What would you like to be added:
Kubernetes 1.33+ offers user namespaces which further isolates users from the system and other pods on the same host.
Why is this needed:
While this runs as non-root, user namespace isolation would further isolate this from the rest of the system.
NOTE: kind doesn't support hostUsers: false
/kind feature
What would you like to be added:
Kubernetes 1.33+ offers user namespaces which further isolates users from the system and other pods on the same host.
Why is this needed:
While this runs as non-root, user namespace isolation would further isolate this from the rest of the system.
NOTE:
kinddoesn't supporthostUsers: false/kind feature