Core concept
No node config, no upgrades, no scaling worries. Bin-packing done automatically. Security defaults enforced.
Advertisement
How it works
Restrictions: some namespaces reserved. Can't run privileged containers. Some CNI options unavailable.
Advertisement
Trade-offs + gotchas
Standard microservices. Teams without deep K8s expertise. Cost-sensitive small clusters (auto-scale to zero when idle).