[donut]

> shipping on five year old containers that everyone is afraid to update and no one remembers how to build them.

That's bad. This is not the way to do it. And honestly, this isn't the fault of Docker, Kubernetes, Rancher, or any tech. Sounds like the org is broken...

[csunbird]

I second this. This can also be applied to a jar/script that somebody built 5 years ago and nobody knows how to update it.