The problem is you never seem to have enough time to do the job properly! By dint of hacking around it's certainly possible to get something to work but it takes a lot longer to become comfortable with all of the configuration possibilities and what is the best choice as opposed to a choice that just gets stuff working. The worst offender, in my opinion, is the security configuration. All of the critical stuff, such as hooking up the actual authentication, is left up to the container vendors. It may have to be this way but the fact that each new release of a container provides a new and different set of APIs for making this connection doesn't help.