Add openclaw/deployments.yaml
This commit is contained in:
parent
74c39b7adc
commit
657ec5f9f8
209
openclaw/deployments.yaml
Normal file
209
openclaw/deployments.yaml
Normal file
@ -0,0 +1,209 @@
|
|||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
deployment.kubernetes.io/revision: '35'
|
||||||
|
meta.helm.sh/release-name: openclaw
|
||||||
|
meta.helm.sh/release-namespace: openclaw
|
||||||
|
labels:
|
||||||
|
app.kubernetes.io/instance: openclaw
|
||||||
|
app.kubernetes.io/managed-by: Helm
|
||||||
|
app.kubernetes.io/name: openclaw
|
||||||
|
app.kubernetes.io/version: 2026.3.2
|
||||||
|
helm.sh/chart: openclaw-0.1.13
|
||||||
|
name: openclaw
|
||||||
|
namespace: openclaw
|
||||||
|
spec:
|
||||||
|
progressDeadlineSeconds: 600
|
||||||
|
replicas: 1
|
||||||
|
revisionHistoryLimit: 5
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app.kubernetes.io/instance: openclaw
|
||||||
|
app.kubernetes.io/name: openclaw
|
||||||
|
strategy:
|
||||||
|
type: Recreate
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
checksum/config: e1ce3c573c77508ddc719f952751bd9f0b6c3a40ec31cc09ae750af4a5772ed2
|
||||||
|
checksum/secret: 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
|
||||||
|
kubectl.kubernetes.io/restartedAt: '2026-03-26T10:35:24.412Z'
|
||||||
|
labels:
|
||||||
|
app.kubernetes.io/instance: openclaw
|
||||||
|
app.kubernetes.io/managed-by: Helm
|
||||||
|
app.kubernetes.io/name: openclaw
|
||||||
|
app.kubernetes.io/version: 2026.3.2
|
||||||
|
helm.sh/chart: openclaw-0.1.13
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- command:
|
||||||
|
- node
|
||||||
|
- dist/index.js
|
||||||
|
- gateway
|
||||||
|
- --bind
|
||||||
|
- lan
|
||||||
|
- --port
|
||||||
|
- '18789'
|
||||||
|
env:
|
||||||
|
- name: HOME
|
||||||
|
value: /home/openclaw
|
||||||
|
- name: TZ
|
||||||
|
value: UTC
|
||||||
|
envFrom:
|
||||||
|
- secretRef:
|
||||||
|
name: openclaw-secrets
|
||||||
|
image: ghcr.io/openclaw/openclaw:2026.3.2
|
||||||
|
imagePullPolicy: IfNotPresent
|
||||||
|
livenessProbe:
|
||||||
|
failureThreshold: 3
|
||||||
|
initialDelaySeconds: 30
|
||||||
|
periodSeconds: 10
|
||||||
|
successThreshold: 1
|
||||||
|
tcpSocket:
|
||||||
|
port: gateway
|
||||||
|
timeoutSeconds: 5
|
||||||
|
name: openclaw
|
||||||
|
ports:
|
||||||
|
- containerPort: 18789
|
||||||
|
name: gateway
|
||||||
|
protocol: TCP
|
||||||
|
- containerPort: 18793
|
||||||
|
name: canvas
|
||||||
|
protocol: TCP
|
||||||
|
readinessProbe:
|
||||||
|
failureThreshold: 3
|
||||||
|
initialDelaySeconds: 10
|
||||||
|
periodSeconds: 10
|
||||||
|
successThreshold: 1
|
||||||
|
tcpSocket:
|
||||||
|
port: gateway
|
||||||
|
timeoutSeconds: 5
|
||||||
|
resources:
|
||||||
|
limits:
|
||||||
|
cpu: 800m
|
||||||
|
memory: 2Gi
|
||||||
|
requests:
|
||||||
|
cpu: 300m
|
||||||
|
memory: 512Mi
|
||||||
|
securityContext:
|
||||||
|
allowPrivilegeEscalation: false
|
||||||
|
capabilities:
|
||||||
|
drop:
|
||||||
|
- ALL
|
||||||
|
readOnlyRootFilesystem: false
|
||||||
|
runAsGroup: 1000
|
||||||
|
runAsNonRoot: true
|
||||||
|
runAsUser: 1000
|
||||||
|
seccompProfile:
|
||||||
|
type: RuntimeDefault
|
||||||
|
startupProbe:
|
||||||
|
failureThreshold: 72
|
||||||
|
initialDelaySeconds: 5
|
||||||
|
periodSeconds: 5
|
||||||
|
successThreshold: 1
|
||||||
|
tcpSocket:
|
||||||
|
port: gateway
|
||||||
|
timeoutSeconds: 5
|
||||||
|
terminationMessagePath: /dev/termination-log
|
||||||
|
terminationMessagePolicy: File
|
||||||
|
volumeMounts:
|
||||||
|
- mountPath: /home/openclaw/.openclaw
|
||||||
|
name: data
|
||||||
|
- command:
|
||||||
|
- chromium-browser
|
||||||
|
- --headless
|
||||||
|
- --disable-gpu
|
||||||
|
- --disable-software-rasterizer
|
||||||
|
- --disable-dev-shm-usage
|
||||||
|
- --no-sandbox
|
||||||
|
- --remote-debugging-address=0.0.0.0
|
||||||
|
- --remote-debugging-port=9222
|
||||||
|
image: zenika/alpine-chrome:124
|
||||||
|
imagePullPolicy: IfNotPresent
|
||||||
|
name: chromium
|
||||||
|
ports:
|
||||||
|
- containerPort: 9222
|
||||||
|
name: cdp
|
||||||
|
protocol: TCP
|
||||||
|
resources:
|
||||||
|
limits:
|
||||||
|
cpu: '1'
|
||||||
|
memory: 1Gi
|
||||||
|
requests:
|
||||||
|
cpu: 100m
|
||||||
|
memory: 256Mi
|
||||||
|
securityContext:
|
||||||
|
allowPrivilegeEscalation: false
|
||||||
|
capabilities:
|
||||||
|
drop:
|
||||||
|
- ALL
|
||||||
|
runAsGroup: 1000
|
||||||
|
runAsNonRoot: true
|
||||||
|
runAsUser: 1000
|
||||||
|
seccompProfile:
|
||||||
|
type: RuntimeDefault
|
||||||
|
terminationMessagePath: /dev/termination-log
|
||||||
|
terminationMessagePolicy: File
|
||||||
|
volumeMounts:
|
||||||
|
- mountPath: /dev/shm
|
||||||
|
name: dshm
|
||||||
|
dnsPolicy: ClusterFirst
|
||||||
|
initContainers:
|
||||||
|
- command:
|
||||||
|
- /bin/sh
|
||||||
|
- -c
|
||||||
|
- "mkdir -p /home/openclaw/.openclaw\nif [ \"overwrite\" = \"merge\" ] &&\
|
||||||
|
\ [ -f /home/openclaw/.openclaw/openclaw.json ]; then\n # Merge: existing\
|
||||||
|
\ config as base, helm config overwrites\n node -e \"\n const fs = require('fs');\n\
|
||||||
|
\ const existing = JSON.parse(fs.readFileSync('/home/openclaw/.openclaw/openclaw.json',\
|
||||||
|
\ 'utf8'));\n const helm = JSON.parse(fs.readFileSync('/config/openclaw.json',\
|
||||||
|
\ 'utf8'));\n const deepMerge = (target, source) => {\n for (const\
|
||||||
|
\ key of Object.keys(source)) {\n if (source[key] && typeof source[key]\
|
||||||
|
\ === 'object' && !Array.isArray(source[key])) {\n target[key]\
|
||||||
|
\ = target[key] || {};\n deepMerge(target[key], source[key]);\n\
|
||||||
|
\ } else {\n target[key] = source[key];\n }\n \
|
||||||
|
\ }\n return target;\n };\n const merged = deepMerge(existing,\
|
||||||
|
\ helm);\n fs.writeFileSync('/home/openclaw/.openclaw/openclaw.json',\
|
||||||
|
\ JSON.stringify(merged, null, 2));\n \"\nelse\n cp /config/openclaw.json\
|
||||||
|
\ /home/openclaw/.openclaw/openclaw.json\nfi\nchown -R 1000:1000 /home/openclaw/.openclaw\n"
|
||||||
|
image: ghcr.io/openclaw/openclaw:2026.3.2
|
||||||
|
imagePullPolicy: IfNotPresent
|
||||||
|
name: init-config
|
||||||
|
resources: {}
|
||||||
|
securityContext:
|
||||||
|
runAsNonRoot: false
|
||||||
|
runAsUser: 0
|
||||||
|
terminationMessagePath: /dev/termination-log
|
||||||
|
terminationMessagePolicy: File
|
||||||
|
volumeMounts:
|
||||||
|
- mountPath: /home/openclaw/.openclaw
|
||||||
|
name: data
|
||||||
|
- mountPath: /config
|
||||||
|
name: config
|
||||||
|
readOnly: true
|
||||||
|
restartPolicy: Always
|
||||||
|
schedulerName: default-scheduler
|
||||||
|
securityContext:
|
||||||
|
fsGroup: 1000
|
||||||
|
runAsGroup: 1000
|
||||||
|
runAsNonRoot: true
|
||||||
|
runAsUser: 1000
|
||||||
|
seccompProfile:
|
||||||
|
type: RuntimeDefault
|
||||||
|
serviceAccount: openclaw
|
||||||
|
serviceAccountName: openclaw
|
||||||
|
terminationGracePeriodSeconds: 30
|
||||||
|
volumes:
|
||||||
|
- configMap:
|
||||||
|
defaultMode: 420
|
||||||
|
name: openclaw
|
||||||
|
name: config
|
||||||
|
- name: data
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: openclaw
|
||||||
|
- emptyDir:
|
||||||
|
medium: Memory
|
||||||
|
sizeLimit: 1Gi
|
||||||
|
name: dshm
|
||||||
|
|
||||||
Loading…
x
Reference in New Issue
Block a user