From 598bdfc72720ee7b84c3d6a2288aae3102c50c36 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Sat, 6 Dec 2025 01:44:23 -0300
Subject: [PATCH] keycloak: restrict to worker rpis with titan-24 fallback

---
 services/keycloak/deployment.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/services/keycloak/deployment.yaml b/services/keycloak/deployment.yaml
index 406364d..af7839f 100644
--- a/services/keycloak/deployment.yaml
+++ b/services/keycloak/deployment.yaml
@@ -24,6 +24,8 @@ spec:
                   - key: hardware
                     operator: In
                     values: ["rpi5","rpi4"]
+                  - key: node-role.kubernetes.io/worker
+                    operator: Exists
               - matchExpressions:
                   - key: kubernetes.io/hostname
                     operator: In