From d9fac9fb88c0895aa481de7c21d15e10c85d2bd0 Mon Sep 17 00:00:00 2001
From: Arvind Prabhakar <arvind.prabhakar@symcrest.com>
Date: Sun, 6 Sep 2026 22:32:27 +0000
Subject: [PATCH] Spread symcrest-web across availability zones

---
 charts/symcrest-web/templates/deployment.yaml |  7 +++++++
 charts/symcrest-web/values.yaml               | 11 +++++++++++
 rendered/symcrest-web/symcrest-web.yaml       | 12 ++++++++++++
 3 files changed, 30 insertions(+)

diff --git a/charts/symcrest-web/templates/deployment.yaml b/charts/symcrest-web/templates/deployment.yaml
index ea07e2c..3e21f9b 100644
--- a/charts/symcrest-web/templates/deployment.yaml
+++ b/charts/symcrest-web/templates/deployment.yaml
@@ -16,6 +16,13 @@ spec:
     spec:
       imagePullSecrets:
         - name: forgejo-registry
+
+      nodeSelector:
+{{ toYaml .Values.nodeSelector | indent 8 }}
+
+      topologySpreadConstraints:
+{{ toYaml .Values.topologySpreadConstraints | indent 8 }}
+
       containers:
         - name: symcrest-web
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
diff --git a/charts/symcrest-web/values.yaml b/charts/symcrest-web/values.yaml
index 210f08c..d5ea1d6 100644
--- a/charts/symcrest-web/values.yaml
+++ b/charts/symcrest-web/values.yaml
@@ -26,3 +26,14 @@ resources:
   limits:
     cpu: 250m
     memory: 256Mi
+
+nodeSelector:
+  workload: app
+
+topologySpreadConstraints:
+  - maxSkew: 1
+    topologyKey: topology.kubernetes.io/zone
+    whenUnsatisfiable: DoNotSchedule
+    labelSelector:
+      matchLabels:
+        app: symcrest-web
diff --git a/rendered/symcrest-web/symcrest-web.yaml b/rendered/symcrest-web/symcrest-web.yaml
index d9cadd6..7951f88 100644
--- a/rendered/symcrest-web/symcrest-web.yaml
+++ b/rendered/symcrest-web/symcrest-web.yaml
@@ -33,6 +33,18 @@ spec:
     spec:
       imagePullSecrets:
         - name: forgejo-registry
+
+      nodeSelector:
+        workload: app
+
+      topologySpreadConstraints:
+        - labelSelector:
+            matchLabels:
+              app: symcrest-web
+          maxSkew: 1
+          topologyKey: topology.kubernetes.io/zone
+          whenUnsatisfiable: DoNotSchedule
+
       containers:
         - name: symcrest-web
           image: "www.symcrest.com/symcrest/symcrest-web:1.0.7"