Abstract: Examples of the present disclosure describe systems and methods for. In some examples, a software agent collects data from a node, such as logs or monitoring information, and provides the data to a controller. The controller assesses the attestation state and the configuration drift of the node. In some examples, the controller applies a taint to the node, which may indicate a condition or constraint on the node. A scheduler manages the workloads on the node based on the attestation state, the configuration drift, and in some examples, the taint of the node. The scheduler decides whether to schedule a workload to the node, evict a workload from the node, or keep a workload on the node depending on the attestation state and configuration drift of the node, for example, whether the workload has a toleration for the taint of the node.