it still depends...are you afraid of a rogue sysadmin (this in case there sysadmin and dbadmin team are different)?
k8s as a docker container is a container that handles containers? :-O
which linux chat?