diff --git a/.deploy-infra/deploy-prod.yaml b/.deploy-infra/deploy-prod.yaml
index 90f56ad..7b49710 100644
--- a/.deploy-infra/deploy-prod.yaml
+++ b/.deploy-infra/deploy-prod.yaml
@@ -201,6 +201,8 @@ services:
       KC_HOSTNAME: keycloak.sprinthub.ru
     deploy:
       mode: replicated
+      placement:
+        constraints: [node.labels.stage == production]
       restart_policy:
         condition: any
       update_config: