Prototype KubeClaw is a learning project exploring what a secure, scalable Kubernetes environment for AI agents looks like. It is not production ready and not beta. Expect breaking changes and unreviewed assumptions. Read the project status.

Guide

Deploy and operate the KubeClaw infrastructure step by step.

Follow these guides to provision the infrastructure, configure the nodes, and deploy OpenClaw on Kubernetes.

Dev Container

Set up the aibox Dev Container that carries every tool this project needs.

Infrastructure (OpenTofu)

Configure terraform.tfvars, run tofu apply, and set up SSH access to the new nodes.

Cloudflare Tunnel Setup

Create the tunnel, route SSH through it, and protect it with a Cloudflare Access policy.

Server Management (Ansible)

Generate the inventory and run the update, hardening, NAT64, and Kubernetes-prerequisite playbooks.

Kubernetes (kubeadm)

Bootstrap a dual-stack kubeadm cluster with Cilium CNI and the Hetzner CSI driver.

OpenClaw Deployment

Deploy OpenClaw into an egress-restricted namespace with Cilium FQDN policies.