Changing "nodeSelector" on Deployments

Issue

We have seven workers nodes. where:

• Two workers nodes have this label: node-role.kubernetes.io/pci: ''
• and five workers nodes have this label: node-role.kubernetes.io/app: ''

By default on scheduler we have configured this:

spec:
  defaultNodeSelector: node-role.kubernetes.io/app=

Then, we have one project with fifteen deployments but we need only two deployments to be deployed on workers with pci label.

We can't add an annotation on project level because all deployments will be deployed on Workers with pci label.

We need to add an annotation on deployment level, is this possible?