From 170c3a069eb064a8a334bd8920871a50fe5e0acd Mon Sep 17 00:00:00 2001
From: Eric Meehan <eric@eom.dev>
Date: Fri, 6 Nov 2026 18:22:16 -0500
Subject: [PATCH] Gitea: keep off the node that hosts ingress-nginx

Sharing the 1-CPU ingress node with Nextcloud starved it into a
restart loop.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 tasks/gitea.yaml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/tasks/gitea.yaml b/tasks/gitea.yaml
index 9d403c9..7cf7496 100644
--- a/tasks/gitea.yaml
+++ b/tasks/gitea.yaml
@@ -17,6 +17,19 @@
     release_namespace: gitea
     create_namespace: true
     values:
+      # Keep heavy apps off the 1-CPU node that hosts ingress-nginx; sharing it
+      # starved Nextcloud and risks the ingress / MetalLB announcement.
+      affinity:
+        podAntiAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            - topologyKey: kubernetes.io/hostname
+              namespaceSelector:
+                matchLabels:
+                  kubernetes.io/metadata.name: ingress-nginx
+              labelSelector:
+                matchLabels:
+                  app.kubernetes.io/component: controller
+                  app.kubernetes.io/name: ingress-nginx
       image:
         pullPolicy: Always
       service: