fyi A docker-biased alternative + your own tunnel encryption is thinkable as well.
https://github.com/vmware/bitfusion-with-kubernetes-integration
