From d2f118ed3206fd9157d204877762eb89dd7d2e38 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Thu, 22 Jan 2026 10:56:27 -0300
Subject: [PATCH] jenkins: pin vault sync to worker nodes

---
 services/jenkins/vault-sync-deployment.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/services/jenkins/vault-sync-deployment.yaml b/services/jenkins/vault-sync-deployment.yaml
index 6de64f9..6abcace 100644
--- a/services/jenkins/vault-sync-deployment.yaml
+++ b/services/jenkins/vault-sync-deployment.yaml
@@ -15,6 +15,9 @@ spec:
         app: jenkins-vault-sync
     spec:
       serviceAccountName: jenkins-vault-sync
+      nodeSelector:
+        kubernetes.io/arch: arm64
+        node-role.kubernetes.io/worker: "true"
       containers:
         - name: sync
           image: alpine:3.20