It'd be nice to editorialize the title a bit with "... (for dev envs)" for clarity. Super useful negative example, and the lengths they pursued to make it fit!

It'd be nice to editorialize the title a bit with "... (for dev envs)" for clarity. Super useful negative example, and the lengths they pursued to make it fit! And no knock on the initial choice or impressive engineering, as many of the k8s problems they hit likely weren't understood gaps at the time they chose k8s. Which makes sense, given k8s roots in (a) not being a security isolation tool & (b) targeting up-front configurability over runtime flexibility. Neither of which mesh well with the co-hosted dev environment use case.