Container Isolation

[peterlamar]

As a tenant, my containers are isolated from other containers on the platform so that my workload is secure

[kenjones-cisco]

The nature of the workloads being containerized should solve that, otherwise it would more likely be an issue of resource contention. And that can be managed through limits on PODs, or providing multiple kubernetes clusters.

[altvnk]

Ref: http://www.projectcalico.org/calico-network-policy-comes-to-kubernetes/

[peterlamar]

Default Kubernetes has docker running as a root. Compromise your host and you can compromise your VM, hack the network and steal data. At least, thats how I have heard the story.