I didn't really buy wholly into containers for a while either, but the tools have gotten better, the process makes it easier to tick the security boxes, and the

I didn't really buy wholly into containers for a while either, but the tools have gotten better, the process makes it easier to tick the security boxes, and the confidence brought about by immutable deployments and having good visibility into the service state has been really valuable in a growing environment. No more "oh yeah, we poked at ulimit on that server late Friday night, that's why the other ones don't work as well" and so on. No fiddling around with multiple python or java environments. Keep after the details and you can end up not even having anything to ssh into at all--really get out of the game of "server touching" if you will.