Reserved seating

The batch team has paid for hackademy-worker2 (labelled pool=batch). They want it to themselves: nothing else should run there, and their jobs should run nowhere else.

A selector pulls pods towards a node; a taint pushes every other pod away. kubectl taint nodes NAME key=value:NoSchedule keeps off any pod without a matching toleration. NoSchedule only affects scheduling — pods already on the node stay until something replaces them.