From 69cfda7e8c52d0df613f3d4b36bced94f019aa02 Mon Sep 17 00:00:00 2001
From: Graham McIntire <graham@mcintire.me>
Date: Mon, 6 Apr 2026 09:36:28 -0500
Subject: [PATCH] Scale to 3 replicas spread across physical hosts

- 3 replicas with pod anti-affinity on physical-host topology key
- Tolerate control-plane taint so pods can schedule on cp nodes
---
 k8s/deployment.yaml | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/k8s/deployment.yaml b/k8s/deployment.yaml
index 7cabd72f..a73bf511 100644
--- a/k8s/deployment.yaml
+++ b/k8s/deployment.yaml
@@ -4,7 +4,7 @@ metadata:
   name: prop
   namespace: prop
 spec:
-  replicas: 1
+  replicas: 3
   minReadySeconds: 10
   strategy:
     type: RollingUpdate
@@ -19,6 +19,17 @@ spec:
       labels:
         app: prop
     spec:
+      tolerations:
+        - key: node-role.kubernetes.io/control-plane
+          operator: Exists
+          effect: NoSchedule
+      affinity:
+        podAntiAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            - labelSelector:
+                matchLabels:
+                  app: prop
+              topologyKey: topology.kubernetes.io/physical-host
       imagePullSecrets:
         - name: forgejo-registry
       securityContext: