From 8c33dd199e34c9d4f4afbd8db15925b611e9195f Mon Sep 17 00:00:00 2001
From: jenkins <jenkins@bstein.dev>
Date: Sun, 16 Aug 2026 15:05:06 -0300
Subject: [PATCH] mailu: contain recovery to healthy nodes

---
 services/mailu/helmrelease.yaml | 25 ++++++++++++-------------
 1 file changed, 12 insertions(+), 13 deletions(-)

diff --git a/services/mailu/helmrelease.yaml b/services/mailu/helmrelease.yaml
index fb116994..466da3fb 100644
--- a/services/mailu/helmrelease.yaml
+++ b/services/mailu/helmrelease.yaml
@@ -93,10 +93,6 @@ spec:
         hardware: rpi4
     admin:
       logLevel: DEBUG
-      image:
-        repository: registry.bstein.dev/bstein/mailu-admin
-        tag: "2024.06"
-        pullPolicy: IfNotPresent
       nodeSelector:
         hardware: rpi4
       podLivenessProbe:
@@ -279,7 +275,6 @@ spec:
     global:
       logLevel: DEBUG
       storageClass: astreae
-      imagePullSecrets: [harbor-regcred]
     webmail:
       enabled: false
       nodeSelector:
@@ -356,6 +351,8 @@ spec:
                         {{- end }}
                         {{ end }}
                   spec:
+                    imagePullSecrets:
+                      - name: harbor-regcred
                     affinity:
                       nodeAffinity:
                         requiredDuringSchedulingIgnoredDuringExecution:
@@ -368,6 +365,8 @@ spec:
                     automountServiceAccountToken: true
                     containers:
                       - name: admin
+                        image: registry.bstein.dev/bstein/mailu-admin:2024.06
+                        imagePullPolicy: IfNotPresent
                         command:
                           - /entrypoint.sh
                         args:
@@ -440,7 +439,7 @@ spec:
                             - matchExpressions:
                                 - key: kubernetes.io/hostname
                                   operator: NotIn
-                                  values: ["titan-13", "titan-15", "titan-17", "titan-19"]
+                                  values: ["titan-13", "titan-14", "titan-15", "titan-17", "titan-19"]
                     serviceAccountName: mailu-vault-sync
                     automountServiceAccountToken: true
                     containers:
@@ -519,7 +518,7 @@ spec:
                             - matchExpressions:
                                 - key: kubernetes.io/hostname
                                   operator: NotIn
-                                  values: ["titan-13", "titan-15", "titan-17", "titan-19"]
+                                  values: ["titan-13", "titan-14", "titan-15", "titan-17", "titan-19"]
                     serviceAccountName: mailu-vault-sync
                     automountServiceAccountToken: true
                     containers:
@@ -598,7 +597,7 @@ spec:
                             - matchExpressions:
                                 - key: kubernetes.io/hostname
                                   operator: NotIn
-                                  values: ["titan-13", "titan-15", "titan-17", "titan-19"]
+                                  values: ["titan-13", "titan-14", "titan-15", "titan-17", "titan-19"]
                     serviceAccountName: mailu-vault-sync
                     automountServiceAccountToken: true
                     containers:
@@ -675,7 +674,7 @@ spec:
                             - matchExpressions:
                                 - key: kubernetes.io/hostname
                                   operator: NotIn
-                                  values: ["titan-13", "titan-15", "titan-17", "titan-19"]
+                                  values: ["titan-13", "titan-14", "titan-15", "titan-17", "titan-19"]
                     serviceAccountName: mailu-vault-sync
                     automountServiceAccountToken: true
                     containers:
@@ -752,7 +751,7 @@ spec:
                             - matchExpressions:
                                 - key: kubernetes.io/hostname
                                   operator: NotIn
-                                  values: ["titan-13", "titan-15", "titan-17", "titan-19"]
+                                  values: ["titan-13", "titan-14", "titan-15", "titan-17", "titan-19"]
                     serviceAccountName: mailu-vault-sync
                     automountServiceAccountToken: true
                     containers:
@@ -826,7 +825,7 @@ spec:
                             - matchExpressions:
                                 - key: kubernetes.io/hostname
                                   operator: NotIn
-                                  values: ["titan-13", "titan-15", "titan-17", "titan-19"]
+                                  values: ["titan-13", "titan-14", "titan-15", "titan-17", "titan-19"]
           - target:
               kind: Deployment
               name: mailu-tika
@@ -845,14 +844,14 @@ spec:
                             - matchExpressions:
                                 - key: kubernetes.io/hostname
                                   operator: NotIn
-                                  values: ["titan-13", "titan-15", "titan-17", "titan-19"]
+                                  values: ["titan-13", "titan-14", "titan-15", "titan-17", "titan-19"]
                         preferredDuringSchedulingIgnoredDuringExecution:
                           - weight: 100
                             preference:
                               matchExpressions:
                                 - key: kubernetes.io/hostname
                                   operator: NotIn
-                                  values: ["titan-13", "titan-15", "titan-17", "titan-19"]
+                                  values: ["titan-13", "titan-14", "titan-15", "titan-17", "titan-19"]
                     containers:
                       - name: tika
                         startupProbe: