From 7ef764c178064488bb28d3fb55e4f4d1ad3806fd Mon Sep 17 00:00:00 2001
From: Astra Logical <booksandpi@gmail.com>
Date: Tue, 9 Jun 2026 16:44:58 -0400
Subject: [PATCH] Temporarily disable vault node-affinity

---
 services/vault/vault-statefulset.yaml | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/services/vault/vault-statefulset.yaml b/services/vault/vault-statefulset.yaml
index 581a536..c5a125b 100644
--- a/services/vault/vault-statefulset.yaml
+++ b/services/vault/vault-statefulset.yaml
@@ -16,8 +16,16 @@ spec:
     spec:
       serviceAccountName: vault # Allows k8s auth for autounsealing
       terminationGracePeriodSeconds: 10
-      # Force pods onto different physical server nodes
       affinity:
+        # 1. Pin the pods strictly to K3s server nodes
+        # nodeAffinity:
+        #   requiredDuringSchedulingIgnoredDuringExecution:
+        #     nodeSelectorTerms:
+        #     - matchExpressions:
+        #       - key: node-role.kubernetes.io/control-plane
+        #         operator: Exists
+
+        # 2. Force those pods onto different physical server nodes
         podAntiAffinity:
           requiredDuringSchedulingIgnoredDuringExecution:
             - labelSelector: