And one day, 6 years later, user namespaces support in K8s is GA!
Mostly courtesy of @giuseppe@fosstodon.org and I. But @haircommander@hachyderm.io , Sascha Grunert, and many others helped too!
I created a series of posts, explaining the problems and the implementation details.
If you, like me, are generally curious, take a look :)
🔹 Part I - All You Need to Know: https://blog.sdfg.com.ar/posts/userns-in-kubernetes-part-i/
🔹 Part II - Mappings and File Ownership: https://blog.sdfg.com.ar/posts/userns-in-kubernetes-part-ii/
🔹Part III - The Implementation: https://blog.sdfg.com.ar/posts/userns-in-kubernetes-part-iii/