Comment Re:it's the complexity, stupid (Score 1) 18
might I suggest running the whole thing on Node using root
Oh, you missed the whole kubernetes part of this equation. Almost all docker container services are designed to run as root on the insane notion that containerization on its own is sufficiently isolated.