vaultwarden: avoid suspect workers

services/maintenance/ariadne-deployment.yaml

@@ -324,7 +324,7 @@ spec:
             - name: ARIADNE_SCHEDULE_NEXTCLOUD_MAINTENANCE
               value: "30 4 * * *"
             - name: ARIADNE_SCHEDULE_VAULTWARDEN_SYNC
-              value: "0 * * * *"
+              value: "*/15 * * * *"
             - name: ARIADNE_SCHEDULE_WGER_USER_SYNC
               value: "*/15 * * * *"
             - name: ARIADNE_SCHEDULE_WGER_ADMIN

services/vaultwarden/deployment.yaml

@@ -35,8 +35,30 @@ spec:
     spec:
       serviceAccountName: vaultwarden-vault
       nodeSelector:
+        hardware: rpi5
         kubernetes.io/arch: arm64
         node-role.kubernetes.io/worker: "true"
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: kubernetes.io/hostname
+                    operator: NotIn
+                    values:
+                      - titan-06
+                      - titan-18
+          preferredDuringSchedulingIgnoredDuringExecution:
+            - weight: 100
+              preference:
+                matchExpressions:
+                  - key: kubernetes.io/hostname
+                    operator: In
+                    values:
+                      - titan-05
+                      - titan-07
+                      - titan-08
+                      - titan-11
       containers:
         - name: vaultwarden
           image: vaultwarden/server:1.35.2