[pella]

you can add extra safety like: https://gvisor.dev/ "A container sandbox runtime focused on security, efficiency, and ease of use."

[verdverm]

You could also set gvisor as the default docker runtime. I would do this except all my production belong to docker proper runtime.

Maybe I should redo my node pools on GKE now that using gvisor is a checkbox or flag

[tixocloud]

Thanks. Would gvisor be stable enough to deploy into production?

[coffekaesque]

That looks very good, thanks