on the resource part - try running k8s on Talos linux. much less overhead.