Replace the container runtime used by every node.

Create a separate physical Kubernetes cluster for every application.

Automatically give every pod a public host-network address.

Organize and logically isolate namespaced workloads and resources within one cluster.