How to Deploy OpenClaw with GitOps

git clone https://github.com/yourusername/openclaw-gitops.git
cd openclaw-gitops

# Create directory structure:
mkdir -p argocd/overlays/{dev,staging,prod}
mkdir -p flux/clusters/{dev,staging,prod}
mkdir -p base/openclaw

# Initialize Git:
git add .
git commit -m "chore: initialize gitops structure"
git push origin main

# Option 1: Install ArgoCD
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml

# Verify installation:
kubectl get pods -n argocd

# Option 2: Install Flux CLI
curl -s https://fluxcd.io/install.sh | sudo bash
flux install --namespace=flux-system --repository=ssh://git@github.com/yourusername/openclaw-gitops.git

# base/openclaw/kustomization.yaml
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
metadata:
  name: openclaw

replicas:
  - name: openclaw
    count: 2

images:
  - name: openclaw
    newName: openclaw/openclaw
    newTag: 1.2.0

resources:
  - deployment.yaml
  - service.yaml
  - configmap.yaml

# argocd/overlays/prod/kustomization.yaml
bases:
  - ../../base/openclaw
patchesStrategicMerge:
  - replicas-patch.yaml
namePrefix: prod-

# ArgoCD: argocd/application.yaml
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: openclaw-prod
  namespace: argocd
spec:
  project: default
  source:
    repoURL: https://github.com/yourusername/openclaw-gitops.git
    targetRevision: main
    path: argocd/overlays/prod
  destination:
    server: https://kubernetes.default.svc
    namespace: openclaw-prod
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
      - CreateNamespace=true

# Flux: flux/clusters/prod/openclaw-helmrelease.yaml
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: openclaw
spec:
  interval: 10m
  chart:
    spec:
      chart: openclaw
      sourceRef:
        kind: HelmRepository
        name: openclaw-repo
  values:
    replicaCount: 2
    image:
      tag: 1.2.0

# Option 1: Sealed Secrets (ArgoCD recommended)
kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.24.0/controller.yaml

# Create secret and seal it:
echo -n myapikey | kubectl create secret generic openclaw-secrets --dry-run=client --from-file=api-key=/dev/stdin -o yaml | kubeseal -f - > sealed-secret.yaml
git add sealed-secret.yaml

# Option 2: SOPS (Flux recommended)
age-keygen -o age.agekey
export SOPS_AGE_KEY_FILE=~/.config/sops/age/age.agekey
sops secrets.yaml  # Auto-encrypts on save

# ArgoCD: Check sync status
argocd app get openclaw-prod
argocd app sync openclaw-prod  # Manual sync if needed

# Monitor for drift:
watch -n 10 "argocd app get openclaw-prod | grep -E '(Health|Sync)'"

# Flux: Check reconciliation
flux get kustomizations
flux get helmreleases

# Watch logs:
flux logs --all-namespaces --follow

# ArgoCD Rollback:
argocd app history openclaw-prod  # View revision history
argocd app rollback openclaw-prod <revision>  # Rollback to specific revision

# Git-based rollback (Flux/ArgoCD both support this):
git log --oneline  # Find the commit to revert to
git revert <commit-hash>
git push origin main
# GitOps controller auto-syncs to previous state

# Flux Suspend and Resume:
flux suspend helmrelease openclaw
# Make manual fixes if needed
flux resume helmrelease openclaw