From c13e760a04cb529938494241c68d9a86c0b31b2c Mon Sep 17 00:00:00 2001
From: jenkins <jenkins@bstein.dev>
Date: Thu, 13 Aug 2026 18:51:37 -0300
Subject: [PATCH] vault: keep auth bootstrap on healthy workers

---
 services/vault/hermes-auth-role-bootstrap-job.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/services/vault/hermes-auth-role-bootstrap-job.yaml b/services/vault/hermes-auth-role-bootstrap-job.yaml
index 677162980..07c223f0a 100644
--- a/services/vault/hermes-auth-role-bootstrap-job.yaml
+++ b/services/vault/hermes-auth-role-bootstrap-job.yaml
@@ -3,7 +3,7 @@
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: vault-k8s-auth-hermes-7
+  name: vault-k8s-auth-hermes-8
   namespace: vault
 spec:
   backoffLimit: 2
@@ -12,6 +12,7 @@ spec:
       serviceAccountName: vault-admin
       restartPolicy: Never
       nodeSelector:
+        hardware: rpi5
         kubernetes.io/arch: arm64
         node-role.kubernetes.io/worker: "true"
       containers: