scheduling: keep apps off longhorn storage nodes

infrastructure/vault-injector/helmrelease.yaml

@@ -43,6 +43,11 @@ spec:
         node-role.kubernetes.io/worker: "true"
       affinity:
         nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: longhorn-host
+                    operator: DoesNotExist
           preferredDuringSchedulingIgnoredDuringExecution:
             - weight: 100
               preference:

services/bstein-dev-home/frontend-deployment.yaml

@@ -18,6 +18,13 @@ spec:
       nodeSelector:
         kubernetes.io/arch: arm64
         node-role.kubernetes.io/worker: "true"
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: longhorn-host
+                    operator: DoesNotExist
       imagePullSecrets:
         - name: harbor-regcred
       containers:

services/finance/firefly-deployment.yaml

@@ -64,6 +64,11 @@ spec:
         node-role.kubernetes.io/worker: "true"
       affinity:
         nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: longhorn-host
+                    operator: DoesNotExist
           preferredDuringSchedulingIgnoredDuringExecution:
             - weight: 100
               preference:

services/game-stream/oauth2-proxy-wolf.yaml

@@ -53,6 +53,8 @@ spec:
                   - key: kubernetes.io/arch
                     operator: In
                     values: ["amd64","arm64"]
+                  - key: longhorn-host
+                    operator: DoesNotExist
           preferredDuringSchedulingIgnoredDuringExecution:
             - weight: 100
               preference:

services/health/wger-deployment.yaml

@@ -53,6 +53,11 @@ spec:
     spec:
       affinity:
         nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: longhorn-host
+                    operator: DoesNotExist
           preferredDuringSchedulingIgnoredDuringExecution:
             - weight: 100
               preference:

services/mailu/helmrelease.yaml

@@ -351,6 +351,14 @@ spec:
                         {{- end }}
                         {{ end }}
                   spec:
+                    affinity:
+                      nodeAffinity:
+                        requiredDuringSchedulingIgnoredDuringExecution:
+                          nodeSelectorTerms:
+                            - matchExpressions:
+                                - key: kubernetes.io/hostname
+                                  operator: NotIn
+                                  values: ["titan-13", "titan-15", "titan-17", "titan-19"]
                     serviceAccountName: mailu-vault-sync
                     automountServiceAccountToken: true
                     containers:
@@ -427,7 +435,7 @@ spec:
                             - matchExpressions:
                                 - key: kubernetes.io/hostname
                                   operator: NotIn
-                                  values: ["titan-14"]
+                                  values: ["titan-13", "titan-15", "titan-17", "titan-19"]
                     serviceAccountName: mailu-vault-sync
                     automountServiceAccountToken: true
                     containers:
@@ -499,6 +507,14 @@ spec:
                         {{- end }}
                         {{ end }}
                   spec:
+                    affinity:
+                      nodeAffinity:
+                        requiredDuringSchedulingIgnoredDuringExecution:
+                          nodeSelectorTerms:
+                            - matchExpressions:
+                                - key: kubernetes.io/hostname
+                                  operator: NotIn
+                                  values: ["titan-13", "titan-15", "titan-17", "titan-19"]
                     serviceAccountName: mailu-vault-sync
                     automountServiceAccountToken: true
                     containers:
@@ -568,6 +584,14 @@ spec:
                         {{- end }}
                         {{ end }}
                   spec:
+                    affinity:
+                      nodeAffinity:
+                        requiredDuringSchedulingIgnoredDuringExecution:
+                          nodeSelectorTerms:
+                            - matchExpressions:
+                                - key: kubernetes.io/hostname
+                                  operator: NotIn
+                                  values: ["titan-13", "titan-15", "titan-17", "titan-19"]
                     serviceAccountName: mailu-vault-sync
                     automountServiceAccountToken: true
                     containers:
@@ -637,6 +661,14 @@ spec:
                         {{- end }}
                         {{ end }}
                   spec:
+                    affinity:
+                      nodeAffinity:
+                        requiredDuringSchedulingIgnoredDuringExecution:
+                          nodeSelectorTerms:
+                            - matchExpressions:
+                                - key: kubernetes.io/hostname
+                                  operator: NotIn
+                                  values: ["titan-13", "titan-15", "titan-17", "titan-19"]
                     serviceAccountName: mailu-vault-sync
                     automountServiceAccountToken: true
                     containers:
@@ -713,7 +745,7 @@ spec:
                             - matchExpressions:
                                 - key: kubernetes.io/hostname
                                   operator: NotIn
-                                  values: ["titan-14"]
+                                  values: ["titan-13", "titan-15", "titan-17", "titan-19"]
                     serviceAccountName: mailu-vault-sync
                     automountServiceAccountToken: true
                     containers:
@@ -787,7 +819,7 @@ spec:
                             - matchExpressions:
                                 - key: kubernetes.io/hostname
                                   operator: NotIn
-                                  values: ["titan-14"]
+                                  values: ["titan-13", "titan-15", "titan-17", "titan-19"]
           - target:
               kind: Deployment
               name: mailu-tika
@@ -806,7 +838,7 @@ spec:
                             - matchExpressions:
                                 - key: kubernetes.io/hostname
                                   operator: NotIn
-                                  values: ["titan-14"]
+                                  values: ["titan-13", "titan-15", "titan-17", "titan-19"]
                         preferredDuringSchedulingIgnoredDuringExecution:
                           - weight: 100
                             preference:

services/maintenance/vault-sync-deployment.yaml

@@ -18,6 +18,13 @@ spec:
     spec:
       nodeSelector:
         node-role.kubernetes.io/worker: "true"
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: longhorn-host
+                    operator: DoesNotExist
       serviceAccountName: maintenance-vault-sync
       containers:
         - name: sync

services/openclaw/oauth2-proxy-agent.yaml

@@ -54,6 +54,8 @@ spec:
                   - key: kubernetes.io/arch
                     operator: In
                     values: ["arm64"]
+                  - key: longhorn-host
+                    operator: DoesNotExist
           preferredDuringSchedulingIgnoredDuringExecution:
             - weight: 100
               preference:

services/outline/deployment.yaml

@@ -88,6 +88,8 @@ spec:
                   - key: hardware
                     operator: In
                     values: ["rpi4", "rpi5"]
+                  - key: longhorn-host
+                    operator: DoesNotExist
       containers:
         - name: outline
           image: outlinewiki/outline:1.2.0

services/quality/oauth2-proxy-sonarqube.yaml

@@ -61,6 +61,8 @@ spec:
                     operator: DoesNotExist
                   - key: node-role.kubernetes.io/master
                     operator: DoesNotExist
+                  - key: longhorn-host
+                    operator: DoesNotExist
           preferredDuringSchedulingIgnoredDuringExecution:
             - weight: 100
               preference:

services/quality/sonarqube-deployment.yaml

@@ -49,6 +49,8 @@ spec:
                     operator: DoesNotExist
                   - key: node-role.kubernetes.io/master
                     operator: DoesNotExist
+                  - key: longhorn-host
+                    operator: DoesNotExist
           preferredDuringSchedulingIgnoredDuringExecution:
             - weight: 100
               preference: