新增一些配置

openclaw/certs/cert.crt

@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

openclaw/certs/cert.key

@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----
+MIIJQgIBADANBgkqhkiG9w0BAQEFAASCCSwwggkoAgEAAoICAQDWHQTz95Tkf012
+njRrOGu606R21kvgM3dYrI4VdvX61MZBvwhAk1NUoqKihjBXIQ9hqUCwCicpKNP5
+SaX9WN6mOWVIKssLFWA/7QtKCO89PHHJ6NaCsEfrWTqpOOJWy7reHPt+9jSnusI2
+JUZw9RAB3QRzyqxCXt07ZtvdzyjtApWc+9AmnCn8EFupqwEidhhdMzuGLZmCyPo6
+w0cQc1OvADWftaoWfspDgqEzvU3/DqvdA4ur17kKssSt78QdSdtnShLX4zDeigby
++jPayaeEQmOkewvAgxdXsactG+6zA7MnS7gK97ZEiICFc4H/ra041JZHhRphMPVk
+EFxjXyxxxrar6CHxome6RnF5W5gO8HTzhFPSsm/tnhZYfdG5vaOPJ1xGKQm5yjaA
+s0Ho7A5lHK4nGN6ZY3lZ2ZL0Gg9mE23WnGVXCWxV3i3v1mj2AGAAjQdq745jg1Yp
+gKmjqqvHR+tPb58rVURa82jPbCTBH5x7EtX/OFxdP3BKhkvCZE4XICaQe7pcBrxa
+mSzzJdit36JcKan0ReMzfBbcyDmAu1u0N0AeSDeht8Lukbftnw6Gi3cqz0RnKvmG
+cmVZk2oZbkCx+eTGyDwo5U+e/6GcP+qnXUViZoEmoYR/ytC1cJWpVEqA8ILChr3J
+ZenFVLph1FAoP0gi9C4G6niJf/XdHQIDAQABAoICABkxcG4BXWpWZUe1/T55dMmW
+kgUumV5vx9Tt9sjlRrOlGg/N2bt5akZs3XyIlAMIf44S82rTQwDXjjuIlCifbpE5
+8yYe7OWotfrHmjqzmuzGYjAq/qSBd/Dj/qA/Mniaf6oXWGs7rn3m3mevEp8DYscJ
+WbcDK6oijd7pryil8a+TjIWcZoVIfjMrvJFV7uv+X8cFmnUjA+tM2Q6VgBTaMQhI
+GscoQbNkZ0mywuN63ITMleHLQ0GswBfXaYd6zQVSNaftYhK3Z35j2MX5tSTC8fxA
+sIc/uCYGdrZpj51h6j/ziT6wLN9TfsWJFzA8o1jxd06Wyvju2ygA8fq8ZxaFMg4Y
+5nfvp1HooumaLwEs1jX+a+MriOXUliUwgo/mIUzb4Wo7CKuAHai4zq3MbV/QCuLe
+u8+dzvN35MhaYM7fwgFyspLsS5DXBBh1W51aBR7t9mF8nigN2Ai0TO1HcPtUEKe2
+G1vLT2MS1MJ0l8/trrAUO62z8VMgCtt19AxIOhNoJF2Az7B3Vw2ch4oqwzcjkubC
+JamMNFeD+2qOwMnDsgo7ga5BziQ3TRnHyzkw5+JYvJ1GoFgzmKgcl29JQdUSKzFW
+SN0QxTu1P6JvZa/nq4I7iMXym+j52QwKXYa23cIlGFRVtxejV8dWEveniFpFxMNO
+UyK2jtAbpctbRxRFHHFpAoIBAQD6ZsC1lYL4j0vtwbJqJLhZN1k1xc7YBPuhruha
+JDUR/uP6dsz1aSC0NS6V0qbySsTXQSte2CeIl6WYRQOJ5qAsgB2s5d8umw8ODnAD
+NVWprtl4d9Gp6zxpYOfD6sHUp5K0GZSs4Er6h6R4UOo5FWqFiYJfG6vHx0F2hUCf
+KEkLUFDxBKuXNEEbgDHXRiUHMAOzgK4RBvGs3Z0ELZRTs3/DMxx6wPJof3sR1XTk
+HP2mVAVp6WE/0PMkt0gnWaWMPHfMaRBNvjLRk/5S/d4dghRNocDeBuKxtg+h+RdE
+1jgTkK4iU83/vRHQ1R8kITr/+T+Z3E4JXAVV5PdiqpmtuE0VAoIBAQDa5o+sk6rc
+lAsDmrFPvMMFKfrEVwKROYdfd7MtRhbnG9rf6bagI4mKwAZLgg56yFW2VdL/KqWE
+QlPmb3yIdhW+0wsp5N4k5so4tBI1TawJy2fmYr3/YOuumU2kqxIJzmYAO+8b1/yG
+Mv85HHnYRGOCosnWtaap9TnE5p2RYCfuE1tDZt7w33n4lX9ac5GqGTQ+By5v0avZ
+J6GZzbHX802ZAciUZ6qTsXE05VE9BwfjDSaqiL0WjDQzbGafZgZX0xuckt/oDAll
+BXsAZpNILW2Aqd+BIgMOCan4Q31s20qRDN4+rDcc+nx0AA/vVdSMzvmS/GVBTNdy
+YkqL2TS+KCHpAoIBABkwtxhNZzScLdZIUyuMcCNBhy76rFlc/veAAg33cINT8hlj
+VDEoF0spwnr+Cx962ByTiMps0mVSZC1SXA3GbryrUtDu+ynUHYqbdzdLaUe9uFD/
+NM90Q8qSHh6+gitjhEWsASH3GnPjq28TLMz7U5EFiWEKBpj9eZ9zvlGEmvyRYuMs
+Rhra/eXHWrw+aUE02lp3iotZ+Hwce0xNTYuyFhtMDARpXrmWgYoEwFKme/n8n+LM
+wKTL33oFGjQjN51JBABDXYmEpdYhnkc5FNxBFsvMhvuPE8Uu/Jmd1nJtXozRVENN
+zP56Rc2NcymOUkIoD/bpi8wzPrIqa5y4budkEBUCggEBAIS+8vvl5OS1BmTeJ47C
+WsXD6mWsmkr1RynWzhqzeWoXU0kcUvqT8nHo9yhNK3i8CnZzX2wMMameC4EftLaQ
+XamGFCwItcpNBu8SDES04JJj/pMQ6EV5QhN0tkgY0eyOdP7JWbxZ47KCNJIuuZk0
+B+CN1bbWG8bPhoPokj85v505scuTE7mg3DeqeTuiAADWHf9LnZaD4SHkTbSWr7XU
+vwb9tOSCZUgBgDRiqDxJCjhfnkYme/yzc2iH4UfiuBAEXqc5znzK59uSUkAw9Dn+
+CnzPB1IpDQ8zPxbl3qbn6TVDR3dcOmPhZx11eDRcqXPmhCTl2IWcEr8z6h8azkhO
+0BkCggEAUQjUWu9M3GitYWJ74lGm05m7C/XTXQv6ymTWzIg7rSQAwJ3WmqnMvKuW
+Ndqbn5zeC6954KxC8MltDoDZiWDTmV/DqHV4snB5JAsI6FLKQXt5k43hg3B15kZn
+2eOz1F+o9Yit24QTjzjiat53VbydIWoVXf5zoLKpRYkJnJ9DR5zRYCssV8On+qkd
+dJ4GLVI4yT4fKWgoUB48umT/L9Y/XmvU/0nlKpUmIFxx45+Xim7g2xH9M38eaYMW
+cUziXM2HOrWDC7vGbswFYvLAmsI83HrIdPImtsKCDKPwGRWYKUEXGhjfyZLA4r0L
+8CSHMDitauenGLa49WePm/rsU2CZRw==
+-----END PRIVATE KEY-----

openclaw/deployment.yaml

@@ -17,9 +17,7 @@ spec:
       - name: data
         hostPath:
           path: /data/openclaw
-      - name: tools
-        hostPath:
-          path: /data/openclaw/tools
+          type: ""
       - name: projects
         hostPath:
           path: /data/code-server/coder
@@ -33,6 +31,10 @@ spec:
         env:
         - name: PATH
           value: /home/node/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+        envFrom:
+        - secretRef:
+            name: openclaw
+            optional: true
         resources:
           limits:
             memory: "4Gi"
@@ -46,14 +48,12 @@ spec:
         - gateway
         - run
         volumeMounts:
-        - mountPath: /home/node/.openclaw
-          name: data
-        - mountPath: /home/node/.openclaw/workspace/Projects
-          name: projects
-        - mountPath: /home/node/.local
-          name: tools
-        - mountPath: /tmp
-          name: tmp
+        - name: data
+          mountPath: /home/node
+        - name: projects
+          mountPath: /home/node/.openclaw/workspace/Projects
+        - name: tmp
+          mountPath: /tmp
         livenessProbe:
           httpGet:
             path: /healthz

openclaw/ingress.yaml

@@ -0,0 +1,22 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: openclaw
+  labels:
+    app.kubernetes.io/name: openclaw
+spec:
+  rules:
+  - host: claw.233.local
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: openclaw
+            port: 
+              number: 8080
+  tls:
+  - hosts:
+    - openclaw.233.local
+    secretName: certs

openclaw/kustomization.yaml

@@ -5,7 +5,8 @@ namespace: openclaw
 resources:
 - deployment.yaml
 - services.yaml
+- ingress.yaml
 images:
 - name: openclaw-image
   newName: cr.wetofu.me/ghcr.io/openclaw/openclaw
-  newTag: 2026.5.7-slim
+  newTag: 2026.5.18-slim

openclaw/services.yaml

@@ -10,5 +10,4 @@ spec:
     targetPort: 18789
   ipFamilies:
   - IPv4
-  - IPv6
-  ipFamilyPolicy: PreferDualStack
+  ipFamilyPolicy: SingleStack