1 line
4.2 KiB
JSON
1 line
4.2 KiB
JSON
{"repo": "bemade/helm-charts", "files": {"openclaw/values.yaml": {"dae07a57f0d01c183e76bbc93763a092990051d9": {"t": 1785674401.5461795, "n": 3950, "h": "81c5ccfd94bff595", "c": "# OpenClaw Helm Chart values\n# https://github.com/openclaw/openclaw\n\n# Override chart name\nnameOverride: \"\"\nfullnameOverride: \"\"\n\nopenclaw:\n # Home directory for OpenClaw (used for PVC mount and env vars)\n # Default: /home/node (matches Dockerfile USER node)\n homeDir: /home/node\n\n # Docker image configuration\n image:\n repository: ghcr.io/openclaw/openclaw\n tag: latest\n pullPolicy: IfNotPresent\n\n # Gateway port (default: 18789)\n port: 18789\n\n # Hostname for ingress\n hostname: \"openclaw.example.com\"\n\n # Command and args (override Docker entrypoint)\n # Leave empty to use the official entrypoint: node /app/dist/index.js gateway run\n command: []\n args: []\n\n # Ingress configuration\n ingress:\n enabled: true\n clusterIssuer: \"letsencrypt-dns\"\n hsts:\n enabled: true\n maxAge: 15552000\n includeSubdomains: true\n preload: true\n # ForwardAuth middleware for SSO (Keycloak, Authelia, oauth2-proxy, etc.)\n # Delegates authentication to an external identity provider via Traefik ForwardAuth.\n # Use with gateway.auth.mode: \"trusted-proxy\" in openclaw.config.\n forwardAuth:\n enabled: false\n # URL of the auth endpoint (e.g. oauth2-proxy, Keycloak gatekeeper)\n address: \"\"\n trustForwardHeader: true\n # Headers forwarded from the auth response to the upstream\n authResponseHeaders:\n - X-Forwarded-User\n - X-Auth-Request-User\n - X-Auth-Request-Email\n\n # Resource requests and limits\n resources:\n requests:\n cpu: 500m\n memory: 512Mi\n limits:\n cpu: 2\n memory: 2Gi\n\n # Persistence for OpenClaw data (~/.openclaw)\n persistence:\n enabled: true\n storageClass: \"\"\n size: 5Gi\n\n # OpenClaw plugins (installed via ConfigMap + initContainer)\n plugins:\n odooDiscuss:\n enabled: false\n\n # OpenClaw configuration (openclaw.json)\n # Reference: https://docs.openclaw.ai/gateway/configuration\n config:\n gateway:\n mode: local\n agents:\n defaults:\n model:\n primary: \"anthropic/claude-sonnet-4-20250514\"\n\n # Health check probes (httpGet)\n probes:\n liveness:\n path: /health\n initialDelaySeconds: 60\n periodSeconds: 30\n readiness:\n path: /health\n initialDelaySeconds: 15\n periodSeconds: 10\n\n # Extra pod-level security context (merged with hardcoded fsGroup/seccomp)\n podSecurityContext: {}\n\n # Container-level security context (configurable)\n # For :slim images, you can enable readOnlyRootFilesystem: true\n securityContext:\n runAsNonRoot: true\n runAsUser: 1000\n runAsGroup: 1000\n allowPrivilegeEscalation: false\n capabilities:\n drop:\n - ALL\n\n # Service account\n serviceAccount:\n create: false\n annotations: {}\n\n # Pod annotations\n podAnnotations: {}\n\n # Node scheduling\n nodeSelector: {}\n tolerations: []\n\n # API keys and secrets (stored in Kubernetes Secret)\n # Set these via --set or external secret management\n secrets:\n # Anthropic API key → ANTHROPIC_API_KEY\n anthropicApiKey: \"\"\n # OpenAI API key → OPENAI_API_KEY\n openaiApiKey: \"\"\n # Gateway token → OPENCLAW_GATEWAY_TOKEN\n gatewayToken: \"\"\n # Extra secrets (generic key/value → env vars via K8s Secret)\n # Any env var OpenClaw supports can be added here.\n # Common examples:\n # TELEGRAM_BOT_TOKEN: \"your-telegram-bot-token\"\n # OPENROUTER_API_KEY: \"sk-or-...\"\n # GROQ_API_KEY: \"gsk_...\"\n # GOOGLE_API_KEY: \"AIza...\"\n # OPENCLAW_GATEWAY_PASSWORD: \"your-password\"\n extra: {}\n\n # Extra plain (non-secret) environment variables\n extraEnv: {}\n\n # Backup CronJob - SQLite online backup + config/session snapshot\n backup:\n enabled: false\n schedule: \"0 3 * * *\"\n retainCount: 7\n successfulJobsHistoryLimit: 3\n failedJobsHistoryLimit: 3\n storageClass: \"\"\n size: 2Gi\n image:\n repository: alpine\n tag: \"3.20\"\n pullPolicy: IfNotPresent\n resources: {}\n"}}}} |