https://curadevops.metacog.co.kr/tags/rootless/Recent content in Rootless on CuraDevOpsHugoen-usSat, 05 Sep 2026 13:37:34 +0000https://curadevops.metacog.co.kr/insights/2026-09-05-kubernetes-v1-37-kubeletinusernamespace-aka-rootless-mode-gr/Sat, 05 Sep 2026 13:37:34 +0000https://curadevops.metacog.co.kr/insights/2026-09-05-kubernetes-v1-37-kubeletinusernamespace-aka-rootless-mode-gr/<ul> <li><strong>Platform/SRE — Learn:</strong> Beta (pre-GA) cap applies, but this is worth evaluating: running kubelet and container runtimes in a Linux user namespace reduces blast radius of node-component CVEs like cr8escape and the 2023 runc procfs bypass; test in non-production clusters before v1.38 targets GA.</li> <li><strong>CI/CD — Skip</strong></li> <li><strong>Leader — Learn:</strong> Rootless-node mode reaching beta signals a maturing Kubernetes security posture option; relevant context for teams in regulated industries evaluating host-isolation requirements, but no adoption decision warranted before GA.</li> <li><strong>Signals:</strong> Kubernetes 1.37 EOL 2027-10-28 · Kubernetes 1.22 is past EOL (2022-10-28, 1408d ago) · pre-GA (alpha/beta/RC/preview) · CVE-2019-19921 — CISA KEV: not listed, EPSS 0.00 · CVE-2022-0811 — CISA KEV: not listed, EPSS 0.19 · CVE-2023-27561 — CISA KEV: not listed, EPSS 0.00</li> </ul>