I agree with your sentiment. K8s may have some more controls for the "incremental deployment" case but I'm less confident about the isolation between pods to r

I agree with your sentiment. K8s may have some more controls for the "incremental deployment" case but I'm less confident about the isolation between pods to run user provided code.