From abb39d43281b9fdebf723a381f09d12dd9f59b82 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Thu, 22 Jan 2026 10:56:27 -0300
Subject: [PATCH] jenkins: pin vault sync to worker nodes

---
 services/jenkins/vault-sync-deployment.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/services/jenkins/vault-sync-deployment.yaml b/services/jenkins/vault-sync-deployment.yaml
index 6de64f9e..6abcacef 100644
--- a/services/jenkins/vault-sync-deployment.yaml
+++ b/services/jenkins/vault-sync-deployment.yaml
@@ -15,6 +15,9 @@ spec:
         app: jenkins-vault-sync
     spec:
       serviceAccountName: jenkins-vault-sync
+      nodeSelector:
+        kubernetes.io/arch: arm64
+        node-role.kubernetes.io/worker: "true"
       containers:
         - name: sync
           image: alpine:3.20