diff --git a/k8s-deploy.yaml b/k8s-deploy.yaml
index 2976773..3bc26d2 100644
--- a/k8s-deploy.yaml
+++ b/k8s-deploy.yaml
@@ -38,6 +38,10 @@ spec:
     spec:
       imagePullSecrets:
         - name: registry-secret
+      # Our image is built for linux/amd64 only; pin to x86 nodes so the pod
+      # never lands on ARM nodes (e.g. deg-pi) with an exec format error.
+      nodeSelector:
+        kubernetes.io/arch: amd64
       containers:
         - name: woodpecker-mcp
           # Immutable per-commit tag (rendered by envsubst in CI from CI_COMMIT_SHA).