From f4da27271edd476041336db59bd8975e19457b9a Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Sat, 6 Dec 2025 01:36:33 -0300
Subject: [PATCH] keycloak: prefer rpi nodes, avoid titan-24

---
 services/keycloak/deployment.yaml | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/services/keycloak/deployment.yaml b/services/keycloak/deployment.yaml
index f5409fc..2fb4bbb 100644
--- a/services/keycloak/deployment.yaml
+++ b/services/keycloak/deployment.yaml
@@ -16,6 +16,27 @@ spec:
       labels:
         app: keycloak
     spec:
+      affinity:
+        nodeAffinity:
+          preferredDuringSchedulingIgnoredDuringExecution:
+            - weight: 90
+              preference:
+                matchExpressions:
+                  - key: hardware
+                    operator: In
+                    values: ["rpi5"]
+            - weight: 70
+              preference:
+                matchExpressions:
+                  - key: hardware
+                    operator: In
+                    values: ["rpi4"]
+            - weight: 50
+              preference:
+                matchExpressions:
+                  - key: kubernetes.io/hostname
+                    operator: NotIn
+                    values: ["titan-24"]
       securityContext:
         runAsUser: 1000
         runAsGroup: 0