Trace resource ownership and joins in OpenClaw Enterprise (OCE). OpenClaw Control
Plane (OCC) stores these tables in the PostgreSQL occ schema. These diagrams
show the current implementation.
The Drizzle schema defines columns and constraints; SQL migrations also define triggers, function-based checks, grants, and deferred constraints. For every column, see the database entities cheat sheet. For write
Agent Substrate implements a virtual actor model on Kubernetes. The core idea: decouple long-lived stateful actors from physical pods so that thousands of suspended actors can share a small pool of warm worker pods. An actor's full memory and filesystem state is checkpointed to object storage (GCS/S3) when idle, and restored onto any available worker pod in milliseconds when traffic arrives.
Here's how each component contributes.
| #!/bin/bash | |
| set -eux | |
| OCP_IMAGE_LATEST=registry.build05.ci.openshift.org/ci-op-viybj1hv/release:latest | |
| #OCP_IMAGE_LATEST=$(curl -s https://amd64.ocp.releases.ci.openshift.org/api/v1/releasestream/4.19.0-0.ci/latest | jq -r '.pullSpec') | |
| OCP_IMAGE_PREVIOUS=$OCP_IMAGE_LATEST | |
| #OCP_IMAGE_PREVIOUS=registry.ci.openshift.org/ocp/release:4.19.0-0.ci-2025-03-30-053758 | |
| CI_TESTS_RUN="TestCreateCluster$" | |
| # --e2e.node-pool-replicas=1 \ |
| import board | |
| import neopixel | |
| import random | |
| import time | |
| from array import * | |
| pin = board.D4 | |
| pixel_count = 9 |
| #!/bin/bash | |
| set -eux | |
| # Requirements | |
| # * podman | |
| # * az (logged in) | |
| # KUBECONFIG set to the mgmt cluster | |
| # Only need the edit these variables |
| #!/bin/bash | |
| set -eux | |
| HC_NAMESPACE=sjenning | |
| HC_NAME=sjenning-mgmt | |
| NP_NAME=sjenning-mgmt-us-east-1a | |
| IGNITION_ROUTE=$(oc get route -n $HC_NAMESPACE-$HC_NAME ignition-server -ojsonpath='{.status.ingress[0].host}') | |
| NODEPOOL_TOKEN_SECERT=$(oc get secret | cut -f1 -d' ' | grep ^token-$NP_NAME) |
| { | |
| "kind": "AuthenticationConfiguration", | |
| "apiVersion": "apiserver.k8s.io/v1alpha1", | |
| "jwt": [ | |
| { | |
| "issuer": { | |
| "url": "https://login.microsoftonline.com/fa5d3dd8-b8ec-4407-a55c-ced639f1c8c5/v2.0", | |
| "audiences": [ | |
| "fdd45692-2aa8-4c30-b472-b86b84e5ed1d" | |
| ], |
| package main | |
| import ( | |
| "bufio" | |
| "encoding/json" | |
| "log" | |
| "os" | |
| "strings" | |
| ) |
hypershift create cluster aws --endpointAccess=PublicAndPrivate --external-dns-domain=service.ci.hypershift.devcluster.openshift.com
services:
- service: APIServer
servicePublishingStrategy:
route:
hostname: api-sjenning-guest.service.ci.hypershift.devcluster.openshift.com
type: Route
- service: OAuthServer
| apiVersion: v1 | |
| kind: Namespace | |
| metadata: | |
| name: sjenning | |
| --- | |
| apiVersion: rbac.authorization.k8s.io/v1 | |
| kind: Role | |
| metadata: | |
| name: hypershift | |
| namespace: sjenning |