mirror of
https://github.com/vhaudiquet/homeprod.git
synced 2026-09-22 00:43:32 +00:00
41 lines
1.1 KiB
YAML
41 lines
1.1 KiB
YAML
apiVersion: openclaw.rocks/v1alpha1
|
|
kind: OpenClawInstance
|
|
metadata:
|
|
name: openclaw
|
|
spec:
|
|
# Provider API keys come from the SOPS-encrypted Secret below.
|
|
# The gateway token is auto-generated by the operator (no mDNS pairing in k8s).
|
|
envFrom:
|
|
- secretRef:
|
|
name: openclaw-api-keys
|
|
storage:
|
|
persistence:
|
|
enabled: true
|
|
size: 10Gi
|
|
storageClass: longhorn
|
|
networking:
|
|
ingress:
|
|
enabled: true
|
|
className: traefik
|
|
hosts:
|
|
- host: openclaw.lan
|
|
security:
|
|
# Operator defaults forceHTTPS=true, which pins the Traefik router to
|
|
# the websecure entrypoint only (404 on plain HTTP). Disabled since
|
|
# this is a LAN-internal, token-auth-only endpoint without TLS.
|
|
forceHTTPS: false
|
|
annotations:
|
|
external-dns.alpha.kubernetes.io/enabled: "true"
|
|
# Operator's default-deny NetworkPolicy only allows same-namespace ingress;
|
|
# allow Traefik so the Ingress route can reach the gateway proxy.
|
|
networkPolicy:
|
|
allowedIngressNamespaces:
|
|
- traefik
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: "2"
|
|
memory: 4Gi
|