Install Clawdlinux Operator

Install from the repository's local Helm chart.

Requirements

• Kubernetes 1.27+, Helm 3, and kubectl.
• Permission to create CRDs and cluster-scoped RBAC.
• Storage classes for enabled stateful subcharts.
• Available images and dependencies for every enabled component.
• Approved credentials and egress for external model calls.

NetworkPolicy enforcement requires an enforcing CNI. Optional Cilium FQDN policies require Cilium. Nodes need runsc and a working RuntimeClass for gVisor isolation.

Local Evaluation

git clone https://github.com/Clawdlinux/agentic-operator-core.git
cd agentic-operator-core
helm dependency build ./charts
helm upgrade --install clawdlinux ./charts \
  --namespace agentic-system \
  --create-namespace \
  --set license.key=dev-only-not-a-valid-license

The chart requires a nonempty license.key, but the open-source reconciler defaults to a no-op validator. The development value is packaging-only. Never use it in production. Supplying a JWT does not replace the no-op implementation; production validation requires a configured validator. Keep credentials out of committed values files.

Verify

helm status clawdlinux -n agentic-system
kubectl -n agentic-system get deployments,pods,services
kubectl get crd agentworkloads.agentic.clawdlinux.org

Offline Environments

Image repository overrides and offline JWT validation are available. Mirror every enabled image and dependency. Complete air-gap installation testing remains a release gate. Automatic complete per-run signed evidence is not connected.

Uninstall

helm uninstall clawdlinux -n agentic-system

Helm does not automatically delete CRDs or persistent volumes. Review retained resources before deleting namespaces or storage.

Next: configuration and security.