From 60a8192f612962f63fcb089cb24a7972de89efe8 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Wed, 17 Dec 2025 00:23:15 -0300
Subject: [PATCH] jenkins: enforce OIDC via JCasC (no node move)

---
 services/jenkins/helmrelease.yaml | 23 -----------------------
 1 file changed, 23 deletions(-)

diff --git a/services/jenkins/helmrelease.yaml b/services/jenkins/helmrelease.yaml
index 6118f35..451d0bc 100644
--- a/services/jenkins/helmrelease.yaml
+++ b/services/jenkins/helmrelease.yaml
@@ -79,29 +79,6 @@ spec:
             secretKeyRef:
               name: jenkins-oidc
               key: logoutUrl
-      nodeSelector:
-        kubernetes.io/arch: arm64
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-              - matchExpressions:
-                  - key: kubernetes.io/arch
-                    operator: In
-                    values: [ "arm64" ]
-          preferredDuringSchedulingIgnoredDuringExecution:
-            - weight: 90
-              preference:
-                matchExpressions:
-                  - key: hardware
-                    operator: In
-                    values: [ "rpi5" ]
-            - weight: 50
-              preference:
-                matchExpressions:
-                  - key: hardware
-                    operator: In
-                    values: [ "rpi4" ]
       initScripts:
         oidc.groovy: |
           import hudson.util.Secret