We had this a couple of times in the past (T363086,T362938) :
When a kubernetes node is set pooled=inactive scap still tries to run mediawiki-image-download and fails(?) if the server is not reachable:
15:08:17 /usr/bin/sudo /usr/local/sbin/mediawiki-image-download 2024-05-01-150512-publish (ran as mwdeploy@mw2382.codfw.wmnet) returned [255]: ssh: connect to host mw2382.codfw.wmnet port 22: Connection timed out
IIUC inactive mediawiki appservers do not receive code via scap, I think it should behave the same in this case.
Alternatively there could be a threshold of failed targets (like if 10% of hosts fail mediawiki-image-download it's still fine).