<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Userns-in-Kubernetes-Series on Rat against the machine</title><link>https://blog.sdfg.com.ar/tags/userns-in-kubernetes-series/</link><description>Recent content in Userns-in-Kubernetes-Series on Rat against the machine</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Sun, 12 Apr 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://blog.sdfg.com.ar/tags/userns-in-kubernetes-series/index.xml" rel="self" type="application/rss+xml"/><item><title>User Namespaces in Kubernetes, Part III: The Implementation</title><link>https://blog.sdfg.com.ar/posts/userns-in-kubernetes-part-iii/</link><pubDate>Sun, 12 Apr 2026 00:00:00 +0000</pubDate><guid>https://blog.sdfg.com.ar/posts/userns-in-kubernetes-part-iii/</guid><description>How user namespaces are implemented in Kubernetes: pod UID/GID range allocation, the data structures used and how containerd and runc wire up idmap mounts</description></item><item><title>User Namespaces in Kubernetes, Part II: Mappings and File Ownership</title><link>https://blog.sdfg.com.ar/posts/userns-in-kubernetes-part-ii/</link><pubDate>Sat, 11 Apr 2026 00:00:00 +0000</pubDate><guid>https://blog.sdfg.com.ar/posts/userns-in-kubernetes-part-ii/</guid><description>How user namespace UID/GID mappings interact with files, why that&amp;#39;s a problem for shared volumes, and how idmap mounts solve it.</description></item><item><title>User Namespaces in Kubernetes, Part I: All You Need to Know</title><link>https://blog.sdfg.com.ar/posts/userns-in-kubernetes-part-i/</link><pubDate>Fri, 10 Apr 2026 00:00:00 +0000</pubDate><guid>https://blog.sdfg.com.ar/posts/userns-in-kubernetes-part-i/</guid><description>User namespaces reached GA in Kubernetes 1.36. Learn how to use it, how it compares to existing security mechanisms, and what versions you need across the stack.</description></item></channel></rss>