Clawdlinux Operator Quickstart

Install from the local Helm chart, then inspect one workload. You need Kubernetes 1.27+, Helm 3, and kubectl configured for your cluster. Make the operator image available through a registry or local image loading.

Install For Local Evaluation

git clone https://github.com/Clawdlinux/agentic-operator-core.git
cd agentic-operator-core
helm dependency build ./charts
helm lint ./charts
helm upgrade --install clawdlinux ./charts \
  --namespace agentic-system \
  --create-namespace \
  --set license.key=dev-only-not-a-valid-license

The chart requires a nonempty license.key packaging value. The open-source reconciler uses a no-op validator. This development value is not a license or security control. Never use it in production.

Check Installation

kubectl -n agentic-system get deployments,pods
kubectl get crd agentworkloads.agentic.clawdlinux.org

Review And Run A Workload

kubectl apply --dry-run=server -f config/samples/agentworkload_demo.yaml

Review the objective, runtime, provider endpoint, Secret references, model mapping, tool profile, limits, and approval settings. Configure the referenced provider endpoint and Secret before applying:

kubectl apply -f config/samples/agentworkload_demo.yaml
kubectl -n agentic-system get agentworkloads -w

Verification Boundaries

Successful installation and execution do not prove packet enforcement or full air-gap operation. The cluster CNI must enforce NetworkPolicy. Nodes need runsc for gVisor isolation. Automatic complete per-run signed evidence is not connected.

Continue with installation, configuration, and evidence boundaries.