True, and that's why I think a managed Kubernetes service like GKE is the way to go. It's almost like a PaaS but you still have a lot of the control.
https://cloud.google.com/kubernetes-engine/
https://azure.microsoft.com/en-us/services/container-service...
https://www.ibm.com/cloud/container-service
Or have someone knowledgeable build the service for you.
It's using a new networking model: https://github.com/aws/amazon-vpc-cni-k8s
> Alpha This is an experimental release as part of the Amazon EKS Preview. Interfaces and functionality may change. Expect bugs (and please help us squash them). DO NOT use for production workloads.