From 88c7a1c2aaed6f30b71eaf246fce261127c5c0dd Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Sat, 6 Dec 2025 01:40:24 -0300
Subject: [PATCH] keycloak: require rpi nodes with titan-24 fallback

---
 services/keycloak/deployment.yaml | 16 ++++++++++------
 1 file changed, 10 insertions(+), 6 deletions(-)

diff --git a/services/keycloak/deployment.yaml b/services/keycloak/deployment.yaml
index 2fb4bbb..406364d 100644
--- a/services/keycloak/deployment.yaml
+++ b/services/keycloak/deployment.yaml
@@ -18,6 +18,16 @@ spec:
     spec:
       affinity:
         nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: hardware
+                    operator: In
+                    values: ["rpi5","rpi4"]
+              - matchExpressions:
+                  - key: kubernetes.io/hostname
+                    operator: In
+                    values: ["titan-24"]
           preferredDuringSchedulingIgnoredDuringExecution:
             - weight: 90
               preference:
@@ -31,12 +41,6 @@ spec:
                   - key: hardware
                     operator: In
                     values: ["rpi4"]
-            - weight: 50
-              preference:
-                matchExpressions:
-                  - key: kubernetes.io/hostname
-                    operator: NotIn
-                    values: ["titan-24"]
       securityContext:
         runAsUser: 1000
         runAsGroup: 0