keycloak: require rpi nodes with titan-24 fallback

services/keycloak/deployment.yaml

@@ -18,6 +18,16 @@ spec:
     spec:
       affinity:
         nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: hardware
+                    operator: In
+                    values: ["rpi5","rpi4"]
+              - matchExpressions:
+                  - key: kubernetes.io/hostname
+                    operator: In
+                    values: ["titan-24"]
           preferredDuringSchedulingIgnoredDuringExecution:
             - weight: 90
               preference:
@@ -31,12 +41,6 @@ spec:
                   - key: hardware
                     operator: In
                     values: ["rpi4"]
-            - weight: 50
-              preference:
-                matchExpressions:
-                  - key: kubernetes.io/hostname
-                    operator: NotIn
-                    values: ["titan-24"]
       securityContext:
         runAsUser: 1000
         runAsGroup: 0