I've migrated a Rancher K3S cluster with terraform from 3 all-in-one nodes (ctrl-plane, etcd, worker) to 3 ctrl-plane+etcd and 4 workers only
Now I was expecting that the workload will only run on the workers but I see pods being scheduled on the ctrl-plane+etcd nodes as well. Is this expected? Do I need to set taints manually? If so which ones so that the normal control-plane stuff is not affected?