Comment by _Soulou

Currently, we are running multiple containers from different apps on the same host. These containers are running with unprivileged users and reduced capabilities but in the same network. It will probably change in the future for a higher level of isolation.