From 36487543bb3b44af9fecc848166c4272252a92ce Mon Sep 17 00:00:00 2001
From: jenkins <jenkins@bstein.dev>
Date: Wed, 20 May 2026 02:03:35 -0300
Subject: [PATCH] vault: prefer rpi5 for injector

---
 .../vault-injector/helmrelease.yaml           | 19 ++++++++++++++++++-
 1 file changed, 18 insertions(+), 1 deletion(-)

diff --git a/infrastructure/vault-injector/helmrelease.yaml b/infrastructure/vault-injector/helmrelease.yaml
index db7864be..9e9c45a1 100644
--- a/infrastructure/vault-injector/helmrelease.yaml
+++ b/infrastructure/vault-injector/helmrelease.yaml
@@ -45,8 +45,25 @@ spec:
         nodeAffinity:
           preferredDuringSchedulingIgnoredDuringExecution:
             - weight: 100
+              preference:
+                matchExpressions:
+                  - key: hardware
+                    operator: In
+                    values: ["rpi5"]
+            - weight: 95
               preference:
                 matchExpressions:
                   - key: kubernetes.io/hostname
                     operator: NotIn
-                    values: ["titan-13", "titan-15", "titan-17", "titan-19"]
+                    values: ["titan-13", "titan-14", "titan-15", "titan-17", "titan-18", "titan-19"]
+            - weight: 80
+              preference:
+                matchExpressions:
+                  - key: atlas.bstein.dev/spillover
+                    operator: DoesNotExist
+            - weight: 40
+              preference:
+                matchExpressions:
+                  - key: hardware
+                    operator: In
+                    values: ["rpi4"]