[← All integrations](/getting-started)

Install · Verified

# Kubernetes

static shell

Use the canonical Dockerfile as your image. AGENTSITE\_TOKEN goes in a Secret (not a ConfigMap), bound to the frontend Deployment via envFrom.

**Start here first.** Every platform recipe below assumes the canonical Express + Docker install at [/install/express-docker](/install/express-docker). The snippets on this page are the platform-specific deltas on top of that baseline.

Use the canonical Dockerfile as your image. The `AGENTSITE_TOKEN` goes in a `Secret` (not a `ConfigMap` — it's a credential), referenced from the **frontend** Deployment via `envFrom`.

k8s — Secret + envFrom on the frontend Deploymentcopy

```
apiVersion: v1
kind: Secret
metadata:
  name: my-frontend-secret
type: Opaque
stringData:
  AGENTSITE_TOKEN: asit_…
---
# In your frontend Deployment:
spec:
  template:
    spec:
      containers:
        - name: frontend
          envFrom:
            - configMapRef: { name: my-frontend-configmap }   # public env
            - secretRef:    { name: my-frontend-secret }      # AGENTSITE_TOKEN here
```

**Frontend pod, not backend.** If your API Deployment also reads from the same envFrom secrets, audit it — the token belongs only on the pod that runs `node server.mjs`.

[← All integrations](/getting-started#by-hand)  ·  [Need help with this recipe? →](/contact)

Cookies

We use cookies to make this site work and to understand how it's used. [Learn more](https://www.cookiesandyou.com/)

Decline Got it