maintenance: schedule soteria on rpi workers

services/maintenance/soteria-deployment.yaml

@@ -16,6 +16,24 @@ spec:
         app: soteria
     spec:
       serviceAccountName: soteria
+      nodeSelector:
+        kubernetes.io/arch: arm64
+        node-role.kubernetes.io/worker: "true"
+      affinity:
+        nodeAffinity:
+          preferredDuringSchedulingIgnoredDuringExecution:
+            - weight: 90
+              preference:
+                matchExpressions:
+                  - key: hardware
+                    operator: In
+                    values: ["rpi5"]
+            - weight: 50
+              preference:
+                matchExpressions:
+                  - key: hardware
+                    operator: In
+                    values: ["rpi4"]
       containers:
         - name: soteria
           image: registry.bstein.dev/bstein/soteria:latest