Deploying OpenCode¶

OpenCode is an AI coding assistant similar to Claude Code. The opencode runtime is installed by the language-operator-runtimes chart.

Prerequisites¶

Language Operator installed, including the language-operator-runtimes chart (provides the opencode runtime)
A LanguageCluster to deploy into, with your kubectl context set to its namespace (examples below assume a cluster named demo-cluster)
An LLM provider API key, or a local model endpoint (e.g. Ollama)

Instructions¶

Configure a Model¶

AnthropicOpenAILocal Model

kubectl create secret generic anthropic-credentials \
  --from-literal=api-key=sk-ant-your-key-here

kubectl apply -f - <<EOF
apiVersion: langop.io/v1alpha1
kind: LanguageModel
metadata:
  name: claude-sonnet
spec:
  provider: anthropic
  modelName: claude-sonnet-4-5
  apiKeySecretRef:
    name: anthropic-credentials
    key: api-key
EOF

kubectl create secret generic openai-credentials \
  --from-literal=api-key=sk-your-key-here

kubectl apply -f - <<EOF
apiVersion: langop.io/v1alpha1
kind: LanguageModel
metadata:
  name: gpt-4o
spec:
  provider: openai
  modelName: gpt-4o
  apiKeySecretRef:
    name: openai-credentials
    key: api-key
EOF

Assumes Ollama is running in your cluster. No API key required.

kubectl apply -f - <<EOF
apiVersion: langop.io/v1alpha1
kind: LanguageModel
metadata:
  name: llama3
spec:
  provider: openai-compatible
  modelName: llama3.2
  endpoint: http://ollama.default.svc.cluster.local:11434/v1
EOF

Deploy OpenCode¶

AnthropicOpenAILocal Model

kubectl apply -f - <<EOF
apiVersion: langop.io/v1alpha1
kind: LanguageAgent
metadata:
  name: opencode
spec:
  runtime: opencode
  models:
    - name: claude-sonnet
EOF

kubectl apply -f - <<EOF
apiVersion: langop.io/v1alpha1
kind: LanguageAgent
metadata:
  name: opencode
spec:
  runtime: opencode
  models:
    - name: gpt-4o
EOF

kubectl apply -f - <<EOF
apiVersion: langop.io/v1alpha1
kind: LanguageAgent
metadata:
  name: opencode
spec:
  runtime: opencode
  models:
    - name: llama3
EOF

Verify¶

kubectl get languageagents
kubectl get lagent -w

Wait for PHASE to reach Running. The MODE column shows service: this runtime is a long-lived, addressable agent, which is why it has a Service you can port-forward to. See Execution Modes.

Connect¶

Access is gated by the cluster's OIDC proxy — there is no separate opencode password.

If your LanguageCluster has a domain and auth enabled, open https://opencode.demo-cluster.\<your-domain> and sign in through the cluster's OIDC provider.

The agent serves a WebSocket terminal on port 8080 that fronts opencode's interactive TUI. For local access, port-forward the service (this bypasses the proxy, so no login is required):

kubectl port-forward svc/opencode 8080:8080

Then open http://localhost:8080 in your browser.

Warning

opencode has no built-in authentication. When the cluster does not enable auth, opencode is exposed unauthenticated on its ingress. Enable cluster auth to protect it.

What the Operator Created¶

Resource	Name	Purpose
WorkflowTemplate	`opencode`	The agent's pod spec; also what `argo submit --from` targets
Workflow	`opencode`	The long-lived run. Runs the OpenCode WebSocket terminal container
Service	`opencode`	ClusterIP on port 8080
NetworkPolicy	`opencode`	Allows inbound from other agents in this namespace
PVC	`opencode-workspace`	10Gi persistent workspace
ConfigMap	`opencode-agent`	Injected at `/etc/agent/config.yaml`