From 4250ec39257902ba35f09adc7cb7fc4a3d26df80 Mon Sep 17 00:00:00 2001
From: Conan Scott <conanscott@gmail.com>
Date: Mon, 2 Feb 2026 00:36:46 +0000
Subject: [PATCH] Add OpenShift deployment manifests

---
 manifests/deployment.yaml | 77 +++++++++++++++++++++++++++++++++++++++
 1 file changed, 77 insertions(+)
 create mode 100644 manifests/deployment.yaml

diff --git a/manifests/deployment.yaml b/manifests/deployment.yaml
new file mode 100644
index 0000000..8f3cc4a
--- /dev/null
+++ b/manifests/deployment.yaml
@@ -0,0 +1,77 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: clawdbox
+  labels:
+    app: clawdbox
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: clawdbox
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        app: clawdbox
+    spec:
+      containers:
+      - name: clawdbox
+        image: image-registry.openshift-image-registry.svc:5000/park/clawdbox:latest
+        imagePullPolicy: Always
+        ports:
+        - containerPort: 2222
+          name: ssh
+        volumeMounts:
+        - mountPath: /data
+          name: data-volume
+        - mountPath: /home/claw/.ssh
+          name: ssh-keys
+        resources:
+          limits:
+            memory: "2Gi"
+            cpu: "1000m"
+          requests:
+            memory: "512Mi"
+            cpu: "250m"
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop: ["ALL"]
+          runAsNonRoot: true
+          seccompProfile:
+            type: RuntimeDefault
+      volumes:
+      - name: data-volume
+        persistentVolumeClaim:
+          claimName: clawdbox-pvc
+      - name: ssh-keys
+        secret:
+          secretName: clawdbox-ssh-keys
+          defaultMode: 0600
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: clawdbox
+  labels:
+    app: clawdbox
+spec:
+  ports:
+  - port: 2222
+    targetPort: 2222
+    name: ssh
+  selector:
+    app: clawdbox
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: clawdbox-pvc
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 10Gi
\ No newline at end of file