Three defects proven by running the shipped configs:
Kubernetes probes checked only the status code against /startupz, but the
pinned image predates that route and the Control UI answers unknown paths
with a catch-all 200. A wedged pod was therefore marked Ready forever.
Probes now assert the JSON probe contract and target routes the pinned
image actually serves; verified in a kind cluster where the old command
exits 0 on the missing route and the new one exits 1.
render.yaml set no dockerCommand, so the image CMD ran without
--allow-unconfigured and a fresh Render disk exited 78 with 'Missing
config' before binding. Reproduced locally with Render's exact env.
The Cloudflare Container readiness poll had the same route mismatch
against operator-supplied official image digests; it now polls /healthz,
which every published image serves.
Also replaces an R2 verification step that could never fail: wrangler
cannot list object keys, so the documented command 404'd into || true.
* feat(gateway): add /startupz startup probe with auth-gated version detail
Startup/traffic-admission probe that excludes downstream channel health:
200 started once startup work completes and the gateway is not draining,
503 starting/draining otherwise. Version and uptime are only included for
local-direct or authenticated callers, reusing the /readyz detail gate.
* fix(deploy): use /startupz for traffic admission in bundled templates
fly.toml gains its missing HTTP check; render.yaml stops using pure
liveness as admission; k8s pins an immutable image tag, seeds config
only when missing, and adds a startupProbe; stale Fly healthcheck-port
doc corrected (healthcheck follows the active gateway lock port since
bc4221a07e).
* docs(k8s): make persistent-file config ownership explicit with reseed path
docs/concepts/typebox.md: removed the duplicate '# TypeBox as protocol
source of truth' H1 (Mintlify already renders the title from
frontmatter; in-body H1s produce brittle anchors). Also removed the
'Last updated: 2026-01-10' timestamp line because date-stamped
freshness markers drift silently and conflict with our brownfield
maintenance model.
docs/install/kubernetes.md: removed the duplicate '# OpenClaw on
Kubernetes' H1.
docs/install/azure.md: removed the duplicate '# OpenClaw on Azure Linux
VM' H1.
docs/install/podman.md: renamed the '## Podman + Tailscale' heading to
'## Podman and Tailscale' per docs/CLAUDE.md heading-hygiene rules
(plus signs collapse during Mintlify anchor generation just like
ampersands and apostrophes). Kept the explicit
<a id='podman--tailscale'></a> anchor and updated the inline 'Podman +
Tailscale' link text to match the new heading so the cross-link still
works.
Peter Steinberger