A Kubernetes node drain is safe only when the workload can complete four separate moves: the Eviction API may remove the Pod, another eligible node can place it, the replacement becomes Ready, and the real service still works. A PodDisruptionBudget (PDB) addresses the first condition. It does ...