Resource isolation restricts a container to specified amounts of host CPU, memory, or other system resources. Kubernetes prevents the container from using more than its allocation, allowing multiple applications to share one host safely. section 1.1.1
Containers provide much of the isolation of virtual machines with less image size and CPU or memory overhead because they share the host kernel. This lets teams run more applications on each host and reduce infrastructure costs. section 1.1.1
Resource isolation supports practical deployment goals:
- Run services with different dependencies on the same host. section 1.1.1
- Pack more applications onto available infrastructure without allowing one container to consume unlimited host resources. section 1.1.1
Compare multiple fully isolated containers sharing one host kernel. section 1.1.1


