From 6efc1e56c09ddfaafae2b4aeb60d63b3e237a719 Mon Sep 17 00:00:00 2001
From: Viktor Barzin <viktorbarzin@meta.com>
Date: Sun, 1 Mar 2026 16:42:22 +0000
Subject: [PATCH] =?UTF-8?q?[ci=20skip]=20openclaw:=20fix=20exec=20config?=
 =?UTF-8?q?=20=E2=80=94=20use=20host=3Dnode,=20security=3Dfull?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Valid options: host=sandbox|gateway|node, security=deny|allowlist|full.
Using node (run on container host) with full (no command restrictions).
---
 stacks/openclaw/main.tf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/stacks/openclaw/main.tf b/stacks/openclaw/main.tf
index 19a74a23..a1adb2f5 100644
--- a/stacks/openclaw/main.tf
+++ b/stacks/openclaw/main.tf
@@ -112,8 +112,8 @@ resource "kubernetes_config_map" "openclaw_config" {
         profile = "full"
         deny    = []
         exec = {
-          host        = "local"
-          security    = "off"
+          host        = "node"
+          security    = "full"
           ask         = "off"
           pathPrepend = ["/tools", "/workspace/infra"]
         }