Current behavior in Cluster Autoscaler is to taint nodes before scaling them down to prevent workloads from getting scheduled while the underlying VM is getting removed. There is a feature flag that additionally cordons (i.e. sets "unschedulable" bit on the node object) such nodes, which also covers pods with wildcard toleration. We are planning to flip that feature flag to true by default in CA 1.34 and eventually to remove it in a future release (
issue,
PR). If you have any concerns regarding this change, please comment on the linked issue.