k8s: Kubernetes v1.36: User Namespaces in Kubernetes are finally GA

Kubernetes v1.36 makes User Namespaces GA on Linux, allowing Pods to run with hostUsers: false so container root is isolated from host root. The release also relies on ID-mapped mounts to avoid recursive chown on volumes, improving startup performance and preserving on-disk ownership.

• Source: Kubernetes Official Blog