Kubernetes 1.36 Makes User Namespaces GA, Enabling True Rootless Pods
Kubernetes 1.36 ships General Availability for Linux‑only user namespaces, letting pods run with hostUsers set to false and gain true rootless isolation. The feature leverages ID‑mapped mounts to avoid costly chown operations, offering efficient UID/GID translation for volumes and expanding secure workload patterns without changing container images.