kubectl taint node-a key=value:NoSchedule

Taints node-a so the scheduler refuses to place pods there unless they tolerate the taint. Taints and tolerations keep dedicated workloads off shared nodes. Remove the taint by re-running with a trailing minus, key=value:NoSchedule-, and note that tainting an active node can strand pods.