (1) `openclaw-home`	string
persistence.home.globalMounts[].path (1) `/home/node`	string
persistence.home.size (1) `20Gi`	string
persistence.home.storageClass (1) `miroir-replicated`	string
persistence.images.globalMounts[].path (1) `/home/node/.openclaw/workspace/images`	string
persistence.images.path (1) `/mnt/daena/comfyui/output`	string
persistence.images.server (1) `voyager.internal`	string
persistence.images.type (1) `nfs`	string
persistence.next-cache.globalMounts[].path (1) `/app/.next/cache`	string
persistence.next-cache.type (1) `emptyDir`	string
persistence.openclaw-archive.advancedMounts.openclaw.archive[].path (1) `/archive`	string
persistence.openclaw-archive.path (1) `/mnt/world/openclaw`	string
persistence.openclaw-archive.server (1) `nas.internal`	string
persistence.openclaw-archive.type (1) `nfs`	string
persistence.openclaw-config.advancedMounts.openclaw.install-tools[].path (1) `/tmp/openclaw-config`	string
persistence.openclaw-config.advancedMounts.openclaw.install-tools[].readOnly (1) `true`	boolean
persistence.openclaw-config.name (1) `openclaw-config`	string
persistence.openclaw-config.type (1) `secret`	string
persistence.openclaw-home.type (1) `emptyDir`	string
persistence.openclaw-json.defaultMode (1) `256`	number
persistence.openclaw-json.globalMounts[].path (1) `/home/node/.openclaw/openclaw.json`	string
persistence.openclaw-json.globalMounts[].subPath (1) `openclaw.json`	string
persistence.openclaw-json.name (1) `openclaw-config`	string
persistence.openclaw-json.type (1) `secret`	string
persistence.ssh-secrets.advancedMounts.openclaw.install-tools[].path (1) `/tmp/ssh-secrets`	string
persistence.ssh-secrets.advancedMounts.openclaw.install-tools[].readOnly (1) `true`	boolean
persistence.ssh-secrets.items[].key (1) `ssh_private_key ssh_config fj_config`	string
persistence.ssh-secrets.items[].path (1) `ssh_private_key ssh_config fj_config`	string
persistence.ssh-secrets.name (1) `openclaw`	string
persistence.ssh-secrets.type (1) `secret`	string
persistence.transient-cache.accessMode (1) `ReadWriteOnce`	string
persistence.transient-cache.advancedMounts.openclaw.app[].path (1) `/home/node/.local /home/node/.npm /home/node/.cache /home/node/.openclaw/workspace/.bun /home/node/.openclaw/workspace/.venvs /home/node/.openclaw/workspace/.cache /home/node/.openclaw/workspace/.local /home/node/.openclaw/workspace/node_modules`	string
persistence.transient-cache.advancedMounts.openclaw.app[].subPath (1) `dot-local dot-npm dot-cache workspace-bun workspace-venvs workspace-cache workspace-local workspace-node-modules`	string
persistence.transient-cache.advancedMounts.openclaw.daemon[].path (1) `/transient-cache`	string
persistence.transient-cache.advancedMounts.openclaw.install-tools[].path (1) `/home/node/.local /home/node/.npm /home/node/.cache /home/node/.openclaw/workspace/.bun /home/node/.openclaw/workspace/.venvs /home/node/.openclaw/workspace/.cache /home/node/.openclaw/workspace/.local /home/node/.openclaw/workspace/node_modules`	string
persistence.transient-cache.advancedMounts.openclaw.install-tools[].subPath (1) `dot-local dot-npm dot-cache workspace-bun workspace-venvs workspace-cache workspace-local workspace-node-modules`	string
persistence.transient-cache.size (1) `15Gi`	string
persistence.transient-cache.storageClass (1) `openebs-hostpath`	string
persistence.transient-cache.suffix (1) `transient-cache`	string
persistence.transient-cache.type (1) `persistentVolumeClaim`	string
route.app.hostnames[] (5) `- openclaw.erwanleboucher.dev`	string
route.app.parentRefs[].name (5) `envoy-internal`	string
route.app.parentRefs[].namespace (5) `network`	string
route.app.parentRefs[].sectionName (1) `https`	string
route.app.rules[].backendRefs[].port (4) `18789`	number, string
route.app.rules[].backendRefs[].identifier (3) `app`	string
route.app.rules[].backendRefs[].name (1) `{{ .Release.Name }}`	string
route.codeserver.hostnames[] (3) `- openclaw-code.erwanleboucher.dev`	string
route.codeserver.parentRefs[].name (3) `envoy-internal`	string
route.codeserver.parentRefs[].namespace (3) `network`	string
route.codeserver.parentRefs[].sectionName (1) `https`	string
route.codeserver.rules[].backendRefs[].port (3) `12321`	number, string
route.codeserver.rules[].backendRefs[].identifier (2) `app`	string
route.codeserver.rules[].backendRefs[].name (1) `{{ .Release.Name }}`	string
route.internal.enabled (1) `true`	boolean
route.internal.hostnames[] (1) `- openclaw.${SECRET_DOMAIN}`	string
route.internal.parentRefs[].name (1) `envoy-internal`	string
route.internal.parentRefs[].namespace (1) `network`	string
route.internal.parentRefs[].sectionName (1) `https`	string
route.internal.rules[].backendRefs[].identifier (1) `openclaw`	string
route.internal.rules[].backendRefs[].port (1) `18789`	number
service.app.ports.http.port (5) `18789`	number
service.app.ports.codeserver.port (2) `12321`	number
service.app.controller (2) `openclaw`	string
service.app.annotations."lbipam.cilium.io/ips" (1) `10.69.10.41`	string
service.app.externalTrafficPolicy (1) `Cluster`	string
service.app.ipFamilies[] (1) `- IPv4`	string
service.app.type (1) `LoadBalancer`	string
service.codeserver.controller (1) `codeserver`	string
service.codeserver.ports.http.port (1) `12321`	number
service.openclaw.controller (1) `openclaw`	string
service.openclaw.ports.http.port (1) `18789`	number
service.openclaw.primary (1) `true`	boolean
rbac.bindings.openclaw-read-all.roleRef.identifier (3) `openclaw-read-all`	string
rbac.bindings.openclaw-read-all.subjects[].identifier (3) `openclaw`	string
rbac.bindings.openclaw-read-all.subjects[].serviceAccount (3) `openclaw`	string
rbac.bindings.openclaw-read-all.type (3) `ClusterRoleBinding`	string
rbac.bindings.openclaw-write-restricted.roleRef.identifier (2) `openclaw-write-restricted`	string
rbac.bindings.openclaw-write-restricted.subjects[].identifier (2) `openclaw`	string
rbac.bindings.openclaw-write-restricted.subjects[].serviceAccount (2) `openclaw`	string
rbac.bindings.openclaw-write-restricted.type (2) `RoleBinding`	string
rbac.bindings.openclaw-cluster-ops.roleRef.identifier (1) `openclaw-cluster-ops`	string
rbac.bindings.openclaw-cluster-ops.subjects[].identifier (1) `openclaw`	string
rbac.bindings.openclaw-cluster-ops.subjects[].serviceAccount (1) `openclaw`	string
rbac.bindings.openclaw-cluster-ops.type (1) `ClusterRoleBinding`	string
rbac.bindings.openclaw-exec-deploy-llm.roleRef.identifier (1) `openclaw-exec-deploy-llm`	string
rbac.bindings.openclaw-exec-deploy-llm.subjects[].identifier (1) `openclaw`	string
rbac.bindings.openclaw-exec-deploy-llm.subjects[].namespace (1) `llm`	string
rbac.bindings.openclaw-exec-deploy-llm.subjects[].serviceAccount (1) `openclaw`	string
rbac.bindings.openclaw-exec-deploy-llm.type (1) `RoleBinding`	string
rbac.bindings.openclaw-exec-deploy.roleRef.identifier (1) `openclaw-exec-deploy`	string
rbac.bindings.openclaw-exec-deploy.subjects[].identifier (1) `openclaw`	string
rbac.bindings.openclaw-exec-deploy.subjects[].namespace (1) `openclaw`	string
rbac.bindings.openclaw-exec-deploy.subjects[].serviceAccount (1) `openclaw`	string
rbac.bindings.openclaw-exec-deploy.type (1) `RoleBinding`	string
rbac.bindings.openclaw-pod-delete-cluster-wide.roleRef.identifier (1) `openclaw-pod-delete-cluster-wide`	string
rbac.bindings.openclaw-pod-delete-cluster-wide.subjects[].identifier (1) `openclaw`	string
rbac.bindings.openclaw-pod-delete-cluster-wide.subjects[].serviceAccount (1) `openclaw`	string
rbac.bindings.openclaw-pod-delete-cluster-wide.type (1) `ClusterRoleBinding`	string
rbac.bindings.openclaw-pod-delete.roleRef.identifier (1) `openclaw-pod-delete`	string
rbac.bindings.openclaw-pod-delete.subjects[].identifier (1) `openclaw`	string
rbac.bindings.openclaw-pod-delete.subjects[].serviceAccount (1) `openclaw`	string
rbac.bindings.openclaw-pod-delete.type (1) `ClusterRoleBinding`	string
rbac.bindings.openclaw-pod-manage.roleRef.identifier (1) `openclaw-pod-manage`	string
rbac.bindings.openclaw-pod-manage.subjects[].identifier (1) `openclaw`	string
rbac.bindings.openclaw-pod-manage.subjects[].serviceAccount (1) `openclaw`	string
rbac.bindings.openclaw-pod-manage.type (1) `ClusterRoleBinding`	string
rbac.bindings.openclaw-sandbox-manage.roleRef.identifier (1) `openclaw-sandbox-manage`	string
rbac.bindings.openclaw-sandbox-manage.subjects[].identifier (1) `openclaw`	string
rbac.bindings.openclaw-sandbox-manage.subjects[].serviceAccount (1) `openclaw`	string
rbac.bindings.openclaw-sandbox-manage.type (1) `RoleBinding`	string
rbac.roles.openclaw-read-all.rules[].apiGroups[] (3) `- - apps - batch - networking.k8s.io - storage.k8s.io - helm.toolkit.fluxcd.io - kustomize.toolkit.fluxcd.io - source.toolkit.fluxcd.io - external-secrets.io`	string
rbac.roles.openclaw-read-all.rules[].resources[] (3) - pods - pods/log - nodes - services - namespaces - configmaps - persistentvolumes - persistentvolumeclaims - endpoints - resourcequotas - limitranges - serviceaccounts - events - deployments - daemonsets - statefulsets - replicasets - controllerrevisions - jobs - cronjobs - ingresses - ingressclasses - networkpolicies - storageclasses - csinodes - csidrivers - volumeattachments - helmreleases - kustomizations - gitrepositories - helmrepositories - ocirepositories - buckets - helmcharts - externalsecrets - secretstores - clustersecretstores	string
rbac.roles.openclaw-read-all.rules[].verbs[] (3) `- get - list - watch - get - list - watch - get - list - watch - get - list - watch - get - list - watch - get - list - watch - get - list - watch - get - list - watch - get - list - watch`	string
rbac.roles.openclaw-read-all.type (3) `ClusterRole`	string
rbac.roles.openclaw-write-restricted.rules[].apiGroups[] (2) `- apps - - gateway.networking.k8s.io`	string
rbac.roles.openclaw-write-restricted.rules[].resources[] (2) `- deployments - services - configmaps - httproutes`	string
rbac.roles.openclaw-write-restricted.rules[].verbs[] (2) `- get - list - watch - create - patch - update - delete - get - list - watch - create - patch - update - delete - get - list - watch - create - patch - update - delete`	string
rbac.roles.openclaw-write-restricted.type (2) `Role`	string
rbac.roles.openclaw-cluster-ops.rules[].apiGroups[] (1) `- helm.toolkit.fluxcd.io -`	string
rbac.roles.openclaw-cluster-ops.rules[].resources[] (1) `- helmreleases - persistentvolumes`	string
rbac.roles.openclaw-cluster-ops.rules[].verbs[] (1) `- patch - update - delete - patch`	string
rbac.roles.openclaw-cluster-ops.type (1) `ClusterRole`	string
rbac.roles.openclaw-exec-deploy-llm.rules[].apiGroups[] (1) `- - apps`	string
rbac.roles.openclaw-exec-deploy-llm.rules[].resources[] (1) `- pods/exec - deployments`	string
rbac.roles.openclaw-exec-deploy-llm.rules[].verbs[] (1) `- create - patch - update`	string
rbac.roles.openclaw-exec-deploy-llm.type (1) `Role`	string
rbac.roles.openclaw-exec-deploy.rules[].apiGroups[] (1) `- - apps`	string
rbac.roles.openclaw-exec-deploy.rules[].resources[] (1) `- pods/exec - deployments`	string
rbac.roles.openclaw-exec-deploy.rules[].verbs[] (1) `- create - patch - update`	string
rbac.roles.openclaw-exec-deploy.type (1) `Role`	string
rbac.roles.openclaw-pod-delete-cluster-wide.rules[].apiGroups[] (1) `-`	string
rbac.roles.openclaw-pod-delete-cluster-wide.rules[].resources[] (1) `- pods`	string
rbac.roles.openclaw-pod-delete-cluster-wide.rules[].verbs[] (1) `- delete`	string
rbac.roles.openclaw-pod-delete-cluster-wide.type (1) `ClusterRole`	string
rbac.roles.openclaw-pod-delete.rules[].apiGroups[] (1) `-`	string
rbac.roles.openclaw-pod-delete.rules[].resources[] (1) `- pods`	string
rbac.roles.openclaw-pod-delete.rules[].verbs[] (1) `- delete`	string
rbac.roles.openclaw-pod-delete.type (1) `ClusterRole`	string
rbac.roles.openclaw-pod-manage.rules[].apiGroups[] (1) `-`	string
rbac.roles.openclaw-pod-manage.rules[].resources[] (1) `- pods`	string
rbac.roles.openclaw-pod-manage.rules[].verbs[] (1) `- delete`	string
rbac.roles.openclaw-pod-manage.type (1) `ClusterRole`	string
rbac.roles.openclaw-sandbox-manage.rules[].apiGroups[] (1) `- agents.x-k8s.io`	string
rbac.roles.openclaw-sandbox-manage.rules[].resources[] (1) `- sandboxes`	string
rbac.roles.openclaw-sandbox-manage.rules[].verbs[] (1) `- get - list - watch - create - patch - update - delete`	string
rbac.roles.openclaw-sandbox-manage.type (1) `Role`	string

Key

Types

controllers.openclaw.annotations."reloader.stakater.com/auto" (6)

true

string

controllers.openclaw.containers.app.command[] (5)

- /bin/sh
- -c
- # Start gateway
exec node dist/index.js gateway --bind lan

string

controllers.openclaw.containers.app.env.HOME (5)

/home/node

string

controllers.openclaw.containers.app.env.TZ (5)

${TZ}

string

controllers.openclaw.containers.app.env.OPENCLAW_GATEWAY_PORT (4)

number, string

controllers.openclaw.containers.app.env.PATH (4)

/home/node/.local/bin:/home/node/.local/go/bin:/home/node/.local/homebrew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

string

controllers.openclaw.containers.app.env.TERM (4)

xterm-256color

string

controllers.openclaw.containers.app.env.BROWSER_WS_ENDPOINT (3)

ws://localhost:9222

string

controllers.openclaw.containers.app.env.GOPATH (3)

/home/node/go

string

controllers.openclaw.containers.app.env.HOMEBREW_CELLAR (3)

/home/node/.local/homebrew/Cellar

string

controllers.openclaw.containers.app.env.HOMEBREW_PREFIX (3)

/home/node/.local/homebrew

string

controllers.openclaw.containers.app.env.HOMEBREW_REPOSITORY (3)

/home/node/.local/homebrew

string

controllers.openclaw.containers.app.env.PIP_BREAK_SYSTEM_PACKAGES (3)

string

controllers.openclaw.containers.app.env.DOCKER_CERT_PATH (2)

/certs/client

string

controllers.openclaw.containers.app.env.DOCKER_HOST (2)

tcp://localhost:2376

string

controllers.openclaw.containers.app.env.DOCKER_TLS_VERIFY (2)

string

controllers.openclaw.containers.app.env.OPENCLAW_LOG_LEVEL (2)

debug

string

controllers.openclaw.containers.app.env.MEMINI_API_KEY.valueFrom.secretKeyRef.key (1)

MEMINI_API_KEY

string

controllers.openclaw.containers.app.env.MEMINI_API_KEY.valueFrom.secretKeyRef.name (1)

openclaw-config

string

controllers.openclaw.containers.app.env.OPENAI_API_KEY.valueFrom.secretKeyRef.key (1)

OPENAI_API_KEY

string

controllers.openclaw.containers.app.env.OPENAI_API_KEY.valueFrom.secretKeyRef.name (1)

openclaw-secret

string

controllers.openclaw.containers.app.env.OPENAI_BASE_URL.valueFrom.secretKeyRef.key (1)

OPENAI_BASE_URL

string

controllers.openclaw.containers.app.env.OPENAI_BASE_URL.valueFrom.secretKeyRef.name (1)

openclaw-secret

string

controllers.openclaw.containers.app.env.OPENCLAW_CONFIG_DIR (1)

/home/node/.openclaw

string

controllers.openclaw.containers.app.env.OPENCLAW_DISABLE_BONJOUR (1)

string

controllers.openclaw.containers.app.env.OPENCLAW_WORKSPACE_DIR (1)

/home/node/.openclaw/workspace

string

controllers.openclaw.containers.app.image.repository (5)

ghcr.io/openclaw/openclaw

string

controllers.openclaw.containers.app.image.tag (5)

2026.6.9@sha256:c440a75f5580acb135409068f39ca701a5ca10fb9892cd9473a60ba0669cc0dc

string

controllers.openclaw.containers.app.resources.requests.cpu (5)

100m

string, number

controllers.openclaw.containers.app.resources.requests.memory (5)

2Gi

string

controllers.openclaw.containers.app.resources.limits.memory (4)

16Gi

string

controllers.openclaw.containers.app.resources.limits.cpu (3)

number, string

controllers.openclaw.containers.app.envFrom[].secretRef.name (3)

openclaw

string

controllers.openclaw.containers.app.probes.liveness.enabled (2)

false

boolean

controllers.openclaw.containers.app.probes.liveness.custom (1)

true

boolean

controllers.openclaw.containers.app.probes.liveness.spec.failureThreshold (1)

number

controllers.openclaw.containers.app.probes.liveness.spec.httpGet.path (1)

/health

string

controllers.openclaw.containers.app.probes.liveness.spec.httpGet.port (1)

number

controllers.openclaw.containers.app.probes.liveness.spec.periodSeconds (1)

number

controllers.openclaw.containers.app.probes.liveness.spec.timeoutSeconds (1)

number

controllers.openclaw.containers.app.probes.readiness.enabled (2)

false

boolean

controllers.openclaw.containers.app.probes.readiness.custom (1)

true

boolean

controllers.openclaw.containers.app.probes.readiness.spec.failureThreshold (1)

number

controllers.openclaw.containers.app.probes.readiness.spec.httpGet.path (1)

/health

string

controllers.openclaw.containers.app.probes.readiness.spec.httpGet.port (1)

number

controllers.openclaw.containers.app.probes.readiness.spec.periodSeconds (1)

number

controllers.openclaw.containers.app.probes.readiness.spec.timeoutSeconds (1)

number

controllers.openclaw.containers.app.probes.startup.enabled (2)

false

boolean

controllers.openclaw.containers.app.probes.startup.custom (1)

true

boolean

controllers.openclaw.containers.app.probes.startup.spec.failureThreshold (1)

number

controllers.openclaw.containers.app.probes.startup.spec.httpGet.path (1)

/health

string

controllers.openclaw.containers.app.probes.startup.spec.httpGet.port (1)

number

controllers.openclaw.containers.app.probes.startup.spec.periodSeconds (1)

number

controllers.openclaw.containers.app.probes.startup.spec.timeoutSeconds (1)

number

controllers.openclaw.containers.app.securityContext.allowPrivilegeEscalation (2)

false

boolean

controllers.openclaw.containers.app.securityContext.capabilities.drop[] (2)

- ALL

string

controllers.openclaw.containers.chrome.command[] (2)

- chromium-browser
- --headless=new
- --disable-gpu
- --remote-debugging-address=0.0.0.0
- --remote-debugging-port=9222
- --no-sandbox
- --disable-dev-shm-usage
- --disable-blink-features=AutomationControlled
- --remote-allow-origins=*
- --user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36

string

controllers.openclaw.containers.chrome.env.TZ (2)

${TZ}

string

controllers.openclaw.containers.chrome.image.repository (2)

zenika/alpine-chrome

string

controllers.openclaw.containers.chrome.image.tag (2)

with-node

string

controllers.openclaw.containers.chrome.resources.limits.cpu (2)

1000m

string

controllers.openclaw.containers.chrome.resources.limits.memory (2)

1Gi

string

controllers.openclaw.containers.chrome.resources.requests.cpu (2)

100m

string

controllers.openclaw.containers.chrome.resources.requests.memory (2)

256Mi

string

controllers.openclaw.containers.chrome.securityContext.allowPrivilegeEscalation (1)

false

boolean

controllers.openclaw.containers.chrome.securityContext.capabilities.drop[] (1)

- ALL

string

controllers.openclaw.containers.codeserver.args[] (2)

- --auth
- none
- --user-data-dir
- /home/node/.vscode
- --extensions-dir
- /home/node/.vscode
- --port
- "12321"
- /config

string

controllers.openclaw.containers.codeserver.env.TZ (2)

${TZ}

string

controllers.openclaw.containers.codeserver.image.repository (2)

ghcr.io/coder/code-server

string

controllers.openclaw.containers.codeserver.image.tag (2)

4.125.0@sha256:9a7848dd2627158e3873f88bd8743807a4168e4d580f26ec0cbc132a9d9ee78e

string

controllers.openclaw.containers.codeserver.resources.limits.memory (2)

1Gi

string

controllers.openclaw.containers.codeserver.resources.requests.cpu (2)

10m

string

controllers.openclaw.containers.codeserver.securityContext.allowPrivilegeEscalation (1)

false

boolean

controllers.openclaw.containers.codeserver.securityContext.capabilities.drop[] (1)

- ALL

string

controllers.openclaw.containers.openclaw.env.CONTROL_UI_ORIGIN (1)

https://openclaw.${SECRET_DOMAIN}

string

controllers.openclaw.containers.openclaw.env.HOME (1)

/home/node

string

controllers.openclaw.containers.openclaw.env.OPENCLAW_AUTH_PROFILE_SECRET_DIR (1)

/home/node/.openclaw/.secrets

string

controllers.openclaw.containers.openclaw.env.OPENCLAW_GATEWAY_PORT (1)

number

controllers.openclaw.containers.openclaw.env.PATH (1)

/home/node/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

string

controllers.openclaw.containers.openclaw.env.TZ (1)

${CONFIG_TZ:=Etc/UTC}

string

controllers.openclaw.containers.openclaw.envFrom[].secretRef.name (1)

openclaw-secret

string

controllers.openclaw.containers.openclaw.image.repository (1)

ghcr.io/openclaw/openclaw

string

controllers.openclaw.containers.openclaw.image.tag (1)

2026.6.8@sha256:9f55f0cb32b2925a983f40726440189b8f422ec61ae2a0fb0cf90403cf6d63d7

string

controllers.openclaw.containers.openclaw.probes.liveness.custom (1)

true

boolean

controllers.openclaw.containers.openclaw.probes.liveness.enabled (1)

true

boolean

controllers.openclaw.containers.openclaw.probes.liveness.spec.failureThreshold (1)

number

controllers.openclaw.containers.openclaw.probes.liveness.spec.initialDelaySeconds (1)

number

controllers.openclaw.containers.openclaw.probes.liveness.spec.periodSeconds (1)

number

controllers.openclaw.containers.openclaw.probes.liveness.spec.tcpSocket.port (1)

number

controllers.openclaw.containers.openclaw.probes.liveness.spec.timeoutSeconds (1)

number

controllers.openclaw.containers.openclaw.probes.readiness.custom (1)

true

boolean

controllers.openclaw.containers.openclaw.probes.readiness.enabled (1)

true

boolean

controllers.openclaw.containers.openclaw.probes.readiness.spec.failureThreshold (1)

number

controllers.openclaw.containers.openclaw.probes.readiness.spec.initialDelaySeconds (1)

number

controllers.openclaw.containers.openclaw.probes.readiness.spec.periodSeconds (1)

number

controllers.openclaw.containers.openclaw.probes.readiness.spec.tcpSocket.port (1)

number

controllers.openclaw.containers.openclaw.probes.readiness.spec.timeoutSeconds (1)

number

controllers.openclaw.containers.openclaw.resources.limits.cpu (1)

string

controllers.openclaw.containers.openclaw.resources.limits.memory (1)

2Gi

string

controllers.openclaw.containers.openclaw.resources.requests.cpu (1)

25m

string

controllers.openclaw.containers.openclaw.resources.requests.memory (1)

256Mi

string

controllers.openclaw.containers.openclaw.securityContext.allowPrivilegeEscalation (1)

false

boolean

controllers.openclaw.containers.openclaw.securityContext.capabilities.drop[] (1)

- ALL

string

controllers.openclaw.containers.openclaw.securityContext.readOnlyRootFilesystem (1)

true

boolean

controllers.openclaw.initContainers.install-tools.command[] (3)

- /bin/sh
- -c
- set -e
mkdir -p /home/node/.local/bin /home/node/.local/go

if [ ! -f /home/node/.local/bin/gh ]; then
  cd /tmp
  curl -fsSL https://github.com/cli/cli/releases/download/v2.61.0/gh_2.61.0_linux_amd64.tar.gz -o gh.tar.gz
  tar xzf gh.tar.gz
  cp gh_2.61.0_linux_amd64/bin/gh /home/node/.local/bin/
  rm -rf gh.tar.gz gh_2.61.0_linux_amd64
fi

if [ ! -f /home/node/.local/bin/openclaw ]; then
  ln -s /app/openclaw.mjs /home/node/.local/bin/openclaw
fi

if [ ! -f /home/node/.local/bin/docker ]; then
  cd /tmp
  curl -fsSL https://download.docker.com/linux/static/stable/x86_64/docker-29.4.0.tgz -o docker.tgz
  tar xzf docker.tgz --strip-components=1 -C /home/node/.local/bin/ docker/docker
  rm -f docker.tgz
fi

if [ ! -f /home/node/.local/go/bin/go ]; then
  cd /tmp
  curl -fsSL https://go.dev/dl/go1.23.5.linux-amd64.tar.gz -o go.tar.gz
  tar xzf go.tar.gz
  mv go /home/node/.local/
  rm -rf go.tar.gz
fi

if [ ! -f /home/node/.local/homebrew/bin/brew ]; then
  export HOMEBREW_PREFIX=/home/node/.local/homebrew
  mkdir -p $HOMEBREW_PREFIX
  git clone --depth 1 https://github.com/Homebrew/brew $HOMEBREW_PREFIX
fi

mkdir -p /home/node/.openclaw

if [ ! -d /home/node/.openclaw/plugins/travel-hacking-toolkit ]; then
  mkdir -p /home/node/.openclaw/plugins
  git clone --depth 1 https://github.com/borski/travel-hacking-toolkit \
    /home/node/.openclaw/plugins/travel-hacking-toolkit
else
  cd /home/node/.openclaw/plugins/travel-hacking-toolkit
  git pull --ff-only || true
  cd -
fi

export PATH=/home/node/.local/bin:$PATH

string

controllers.openclaw.initContainers.install-tools.image.repository (3)

ghcr.io/openclaw/openclaw

string

controllers.openclaw.initContainers.install-tools.image.tag (3)

2026.6.9@sha256:c440a75f5580acb135409068f39ca701a5ca10fb9892cd9473a60ba0669cc0dc

string

controllers.openclaw.initContainers.install-tools.securityContext.allowPrivilegeEscalation (1)

false

boolean

controllers.openclaw.initContainers.install-tools.securityContext.capabilities.drop[] (1)

- ALL

string

controllers.openclaw.initContainers.install-tools.securityContext.runAsGroup (1)

number

controllers.openclaw.initContainers.install-tools.securityContext.runAsNonRoot (1)

false

boolean

controllers.openclaw.initContainers.install-tools.securityContext.runAsUser (1)

number

controllers.openclaw.initContainers.daemon.image.repository (2)

docker

string

controllers.openclaw.initContainers.daemon.image.tag (2)

29.6.0-dind@sha256:7bb861a04bb42bda1d237fc2cb539f9823c9b666ecfbfdbd3e534ab74c8cb976

string

controllers.openclaw.initContainers.daemon.probes.liveness.custom (2)

true

boolean

controllers.openclaw.initContainers.daemon.probes.liveness.enabled (2)

true

boolean

controllers.openclaw.initContainers.daemon.probes.liveness.spec.exec.command[] (2)

- docker
- info

string

controllers.openclaw.initContainers.daemon.probes.liveness.spec.failureThreshold (2)

number

controllers.openclaw.initContainers.daemon.probes.liveness.spec.periodSeconds (2)

number

controllers.openclaw.initContainers.daemon.probes.liveness.spec.timeoutSeconds (2)

number

controllers.openclaw.initContainers.daemon.probes.readiness.custom (2)

true

boolean

controllers.openclaw.initContainers.daemon.probes.readiness.enabled (2)

true

boolean

controllers.openclaw.initContainers.daemon.probes.readiness.spec.exec.command[] (2)

- docker
- info

string

controllers.openclaw.initContainers.daemon.probes.readiness.spec.failureThreshold (2)

number

controllers.openclaw.initContainers.daemon.probes.readiness.spec.periodSeconds (2)

number

controllers.openclaw.initContainers.daemon.probes.readiness.spec.timeoutSeconds (2)

number

controllers.openclaw.initContainers.daemon.probes.startup.custom (2)

true

boolean

controllers.openclaw.initContainers.daemon.probes.startup.enabled (2)

true

boolean

controllers.openclaw.initContainers.daemon.probes.startup.spec.exec.command[] (2)

- docker
- info

string

controllers.openclaw.initContainers.daemon.probes.startup.spec.failureThreshold (2)

number

controllers.openclaw.initContainers.daemon.probes.startup.spec.periodSeconds (2)

number

controllers.openclaw.initContainers.daemon.probes.startup.spec.timeoutSeconds (2)

number

controllers.openclaw.initContainers.daemon.restartPolicy (2)

Always

string

controllers.openclaw.initContainers.daemon.securityContext.privileged (2)

true

boolean

controllers.openclaw.initContainers.daemon.securityContext.runAsGroup (2)

number

controllers.openclaw.initContainers.daemon.securityContext.runAsUser (2)

number

controllers.openclaw.initContainers.daemon.securityContext.allowPrivilegeEscalation (1)

true

boolean

controllers.openclaw.initContainers.daemon.securityContext.runAsNonRoot (1)

false

boolean

controllers.openclaw.initContainers.daemon.command[] (1)

- /bin/sh
- -c
- chown 1000:1000 /home/node
for p in \
  /home/node/.cache \
  /home/node/.openclaw/workspace/.venvs \
  /home/node/.openclaw/workspace/.cache \
  /home/node/.openclaw/workspace/.bun \
  /home/node/.openclaw/workspace/.local \
  /home/node/.openclaw/workspace/node_modules; do
  [ -e "$p" ] && chown 1000:1000 "$p" || true
done
for d in dot-local dot-npm dot-cache workspace-bun workspace-venvs workspace-cache workspace-local workspace-node-modules; do
  mkdir -p "/transient-cache/$d"
done
chown -R 1000:1000 /transient-cache
mkdir -p /etc/docker
cat > /etc/docker/daemon.json <<EOF
{
  "registry-mirrors": ["http://${NODE_IP}:29999"]
}
EOF
dockerd-entrypoint.sh &
DOCKERD_PID=$!
until docker info >/dev/null 2>&1; do sleep 1; done
docker pull ghcr.io/solanyn/openclaw-sandbox:5.0.1 || true
wait $DOCKERD_PID

string

controllers.openclaw.initContainers.daemon.env.DOCKER_TLS_CERTDIR (1)

/certs

string

controllers.openclaw.initContainers.daemon.env[].name (1)

DOCKER_TLS_CERTDIR
NODE_IP

string

controllers.openclaw.initContainers.daemon.env[].value (1)

/certs

string

controllers.openclaw.initContainers.daemon.env[].valueFrom.fieldRef.fieldPath (1)

status.hostIP

string

controllers.openclaw.initContainers.init.command[] (2)

- sh
- -c
- set -euo pipefail
mkdir -p /home/node/.openclaw
chmod 700 /home/node/.openclaw
cp /run/config/openclaw.json /home/node/.openclaw/openclaw.json
chown 1000:100 /home/node/.openclaw/openclaw.json
chmod 400 /home/node/.openclaw/openclaw.json

string

controllers.openclaw.initContainers.init.image.repository (2)

docker.io/library/alpine

string

controllers.openclaw.initContainers.init.image.tag (2)

3.24

string

controllers.openclaw.initContainers.init.securityContext.allowPrivilegeEscalation (1)

false

boolean

controllers.openclaw.initContainers.init.securityContext.capabilities.drop[] (1)

- ALL

string

controllers.openclaw.initContainers.init.securityContext.runAsGroup (1)

number

controllers.openclaw.initContainers.init.securityContext.runAsUser (1)

number

controllers.openclaw.initContainers.archive.command[] (1)

- /bin/sh
- -c
- apk add --no-cache rsync su-exec
while true; do
  if [ -d /home/node/.openclaw/agents/main/sessions ]; then
    su-exec 1000:1000 rsync -a /home/node/.openclaw/agents/main/sessions/ /archive/
  fi
  sleep 900
done

string

controllers.openclaw.initContainers.archive.image.repository (1)

alpine

string

controllers.openclaw.initContainers.archive.image.tag (1)

3.23

number

controllers.openclaw.initContainers.archive.resources.requests.cpu (1)

10m

string

controllers.openclaw.initContainers.archive.resources.requests.memory (1)

32Mi

string

controllers.openclaw.initContainers.archive.restartPolicy (1)

Always

string

controllers.openclaw.initContainers.archive.securityContext.runAsGroup (1)

number

controllers.openclaw.initContainers.archive.securityContext.runAsNonRoot (1)

false

boolean

controllers.openclaw.initContainers.archive.securityContext.runAsUser (1)

number

controllers.openclaw.initContainers.fix-perms.command[] (1)

- sh
- -c
- set -euo pipefail
chown 1000:100 /home/node/.openclaw
chmod 700 /home/node/.openclaw

string

controllers.openclaw.initContainers.fix-perms.image.repository (1)

docker.io/library/alpine

string

controllers.openclaw.initContainers.fix-perms.image.tag (1)

3.24

string

controllers.openclaw.initContainers.fix-perms.securityContext.allowPrivilegeEscalation (1)

false

boolean

controllers.openclaw.initContainers.fix-perms.securityContext.capabilities.add[] (1)

- CHOWN
- FOWNER

string

controllers.openclaw.initContainers.fix-perms.securityContext.capabilities.drop[] (1)

- ALL

string

controllers.openclaw.initContainers.fix-perms.securityContext.runAsGroup (1)

number

controllers.openclaw.initContainers.fix-perms.securityContext.runAsUser (1)

number

controllers.openclaw.initContainers.setup.command[] (1)

- sh
- -c
- while [ ! -s "$HOME/.openclaw/openclaw.json" ]; do
  echo 'OpenClaw is not set up yet. Run: kubectl -n ai-sandbox exec -it <pod> -c setup -- openclaw setup';
  sleep 60;
done
# Force an all-interfaces bind via the persisted config. The
# bind mode is read ONLY from openclaw.json (or the --bind flag),
# never from env — OPENCLAW_GATEWAY_BIND is inert in a plain pod
# (confirmed in OpenClaw source v2026.6.8: only the Docker
# setup.sh writes it to config). With no config value the default
# is "auto", which resolves to 0.0.0.0 only when OpenClaw detects
# a container runtime; gVisor isn't detected, so it fell back to
# loopback (127.0.0.1) and was unreachable by Envoy + the kubelet
# probe (CrashLoop). gateway.bind="lan" resolves to 0.0.0.0
# unconditionally. Also allowlist the Control UI browser origin:
# the dashboard opens a WebSocket and the gateway rejects it unless
# the page origin is in gateway.controlUi.allowedOrigins (exact
# origin, no wildcards). Also wire the agent to the in-cluster
# Qwen model (llmkube InferenceService qwen3-6-27b-mtp in the `ai`
# namespace, OpenAI-compatible llama.cpp at :8080/v1 — reachable
# per the egress policy). Registered as provider "local" (mode
# merge keeps the bundled catalogs) and set as the agent's primary
# model, replacing the default external openai/gpt-5.5. The dummy
# apiKey satisfies credential resolution; llama.cpp ignores it (no
# --api-key on the server). Idempotent; runs every start so it
# self-heals if `openclaw setup` rewrites the config.
node -e '
  const fs = require("fs"), f = process.env.HOME + "/.openclaw/openclaw.json";
  const c = JSON.parse(fs.readFileSync(f, "utf8"));
  c.gateway = Object.assign({}, c.gateway, { bind: "lan" });
  c.gateway.controlUi = Object.assign({}, c.gateway.controlUi, { allowedOrigins: [process.env.CONTROL_UI_ORIGIN] });
  c.models = Object.assign({}, c.models, { mode: "merge" });
  c.models.providers = Object.assign({}, c.models.providers, {
    local: {
      baseUrl: "http://qwen3-6-27b-mtp.ai:8080/v1",
      api: "openai-completions",
      apiKey: "sk-local",
      models: [{
        id: "qwen3-6-27b-mtp",
        name: "Qwen3.6 27B MTP (local)",
        reasoning: true,
        input: ["text"],
        cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
        contextWindow: 262144,
        maxTokens: 8192,
        compat: { thinkingFormat: "qwen" }
      }]
    }
  });
  c.agents = Object.assign({}, c.agents);
  c.agents.defaults = Object.assign({}, c.agents.defaults, { model: { primary: "local/qwen3-27b-mtp" } });
  fs.writeFileSync(f, JSON.stringify(c, null, 2));
  console.log("openclaw config: bind=lan, controlUi origin set, agent model=local/qwen3-27b-mtp");
'

string

controllers.openclaw.initContainers.setup.env.CONTROL_UI_ORIGIN (1)

https://openclaw.${SECRET_DOMAIN}

string

controllers.openclaw.initContainers.setup.env.HOME (1)

/home/node

string

controllers.openclaw.initContainers.setup.env.OPENCLAW_AUTH_PROFILE_SECRET_DIR (1)

/home/node/.openclaw/.secrets

string

controllers.openclaw.initContainers.setup.env.OPENCLAW_GATEWAY_PORT (1)

number

controllers.openclaw.initContainers.setup.env.PATH (1)

/home/node/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

string

controllers.openclaw.initContainers.setup.env.TZ (1)

${CONFIG_TZ:=Etc/UTC}

string

controllers.openclaw.initContainers.setup.envFrom[].secretRef.name (1)

openclaw-secret

string

controllers.openclaw.initContainers.setup.image.repository (1)

ghcr.io/openclaw/openclaw

string

controllers.openclaw.initContainers.setup.image.tag (1)

2026.6.8@sha256:9f55f0cb32b2925a983f40726440189b8f422ec61ae2a0fb0cf90403cf6d63d7

string

controllers.openclaw.initContainers.setup.securityContext.allowPrivilegeEscalation (1)

false

boolean

controllers.openclaw.initContainers.setup.securityContext.capabilities.drop[] (1)

- ALL

string

controllers.openclaw.initContainers.setup.securityContext.readOnlyRootFilesystem (1)

true

boolean

controllers.openclaw.pod.nodeSelector."kubernetes.io/hostname" (1)

talos1

string

controllers.openclaw.replicas (1)

number

controllers.openclaw.strategy (1)

Recreate

string

controllers.openclaw.type (1)

deployment

string

controllers.codeserver.containers.codeserver.args[] (1)

- --auth
- none
- --user-data-dir
- /home/node/.vscode
- --extensions-dir
- /home/node/.vscode
- --port
- "12321"
- /config

string

controllers.codeserver.containers.codeserver.env.TZ (1)

Pacific/Auckland

string

controllers.codeserver.containers.codeserver.image.repository (1)

ghcr.io/coder/code-server

string

controllers.codeserver.containers.codeserver.image.tag (1)

4.125.0@sha256:9a7848dd2627158e3873f88bd8743807a4168e4d580f26ec0cbc132a9d9ee78e

string

controllers.codeserver.containers.codeserver.resources.limits.memory (1)

1Gi

string

controllers.codeserver.containers.codeserver.resources.requests.cpu (1)

10m

string

defaultPodOptions.securityContext.fsGroup (6)

number

defaultPodOptions.securityContext.runAsUser (6)

number

defaultPodOptions.securityContext.fsGroupChangePolicy (5)

OnRootMismatch

string

defaultPodOptions.securityContext.runAsGroup (5)

number

defaultPodOptions.securityContext.seccompProfile.type (3)

RuntimeDefault

string

defaultPodOptions.securityContext.runAsNonRoot (2)

true

boolean

defaultPodOptions.automountServiceAccountToken (4)

true

boolean

defaultPodOptions.shareProcessNamespace (2)

true

boolean

defaultPodOptions.dnsConfig.options[].name (1)

ndots

string

defaultPodOptions.dnsConfig.options[].value (1)

string

defaultPodOptions.runtimeClassName (1)

gvisor

string

persistence.config.existingClaim (5)

{{ .Release.Name }}

string

persistence.config.globalMounts[].path (3)

/home/node

string

persistence.config.advancedMounts.openclaw.app[].path (1)

/home/node

string

persistence.config.advancedMounts.openclaw.archive[].path (1)

/home/node

string

persistence.config.advancedMounts.openclaw.daemon[].path (1)

/home/node

string

persistence.config.advancedMounts.openclaw.init[].path (1)

/run/config/openclaw.json

string

persistence.config.advancedMounts.openclaw.init[].subPath (1)

openclaw.json

string

persistence.config.advancedMounts.openclaw.install-tools[].path (1)

/home/node

string

persistence.config.advancedMounts.openclaw.openclaw[].path (1)

/home/node

string

persistence.config.advancedMounts.openclaw.setup[].path (1)

/home/node

string

persistence.config.defaultMode (1)

number

persistence.config.name (1)

openclaw-config

string

persistence.config.type (1)

secret

string

persistence.data.globalMounts[].path (3)

/data

string

persistence.data.path (2)

/mnt/delta/miso

string

persistence.data.server (2)

voyager.internal

string

persistence.data.type (2)

nfs

string

persistence.data.existingClaim (1)

openclaw

string

persistence.certs.globalMounts[].path (2)

/certs

string

persistence.certs.type (2)

emptyDir

string

persistence.tmp.globalMounts[].path (2)

/tmp

string

persistence.tmp.type (2)

emptyDir

string

persistence.tmp.medium (1)

Memory

string

persistence.cache.advancedMounts.openclaw.openclaw[].path (1)

/home/node/.cache

string

persistence.cache.sizeLimit (1)

20Gi

string

persistence.cache.type (1)

emptyDir

string

persistence.configmap.defaultMode (1)

number

persistence.configmap.globalMounts[].path (1)

/tmp/openclaw.json

string

persistence.configmap.globalMounts[].subPath (1)

openclaw.json

string

persistence.configmap.name (1)

{{ .Release.Name }}-config

string

persistence.configmap.type (1)

configMap

string

persistence.docker-data.accessMode (1)

ReadWriteOnce

string

persistence.docker-data.advancedMounts.openclaw.daemon[].path (1)

/var/lib/docker

string

persistence.docker-data.size (1)

10Gi

string

persistence.docker-data.storageClass (1)

openebs-hostpath

string

persistence.docker-data.suffix (1)

docker-data

string

persistence.docker-data.type (1)

persistentVolumeClaim

string

persistence.downloads.globalMounts[].path (1)

/downloads

string

persistence.downloads.globalMounts[].subPath (1)

metube

string

persistence.downloads.path (1)

/mnt/akademiya/data

string

persistence.downloads.server (1)

voyager.internal

string

persistence.downloads.type (1)

nfs

string

persistence.hawow.globalMounts[].path (1)

/home/node/hawow

string

persistence.hawow.path (1)

/mnt/world/hawow

string

persistence.hawow.server (1)

nas.internal

string

persistence.hawow.type (1)

nfs

string

persistence.home.accessMode (1)

ReadWriteOnce

string

persistence.home.forceRename (1)

openclaw-home

string

persistence.home.globalMounts[].path (1)

/home/node

string

persistence.home.size (1)

20Gi

string

persistence.home.storageClass (1)

miroir-replicated

string

persistence.images.globalMounts[].path (1)

/home/node/.openclaw/workspace/images

string

persistence.images.path (1)

/mnt/daena/comfyui/output

string

persistence.images.server (1)

voyager.internal

string

persistence.images.type (1)

nfs

string

persistence.next-cache.globalMounts[].path (1)

/app/.next/cache

string

persistence.next-cache.type (1)

emptyDir

string

persistence.openclaw-archive.advancedMounts.openclaw.archive[].path (1)

/archive

string

persistence.openclaw-archive.path (1)

/mnt/world/openclaw

string

persistence.openclaw-archive.server (1)

nas.internal

string

persistence.openclaw-archive.type (1)

nfs

string

persistence.openclaw-config.advancedMounts.openclaw.install-tools[].path (1)

/tmp/openclaw-config

string

persistence.openclaw-config.advancedMounts.openclaw.install-tools[].readOnly (1)

true

boolean

persistence.openclaw-config.name (1)

openclaw-config

string

persistence.openclaw-config.type (1)

secret

string

persistence.openclaw-home.type (1)

emptyDir

string

persistence.openclaw-json.defaultMode (1)

number

persistence.openclaw-json.globalMounts[].path (1)

/home/node/.openclaw/openclaw.json

string

persistence.openclaw-json.globalMounts[].subPath (1)

openclaw.json

string

persistence.openclaw-json.name (1)

openclaw-config

string

persistence.openclaw-json.type (1)

secret

string

persistence.ssh-secrets.advancedMounts.openclaw.install-tools[].path (1)

/tmp/ssh-secrets

string

persistence.ssh-secrets.advancedMounts.openclaw.install-tools[].readOnly (1)

true

boolean

persistence.ssh-secrets.items[].key (1)

ssh_private_key
ssh_config
fj_config

string

persistence.ssh-secrets.items[].path (1)

ssh_private_key
ssh_config
fj_config

string

persistence.ssh-secrets.name (1)

openclaw

string

persistence.ssh-secrets.type (1)

secret

string

persistence.transient-cache.accessMode (1)

ReadWriteOnce

string

persistence.transient-cache.advancedMounts.openclaw.app[].path (1)

/home/node/.local
/home/node/.npm
/home/node/.cache
/home/node/.openclaw/workspace/.bun
/home/node/.openclaw/workspace/.venvs
/home/node/.openclaw/workspace/.cache
/home/node/.openclaw/workspace/.local
/home/node/.openclaw/workspace/node_modules

string

persistence.transient-cache.advancedMounts.openclaw.app[].subPath (1)

dot-local
dot-npm
dot-cache
workspace-bun
workspace-venvs
workspace-cache
workspace-local
workspace-node-modules

string

persistence.transient-cache.advancedMounts.openclaw.daemon[].path (1)

/transient-cache

string

persistence.transient-cache.advancedMounts.openclaw.install-tools[].path (1)

/home/node/.local
/home/node/.npm
/home/node/.cache
/home/node/.openclaw/workspace/.bun
/home/node/.openclaw/workspace/.venvs
/home/node/.openclaw/workspace/.cache
/home/node/.openclaw/workspace/.local
/home/node/.openclaw/workspace/node_modules

string

persistence.transient-cache.advancedMounts.openclaw.install-tools[].subPath (1)

dot-local
dot-npm
dot-cache
workspace-bun
workspace-venvs
workspace-cache
workspace-local
workspace-node-modules

string

persistence.transient-cache.size (1)

15Gi

string

persistence.transient-cache.storageClass (1)

openebs-hostpath

string

persistence.transient-cache.suffix (1)

transient-cache

string

persistence.transient-cache.type (1)

persistentVolumeClaim

string

route.app.hostnames[] (5)

- openclaw.erwanleboucher.dev

string

route.app.parentRefs[].name (5)

envoy-internal

string

route.app.parentRefs[].namespace (5)

network

string

route.app.parentRefs[].sectionName (1)

https

string

route.app.rules[].backendRefs[].port (4)

number, string

route.app.rules[].backendRefs[].identifier (3)

app

string

route.app.rules[].backendRefs[].name (1)

{{ .Release.Name }}

string

route.codeserver.hostnames[] (3)

- openclaw-code.erwanleboucher.dev

string

route.codeserver.parentRefs[].name (3)

envoy-internal

string

route.codeserver.parentRefs[].namespace (3)

network

string

route.codeserver.parentRefs[].sectionName (1)

https

string

route.codeserver.rules[].backendRefs[].port (3)

number, string

route.codeserver.rules[].backendRefs[].identifier (2)

app

string

route.codeserver.rules[].backendRefs[].name (1)

{{ .Release.Name }}

string

route.internal.enabled (1)

true

boolean

route.internal.hostnames[] (1)

- openclaw.${SECRET_DOMAIN}

string

route.internal.parentRefs[].name (1)

envoy-internal

string

route.internal.parentRefs[].namespace (1)

network

string

route.internal.parentRefs[].sectionName (1)

https

string

route.internal.rules[].backendRefs[].identifier (1)

openclaw

string

route.internal.rules[].backendRefs[].port (1)

number

service.app.ports.http.port (5)

number

service.app.ports.codeserver.port (2)

number

service.app.controller (2)

openclaw

string

service.app.annotations."lbipam.cilium.io/ips" (1)

10.69.10.41

string

service.app.externalTrafficPolicy (1)

Cluster

string

service.app.ipFamilies[] (1)

- IPv4

string

service.app.type (1)

LoadBalancer

string

service.codeserver.controller (1)

codeserver

string

service.codeserver.ports.http.port (1)

number

service.openclaw.controller (1)

openclaw

string

service.openclaw.ports.http.port (1)

number

service.openclaw.primary (1)

true

boolean

rbac.bindings.openclaw-read-all.roleRef.identifier (3)

openclaw-read-all

string

rbac.bindings.openclaw-read-all.subjects[].identifier (3)

openclaw

string

rbac.bindings.openclaw-read-all.subjects[].serviceAccount (3)

openclaw

string

rbac.bindings.openclaw-read-all.type (3)

ClusterRoleBinding

string

rbac.bindings.openclaw-write-restricted.roleRef.identifier (2)

openclaw-write-restricted

string

rbac.bindings.openclaw-write-restricted.subjects[].identifier (2)

openclaw

string

rbac.bindings.openclaw-write-restricted.subjects[].serviceAccount (2)

openclaw

string

rbac.bindings.openclaw-write-restricted.type (2)

RoleBinding

string

rbac.bindings.openclaw-cluster-ops.roleRef.identifier (1)

openclaw-cluster-ops

string

rbac.bindings.openclaw-cluster-ops.subjects[].identifier (1)

openclaw

string

rbac.bindings.openclaw-cluster-ops.subjects[].serviceAccount (1)

openclaw

string

rbac.bindings.openclaw-cluster-ops.type (1)

ClusterRoleBinding

string

rbac.bindings.openclaw-exec-deploy-llm.roleRef.identifier (1)

openclaw-exec-deploy-llm

string

rbac.bindings.openclaw-exec-deploy-llm.subjects[].identifier (1)

openclaw

string

rbac.bindings.openclaw-exec-deploy-llm.subjects[].namespace (1)

llm

string

rbac.bindings.openclaw-exec-deploy-llm.subjects[].serviceAccount (1)

openclaw

string

rbac.bindings.openclaw-exec-deploy-llm.type (1)

RoleBinding

string

rbac.bindings.openclaw-exec-deploy.roleRef.identifier (1)

openclaw-exec-deploy

string

rbac.bindings.openclaw-exec-deploy.subjects[].identifier (1)

openclaw

string

rbac.bindings.openclaw-exec-deploy.subjects[].namespace (1)

openclaw

string

rbac.bindings.openclaw-exec-deploy.subjects[].serviceAccount (1)

openclaw

string

rbac.bindings.openclaw-exec-deploy.type (1)

RoleBinding

string

rbac.bindings.openclaw-pod-delete-cluster-wide.roleRef.identifier (1)

openclaw-pod-delete-cluster-wide

string

rbac.bindings.openclaw-pod-delete-cluster-wide.subjects[].identifier (1)

openclaw

string

rbac.bindings.openclaw-pod-delete-cluster-wide.subjects[].serviceAccount (1)

openclaw

string

rbac.bindings.openclaw-pod-delete-cluster-wide.type (1)

ClusterRoleBinding

string

rbac.bindings.openclaw-pod-delete.roleRef.identifier (1)

openclaw-pod-delete

string

rbac.bindings.openclaw-pod-delete.subjects[].identifier (1)

openclaw

string

rbac.bindings.openclaw-pod-delete.subjects[].serviceAccount (1)

openclaw

string

rbac.bindings.openclaw-pod-delete.type (1)

ClusterRoleBinding

string

rbac.bindings.openclaw-pod-manage.roleRef.identifier (1)

openclaw-pod-manage

string

rbac.bindings.openclaw-pod-manage.subjects[].identifier (1)

openclaw

string

rbac.bindings.openclaw-pod-manage.subjects[].serviceAccount (1)

openclaw

string

rbac.bindings.openclaw-pod-manage.type (1)

ClusterRoleBinding

string

rbac.bindings.openclaw-sandbox-manage.roleRef.identifier (1)

openclaw-sandbox-manage

string

rbac.bindings.openclaw-sandbox-manage.subjects[].identifier (1)

openclaw

string

rbac.bindings.openclaw-sandbox-manage.subjects[].serviceAccount (1)

openclaw

string

rbac.bindings.openclaw-sandbox-manage.type (1)

RoleBinding

string

rbac.roles.openclaw-read-all.rules[].apiGroups[] (3)

- 
- apps
- batch
- networking.k8s.io
- storage.k8s.io
- helm.toolkit.fluxcd.io
- kustomize.toolkit.fluxcd.io
- source.toolkit.fluxcd.io
- external-secrets.io

string

rbac.roles.openclaw-read-all.rules[].resources[] (3)

- pods
- pods/log
- nodes
- services
- namespaces
- configmaps
- persistentvolumes
- persistentvolumeclaims
- endpoints
- resourcequotas
- limitranges
- serviceaccounts
- events
- deployments
- daemonsets
- statefulsets
- replicasets
- controllerrevisions
- jobs
- cronjobs
- ingresses
- ingressclasses
- networkpolicies
- storageclasses
- csinodes
- csidrivers
- volumeattachments
- helmreleases
- kustomizations
- gitrepositories
- helmrepositories
- ocirepositories
- buckets
- helmcharts
- externalsecrets
- secretstores
- clustersecretstores

string

rbac.roles.openclaw-read-all.rules[].verbs[] (3)

- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch

string

rbac.roles.openclaw-read-all.type (3)

ClusterRole

string

rbac.roles.openclaw-write-restricted.rules[].apiGroups[] (2)

- apps
- 
- gateway.networking.k8s.io

string

rbac.roles.openclaw-write-restricted.rules[].resources[] (2)

- deployments
- services
- configmaps
- httproutes

string

rbac.roles.openclaw-write-restricted.rules[].verbs[] (2)

- get
- list
- watch
- create
- patch
- update
- delete
- get
- list
- watch
- create
- patch
- update
- delete
- get
- list
- watch
- create
- patch
- update
- delete

string

rbac.roles.openclaw-write-restricted.type (2)

Role

string

rbac.roles.openclaw-cluster-ops.rules[].apiGroups[] (1)

- helm.toolkit.fluxcd.io
-

string

rbac.roles.openclaw-cluster-ops.rules[].resources[] (1)

- helmreleases
- persistentvolumes

string

rbac.roles.openclaw-cluster-ops.rules[].verbs[] (1)

- patch
- update
- delete
- patch

string

rbac.roles.openclaw-cluster-ops.type (1)

ClusterRole

string

rbac.roles.openclaw-exec-deploy-llm.rules[].apiGroups[] (1)

- 
- apps

string

rbac.roles.openclaw-exec-deploy-llm.rules[].resources[] (1)

- pods/exec
- deployments

string

rbac.roles.openclaw-exec-deploy-llm.rules[].verbs[] (1)

- create
- patch
- update

string

rbac.roles.openclaw-exec-deploy-llm.type (1)

Role

string

rbac.roles.openclaw-exec-deploy.rules[].apiGroups[] (1)

- 
- apps

string

rbac.roles.openclaw-exec-deploy.rules[].resources[] (1)

- pods/exec
- deployments

string

rbac.roles.openclaw-exec-deploy.rules[].verbs[] (1)

- create
- patch
- update

string

rbac.roles.openclaw-exec-deploy.type (1)

Role

string

rbac.roles.openclaw-pod-delete-cluster-wide.rules[].apiGroups[] (1)

string

rbac.roles.openclaw-pod-delete-cluster-wide.rules[].resources[] (1)

- pods

string

rbac.roles.openclaw-pod-delete-cluster-wide.rules[].verbs[] (1)

- delete

string

rbac.roles.openclaw-pod-delete-cluster-wide.type (1)

ClusterRole

string

rbac.roles.openclaw-pod-delete.rules[].apiGroups[] (1)

string

rbac.roles.openclaw-pod-delete.rules[].resources[] (1)

- pods

string

rbac.roles.openclaw-pod-delete.rules[].verbs[] (1)

- delete

string

rbac.roles.openclaw-pod-delete.type (1)

ClusterRole

string

rbac.roles.openclaw-pod-manage.rules[].apiGroups[] (1)

string

rbac.roles.openclaw-pod-manage.rules[].resources[] (1)

- pods

string

rbac.roles.openclaw-pod-manage.rules[].verbs[] (1)

- delete

string

rbac.roles.openclaw-pod-manage.type (1)

ClusterRole

string

rbac.roles.openclaw-sandbox-manage.rules[].apiGroups[] (1)

- agents.x-k8s.io

string

rbac.roles.openclaw-sandbox-manage.rules[].resources[] (1)

- sandboxes

string

rbac.roles.openclaw-sandbox-manage.rules[].verbs[] (1)

- get
- list
- watch
- create
- patch
- update
- delete

string

rbac.roles.openclaw-sandbox-manage.type (1)

Role

string

openclaw helm

Install

Examples

Top Repositories (1 out of 6)

Values