The problem is that it's often simple at first until you dive into the management of the cluster.

Then you run into a litany of issues with networking (like you mentioned SSL termination) and stateful apps or databases.

Even in this thread, someone mentioned how Redis defaults lead to a lot of issues in containers.