--- title: How to run useful AI Agent on Kubernetes | daily.dev description: A walkthrough describes running Open Claw, an open-source autonomous AI agent controllable via chat apps like Discord, WhatsApp, Signal, or Telegram, so it can... canonical: https://daily.dev/posts/how-to-run-useful-ai-agent-on-kubernetes-de5ay53pt twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: How to run useful AI Agent on Kubernetes | daily.dev og:description: A walkthrough describes running Open Claw, an open-source autonomous AI agent controllable via chat apps like Discord, WhatsApp, Signal, or Telegram, so it can... og:url: https://daily.dev/posts/how-to-run-useful-ai-agent-on-kubernetes-de5ay53pt og:image: https://api.daily.dev/og/posts/de5aY53PT.png og:image:alt: How to run useful AI Agent on Kubernetes og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # How to run useful AI Agent on Kubernetes **[That DevOps Guy](https://daily.dev/sources/marcel-dempers)** · 2 min read · 1 upvotes · 0 comments ## Summary A walkthrough describes running Open Claw, an open-source autonomous AI agent controllable via chat apps like Discord, WhatsApp, Signal, or Telegram, so it can raise pull requests and perform tasks. The agent runs in a locked-down Linux container with dropped capabilities, no root or filesystem access, and only scoped tools like Git and GitHub CLI. To keep it running when away from a personal machine, the setup migrates the container into a Kubernetes cluster using a kind cluster, official Open Claw Kubernetes manifests customized for a secured image, a Kubernetes secret for tokens, a dedicated namespace, and a config map, with a full companion video linked separately. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How do I run an autonomous AI agent like Open Claw securely in a container? Run it in a Linux container with all capabilities dropped and least privilege enforced, so it has no root access and no filesystem access beyond what it needs. Only expose specific tools it requires, such as Git and the GitHub CLI, and pass credentials as a scoped API token rather than broad access, limiting what the agent can actually do. _daily.dev surfaces practical guidance for developers securing self-hosted AI agents like this._ ### How do I deploy an Open Claw AI agent to a Kubernetes cluster? Create a kind cluster, then use the official Open Claw Kubernetes manifests as a base, customizing them to deploy your own locked-down container image. Create a dedicated namespace, add a Kubernetes secret containing the gateway token, model provider token, and channel token (for example Discord), and apply the manifests with kubectl so the config lives in a config map. _Track step-by-step Kubernetes deployment workflows like this one on daily.dev while building your own agent setup._ ## Similar posts on daily.dev - [How to Deploy Your Own 24x7 AI Agent using OpenClaw](https://daily.dev/posts/how-to-deploy-your-own-24x7-ai-agent-using-openclaw-6dmvxkddl) · freeCodeCamp · 5 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#github](https://daily.dev/tags/github), [#kubernetes](https://daily.dev/tags/kubernetes), [#ai-agents](https://daily.dev/tags/ai-agents), [#containers](https://daily.dev/tags/containers) [View this post on daily.dev](https://daily.dev/posts/how-to-run-useful-ai-agent-on-kubernetes-de5ay53pt) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"How to run useful AI Agent on Kubernetes","url":"https://daily.dev/posts/how-to-run-useful-ai-agent-on-kubernetes-de5ay53pt","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/how-to-run-useful-ai-agent-on-kubernetes-de5ay53pt"},"datePublished":"2026-08-18T12:22:17.934Z","dateModified":"2026-08-18T12:22:37.401Z","description":"A walkthrough describes running Open Claw, an open-source autonomous AI agent controllable via chat apps like Discord, WhatsApp, Signal, or Telegram, so it can...","image":"https://i.ytimg.com/vi/zARw8p4YZVU/sddefault.jpg","thumbnailUrl":"https://i.ytimg.com/vi/zARw8p4YZVU/sddefault.jpg","isAccessibleForFree":true,"articleSection":"That DevOps Guy","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"That DevOps Guy","logo":"https://media.daily.dev/image/upload/s--dGnHjfCV--/f_auto,q_auto/v1780213230/logos/marcel-dempers?_a=BAMAMiWQ0","url":"https://daily.dev/sources/marcel-dempers"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/how-to-run-useful-ai-agent-on-kubernetes-de5ay53pt","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,github,kubernetes,ai-agents,containers","timeRequired":"PT2M","video":{"@type":"VideoObject","name":"How to run useful AI Agent on Kubernetes","description":"A walkthrough describes running Open Claw, an open-source autonomous AI agent controllable via chat apps like Discord, WhatsApp, Signal, or Telegram, so it can...","thumbnailUrl":"https://i.ytimg.com/vi/zARw8p4YZVU/sddefault.jpg","uploadDate":"2026-08-18T12:22:17.934Z","duration":"PT2M","url":"https://api.daily.dev/r/de5aY53PT","embedUrl":"https://www.youtube.com/embed/zARw8p4YZVU"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"That DevOps Guy","item":"https://daily.dev/sources/marcel-dempers"},{"@type":"ListItem","position":3,"name":"How to run useful AI Agent on Kubernetes"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/how-to-run-useful-ai-agent-on-kubernetes-de5ay53pt#faq","mainEntity":[{"@type":"Question","name":"How do I run an autonomous AI agent like Open Claw securely in a container?","acceptedAnswer":{"@type":"Answer","text":"Run it in a Linux container with all capabilities dropped and least privilege enforced, so it has no root access and no filesystem access beyond what it needs. Only expose specific tools it requires, such as Git and the GitHub CLI, and pass credentials as a scoped API token rather than broad access, limiting what the agent can actually do. daily.dev surfaces practical guidance for developers securing self-hosted AI agents like this."}},{"@type":"Question","name":"How do I deploy an Open Claw AI agent to a Kubernetes cluster?","acceptedAnswer":{"@type":"Answer","text":"Create a kind cluster, then use the official Open Claw Kubernetes manifests as a base, customizing them to deploy your own locked-down container image. Create a dedicated namespace, add a Kubernetes secret containing the gateway token, model provider token, and channel token (for example Discord), and apply the manifests with kubectl so the config lives in a config map. Track step-by-step Kubernetes deployment workflows like this one on daily.dev while building your own agent setup."}}]} ```