keycloak: pin realm job to rpi nodes

services/keycloak/realm-settings-job.yaml

@@ -2,12 +2,22 @@
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: keycloak-realm-settings-1
+  name: keycloak-realm-settings-2
   namespace: sso
 spec:
   backoffLimit: 2
   template:
     spec:
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: hardware
+                    operator: In
+                    values: ["rpi5","rpi4"]
+                  - key: node-role.kubernetes.io/worker
+                    operator: Exists
       restartPolicy: OnFailure
       containers:
         - name: configure