jenkins: enforce OIDC via JCasC (no node move)

services/jenkins/helmrelease.yaml

@@ -79,29 +79,6 @@ spec:
             secretKeyRef:
               name: jenkins-oidc
               key: logoutUrl
-      nodeSelector:
-        kubernetes.io/arch: arm64
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-              - matchExpressions:
-                  - key: kubernetes.io/arch
-                    operator: In
-                    values: [ "arm64" ]
-          preferredDuringSchedulingIgnoredDuringExecution:
-            - weight: 90
-              preference:
-                matchExpressions:
-                  - key: hardware
-                    operator: In
-                    values: [ "rpi5" ]
-            - weight: 50
-              preference:
-                matchExpressions:
-                  - key: hardware
-                    operator: In
-                    values: [ "rpi4" ]
       initScripts:
         oidc.groovy: |
           import hudson.util.Secret