From d559aeb4640672fd2763d8f8a1185740f29d3cbf Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Wed, 14 Jan 2026 13:49:37 -0300
Subject: [PATCH] keycloak: schedule on arm64 workers

---
 services/keycloak/deployment.yaml | 14 ++++++++++----
 1 file changed, 10 insertions(+), 4 deletions(-)

diff --git a/services/keycloak/deployment.yaml b/services/keycloak/deployment.yaml
index 6f6fd2b..bf8a47c 100644
--- a/services/keycloak/deployment.yaml
+++ b/services/keycloak/deployment.yaml
@@ -51,17 +51,23 @@ spec:
     spec:
       serviceAccountName: sso-vault
       nodeSelector:
-        kubernetes.io/arch: amd64
-        node-role.kubernetes.io/accelerator: "true"
+        kubernetes.io/arch: arm64
+        node-role.kubernetes.io/worker: "true"
       affinity:
         nodeAffinity:
           preferredDuringSchedulingIgnoredDuringExecution:
             - weight: 100
               preference:
                 matchExpressions:
-                  - key: kubernetes.io/hostname
+                  - key: hardware
                     operator: In
-                    values: ["titan-22"]
+                    values: ["rpi5"]
+            - weight: 70
+              preference:
+                matchExpressions:
+                  - key: hardware
+                    operator: In
+                    values: ["rpi4"]
       securityContext:
         runAsUser: 1000
         runAsGroup: 0