k8s: Kubernetes v1.36: User Namespaces in Kubernetes are finally GA
Kubernetes Official Blog
2026-04-23
Kubernetes v1.36 makes User Namespaces GA on Linux, allowing Pods to run with hostUsers: false so container root is isolated from host root. The release also relies on ID-mapped mounts to avoid recursive chown on volumes, improving startup performance and preserving on-disk ownership.