The ACM subscription and klusterlet allow for tolerations for infra nodes to be added when installing the operator however, custom tolerations do not apply to all objects. Specifically if the taint on the node is a custom taint and not the typical `node-role.kubernetes.io/infra` key. 

We often also have customers that want to use custom taints for worker nodes to keep pods on specific worker nodes and run other workloads on nodes not being used by ACM and while some of the objects created will honor what tolerations we set other will revert to the `node-role.kubernetes.io/infra`. Specifically in Deployments created by the KlusterletAddonConfig in the spoke (managed) clusters. We need all objects to honor any/all tolerations we define if they are required to run on infra nodes or specific worker nodes.