Comment by richardwhiuk

Or use something like GKE where the containers should be running directly on hardware, so you only have one layer.