From 04aa32a762b896f5b71163d2340e4f29370807f7 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Sun, 7 Dec 2025 12:49:38 -0300
Subject: [PATCH] oauth2-proxy: schedule on worker rpis

---
 services/oauth2-proxy/deployment.yaml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/services/oauth2-proxy/deployment.yaml b/services/oauth2-proxy/deployment.yaml
index 8754cb5..7c22a93 100644
--- a/services/oauth2-proxy/deployment.yaml
+++ b/services/oauth2-proxy/deployment.yaml
@@ -16,6 +16,17 @@ spec:
       labels:
         app: oauth2-proxy
     spec:
+      nodeSelector:
+        node-role.kubernetes.io/worker: "true"
+      affinity:
+        nodeAffinity:
+          preferredDuringSchedulingIgnoredDuringExecution:
+            - weight: 90
+              preference:
+                matchExpressions:
+                  - key: hardware
+                    operator: In
+                    values: ["rpi5","rpi4"]
       containers:
         - name: oauth2-proxy
           image: quay.io/oauth2-proxy/oauth2-proxy:v7.6.0