pepemon

Well maybe they will either backport or accept community implementation of merge request approval functionality now [1]. With all kudos to the GitLab team, absence of this feature while all other major players free tiers have it is quite a nonsense. Anyway, GitLab is really solid platform with pleasant OOBE. Always recommend it to anyone.

[1] https://gitlab.com/gitlab-org/gitlab/issues/20696

Please elaborate on "more and more IT guys I know move over to Free/OpenBSD" and your mentioned easiness of migration.

I can't see how Kubernetes belongs to this problem. It's just the tool for getting specific things done, not some kind of silver bullet. You can build your application layer around Kubernetes, leveraging its primitives and integrating your services tightly, or you can leave it as be (wow). I currently maintain few clusters with managed control plane for hosting some monolith apps. Just a couple of fat worker nodes for failover, ingress with nice metrics and benefits of containerization... and that's it. No need to push for fully decoupled microservice architecture with service mesh that eats more CPU than your app (sarcasm, but not so far from the reality). Just use your tool right.

There are distributed primitives in Kubernetes (such as leader lock), so you won't have to roll your own "architecture". For example, look at Patroni, it can be run natively on Kube, using its resources for all distributed and redundancy goodness.

You can't switch networking for Swarm Mode

Out of curiosity, why do you need RHEL or subscription from Canonical for the production Kubernetes setup? What's wrong with plain Ubuntu or CentOS?

Docker is using containerd under the hood as its container runtime component.

Please elaborate more about security. What can be so seriously wrong on non-rooted device?