Kubernetes v1.37: KubeletInUserNamespace (aka Rootless mode) Graduates to Beta
First reported · 50d ago · 1 source
Crest summary — written by AI from the 1 source below; every figure is checked against them · model deepseek-chat
Summary
Kubernetes v1.37 promotes the KubeletInUserNamespace feature gate to beta, letting node components run as a non-root user on the host via a Linux user namespace.
Key facts
- Kubernetes v1.37 moves KubeletInUserNamespace to beta.
- The feature is also known as rootless mode.
- Kubelet, CRI and OCI runtimes, CNI plugins, and kube-proxy can run as non-root.
- It relies on a Linux user namespace on the host.
Why it matters
Operators can run node components without root on the host, which reduces the privileges an attacker gains from a compromised node component. The beta gate must be enabled to use it.
Technologies
- Kubernetesproduct
- Kubeletproduct
- KubeletInUserNamespaceproduct
- kube-proxyproduct
Related on Crest
Matched by rule, not by AI: a repository linked in the coverage, or a technology or company in this event that Crest tracks.
Repositories
Original sources (1)
The report this event was built from. Crest of Tech keeps no article bodies: the full text is at each source.
- KubernetesOfficial · PrimaryKubernetes v1.37: KubeletInUserNamespace (aka Rootless mode) Graduates to BetaRead at Kubernetes