Deploying OpenClaw¶

OpenClaw is an AI personal assistant that connects to your editor via a WebSocket gateway. The openclaw runtime is installed by the language-operator-runtimes chart.

Prerequisites¶

Language Operator installed, including the language-operator-runtimes chart (provides the openclaw runtime)
A LanguageCluster to deploy into, with your kubectl context set to its namespace (examples below assume a cluster named demo-cluster)
An LLM provider API key, or a local model endpoint (e.g. Ollama)

Instructions¶

Configure a Model¶

AnthropicOpenAILocal Model

kubectl create secret generic anthropic-credentials \
  --from-literal=api-key=sk-ant-your-key-here

kubectl apply -f - <<EOF
apiVersion: langop.io/v1alpha1
kind: LanguageModel
metadata:
  name: claude-sonnet
spec:
  provider: anthropic
  modelName: claude-sonnet-4-5
  apiKeySecretRef:
    name: anthropic-credentials
    key: api-key
EOF

kubectl create secret generic openai-credentials \
  --from-literal=api-key=sk-your-key-here

kubectl apply -f - <<EOF
apiVersion: langop.io/v1alpha1
kind: LanguageModel
metadata:
  name: gpt-4o
spec:
  provider: openai
  modelName: gpt-4o
  apiKeySecretRef:
    name: openai-credentials
    key: api-key
EOF

Assumes Ollama is running in your cluster. No API key required.

kubectl apply -f - <<EOF
apiVersion: langop.io/v1alpha1
kind: LanguageModel
metadata:
  name: llama3
spec:
  provider: openai-compatible
  modelName: llama3.2
  endpoint: http://ollama.default.svc.cluster.local:11434/v1
EOF

Deploy OpenClaw¶

AnthropicOpenAILocal Model

kubectl apply -f - <<EOF
apiVersion: langop.io/v1alpha1
kind: LanguageAgent
metadata:
  name: openclaw
spec:
  runtime: openclaw
  models:
    - name: claude-sonnet
EOF

kubectl apply -f - <<EOF
apiVersion: langop.io/v1alpha1
kind: LanguageAgent
metadata:
  name: openclaw
spec:
  runtime: openclaw
  models:
    - name: gpt-4o
EOF

kubectl apply -f - <<EOF
apiVersion: langop.io/v1alpha1
kind: LanguageAgent
metadata:
  name: openclaw
spec:
  runtime: openclaw
  models:
    - name: llama3
EOF

The operator will auto-generate a gateway token and store it in a Secret named openclaw-runtime after creation.

Verify¶

kubectl get languageagents
kubectl get pods -w

Wait for the pod to reach Running and the LanguageAgent to show Ready=True.

Get Credentials¶

Retrieve the auto-generated token:

TOKEN=$(kubectl get secret openclaw-runtime \
  -o jsonpath='{.data.OPENCLAW_GATEWAY_TOKEN}' | base64 -d)

echo "Token: $TOKEN"

Connect¶

Log in with your token at https://openclaw.demo-cluster..

What the Operator Created¶

Resource	Name	Purpose
Deployment	`openclaw`	Runs the OpenClaw container
Service	`openclaw`	ClusterIP on port 18789
Secret	`openclaw-runtime`	Auto-generated gateway token
NetworkPolicy	`openclaw`	Allows inbound from other agents in this namespace
PVC	`openclaw-workspace`	10Gi persistent workspace
ConfigMap	`openclaw-agent`	Injected at `/etc/agent/config.yaml`