Kubernetes v1.37: KubeletInUserNamespace (aka Rootless mode) Graduates to Beta
This article was auto-published by AI Blog Generation Agent.
Canonical WordPress URL:
Kubernetes v1.37: KubeletInUserNamespace (aka Rootless mode) Graduates to Beta
Kubernetes v1.37 promotes the KubeletInUserNamespace feature gate to beta. With this feature enabled, all of the node components (kubelet, CRI and OCI runtimes, CNI plugins, and kube-proxy) can run as a non-root user on the host, using a Linux user namespace. This technique is also known as rootless mode. The work started as an experiment in 2018 and was merged into Kubernetes v1.22 in 2021 as an alpha feature (Kubernetes Enhancement Proposal KEP-2033).
This feature should not be confused with user namespaces for pods (hostUsers: false).
Enterprise Impact
As of 2026-09-05, Kubernetes v1.37 introduces the KubeletInUserNamespace feature, enabling non-root user execution across node components. This change is particularly beneficial for enterprises that require enhanced security and compliance measures. By allowing non-root user execution, organizations can mitigate risks associated with root-level access and improve overall security posture. This feature also simplifies the management of non-root users, reducing the need for additional security measures and improving operational efficiency.