CPU by Container Is Useful Only Beside Limits
A container using one full CPU may be expected on an unrestricted worker and catastrophic for a service capped at a fraction of a core.
cgroups
OOM Events Need Container and Host Context
An application disappearing under load can be either a container memory-limit event or a host-wide memory emergency.