From 543880d06ff36b31113b0bf4532f7c53f05c1853 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Thu, 5 Feb 2026 15:29:41 -0300
Subject: [PATCH] maintenance: schedule soteria on rpi workers

---
 services/maintenance/soteria-deployment.yaml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/services/maintenance/soteria-deployment.yaml b/services/maintenance/soteria-deployment.yaml
index 05a7f52..8c16a46 100644
--- a/services/maintenance/soteria-deployment.yaml
+++ b/services/maintenance/soteria-deployment.yaml
@@ -16,6 +16,24 @@ spec:
         app: soteria
     spec:
       serviceAccountName: soteria
+      nodeSelector:
+        kubernetes.io/arch: arm64
+        node-role.kubernetes.io/worker: "true"
+      affinity:
+        nodeAffinity:
+          preferredDuringSchedulingIgnoredDuringExecution:
+            - weight: 90
+              preference:
+                matchExpressions:
+                  - key: hardware
+                    operator: In
+                    values: ["rpi5"]
+            - weight: 50
+              preference:
+                matchExpressions:
+                  - key: hardware
+                    operator: In
+                    values: ["rpi4"]
       containers:
         - name: soteria
           image: registry.bstein.dev/bstein/soteria:latest