It's basically a k8s operating system of sorts. One that basically boots up as a k8s node and that's all it does. You can't log in to it or interact with it other than as a k8s node. That reduces complexity, attack surface and makes things very repeatable