A topology spread rule looks balanced while one tainted node pool is the only place the emergency fallback pods are actually allowed to run during a staged decommission

Distribution appears fair until a failure forces the scheduler into the only domain with compatible taints. The service still works through the primary path, but one dependency only fails when the old component is finally drained away.