and fixed mount name again..

Dockerfile

@@ -4,10 +4,11 @@ FROM debian:bookworm-slim
 ENV DEBIAN_FRONTEND=noninteractive
 
 # Update and install Swiss Army Knife tools
-RUN apt-get update && apt-get install -y     curl     wget     git     jq     unzip     tar     vim     nano     python3     python3-pip     python3-venv     build-essential     iputils-ping     dnsutils     net-tools     nodejs     npm     ffmpeg     openssh-server     sudo     && rm -rf /var/lib/apt/lists/*
+RUN apt-get update && apt-get install -y     curl     wget     git     jq     unzip     tar     vim     nano     python3     python3-pip     python3-venv     build-essential     iputils-ping     dnsutils     net-tools     nodejs     npm     ffmpeg     openssh-server  ripgrep ncdu   sudo     && rm -rf /var/lib/apt/lists/*
 
 # Install yq (binary release for latest version)
 RUN wget https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64 -O /usr/bin/yq &&     chmod +x /usr/bin/yq
+RUN wget https://downloads-openshift-console.apps.lab.apilab.us/amd64/linux/oc.tar -O /tmp/oc.tar &&     tar -xvf /tmp/oc.tar -C /usr/bin/ &&     rm /tmp/oc.tar && chmod +x /usr/bin/oc
 
 # Setup SSH directory & Config for OpenShift (Random UID support)
 RUN mkdir -p /var/run/sshd &&     chmod 775 /var/run/sshd

manifests/deployment.yaml

@@ -37,7 +37,7 @@ spec:
               mountPath: /data
             - name: ssh-keys-secret
               mountPath: /mnt/keys
-              - name: ssh-working
+            - name: ssh-working
               mountPath: /working-ssh
       containers:
         - name: clawdbox
@@ -65,20 +65,22 @@ spec:
               name: data-volume
             - mountPath: /home/claw/.ssh
               name: ssh-working
+            - mountPath: /home/claw/.kube
+              name: kubeconfig-secret
           resources:
             limits:
-              memory: "2Gi"
+              memory: "1Gi"
               cpu: "1000m"
             requests:
-              memory: "512Mi"
+              memory: "128Mi"
               cpu: "250m"
           securityContext:
             runAsUser: 1000
             runAsGroup: 1000
             fsGroup: 1000
-            allowPrivilegeEscalation: false
+            allowPrivilegeEscalation: true
             capabilities:
-              drop: ["ALL"]
+              add: ["CAP_AUDIT_WRITE"]
       volumes:
         - name: data-volume
           persistentVolumeClaim:
@@ -86,6 +88,8 @@ spec:
         - name: ssh-keys-secret
           secret:
             secretName: clawdbox-ssh-keys
-            defaultMode: 0600
+        - name: kubeconfig-secret
+          secret:
+            secretName: kube
         - name: ssh-working
           emptyDir: {}