Beyond Namespaces: Why Kubernetes Needs Real Workload Isolation | Hacker News Reader