Place core services and web-petting on external core nodes

k8s-ng/core/postgresql/cluster.yaml

@@ -6,7 +6,7 @@
 # master. A failover swaps the roles; switch back with
 #   kubectl cnpg promote main <instance on music>
 #
-# Nodes eligible for instances carry the label workload/postgres=true. To move a
+# Eligible nodes are core/external and carry workload/postgres=true. To move a
 # replica: label the new node, unlabel the old one, then recreate the instance
 # (kubectl cnpg destroy main <N>); the operator re-clones it from the primary.
 #
@@ -36,6 +36,8 @@ spec:
     podAntiAffinityType: required
     topologyKey: kubernetes.io/hostname
     nodeSelector:
+      homelab.hexor.cy/pool: core
+      homelab.hexor.cy/exposure: external
       workload/postgres: "true"
 
   resources: