ai(hermes): avoid unstable titan-18 placement

services/hermes-chat/deployment.yaml

@@ -50,6 +50,7 @@ spec:
                       - titan-13
                       - titan-15
                       - titan-17
+                      - titan-18
                       - titan-19
           preferredDuringSchedulingIgnoredDuringExecution:
             - weight: 100

services/hermes/oauth2-proxy.yaml

@@ -73,6 +73,7 @@ spec:
                       - titan-13
                       - titan-15
                       - titan-17
+                      - titan-18
                       - titan-19
           preferredDuringSchedulingIgnoredDuringExecution:
             - weight: 90

services/keycloak/oneoffs/hermes-access-oidc-client-job.yaml

@@ -3,7 +3,7 @@
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: hermes-access-oidc-client-ensure-1
+  name: hermes-access-oidc-client-ensure-2
   namespace: sso
 spec:
   backoffLimit: 3
@@ -34,6 +34,10 @@ spec:
                       - arm64
                   - key: node-role.kubernetes.io/worker
                     operator: Exists
+                  - key: kubernetes.io/hostname
+                    operator: NotIn
+                    values:
+                      - titan-18
       containers:
         - name: apply
           image: bitnami/kubectl@sha256:554ab88b1858e8424c55de37ad417b16f2a0e65d1607aa0f3fe3ce9b9f10b131