Skip to content

Add possibility to run kaniko builder in user namespace #2990

@mueckinger

Description

@mueckinger

Is your feature request related to a problem?
Kaniko must be run as root. This is a problem in security aware environments.

Which solution do you suggest?
Possibility to run kaniko builder in it's own user namespace, which is enabled by default since Kubernetes v1.33.
This requires to set hostUsers: false in the PodSpec.

Which alternative solutions exist?
None that I am aware of.

Additional context
Kubernetes Blog - Kubernetes v1.33: User Namespaces enabled by default!
Linux user namespaces

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind/featureNew feature or feature request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions