Beyond Namespaces: Why Kubernetes Needs Real Workload Isolation(thenewstack.io)

https://thenewstack.io/beyond-namespaces-why-kubernetes-needs-real-workload-isolation/