passmower: Add topologySpreadConstraints

passmower/dragonfly.yaml

@@ -23,6 +23,14 @@ spec:
       key: password
       name: dragonfly-auth
   replicas: 3
+  topologySpreadConstraints:
+    - maxSkew: 1
+      topologyKey: topology.kubernetes.io/zone
+      whenUnsatisfiable: DoNotSchedule
+      labelSelector:
+        matchLabels:
+          app: dragonfly-ephemeral
+          app.kubernetes.io/part-of: dragonfly
   resources:
     limits:
       cpu: 600m