https://www.msbiro.net/tags/isolation/ Recent content in Isolation on Cloud Native & Open Source: A Team Lead’s Working Journal https://www.msbiro.net/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E https://www.msbiro.net/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E Hugo -- 0.164.0 en-us Fri, 16 May 2025 09:30:03 +0000 https://www.msbiro.net/posts/kubernetes-133-user-namespace-isolation-security-matters/ Fri, 16 May 2025 09:30:03 +0000 https://www.msbiro.net/posts/kubernetes-133-user-namespace-isolation-security-matters/ Kubernetes 1.33 enables user namespace isolation by default for pods, greatly enhancing security by mapping container root users to unprivileged host UIDs. This post explores the feature’s security benefits including process isolation and lateral movement prevention, infrastructure requirements like Linux kernel 6.3 and compatible container runtimes, and how to enable user namespaces in your pod specifications. Learn why this advancement is crucial for securing Kubernetes workloads in modern environments.