Epic Goal

• run pods in a separate user namespace for improved security

Why is this important?

It increases separation among pods, as each pod runs in a separate namespace with unique user IDs

Acceptance Criteria

• CI - MUST be running successfully with tests automated
• Release Technical Enablement - Provide necessary release enablement details and documents.

Dependencies (internal and external)

1. upstream KEP: https://github.com/kubernetes/enhancements/issues/127
2. idmapped support in the RHEL kernel: https://bugzilla.redhat.com/show_bug.cgi?id=2080319

Open questions::

1. …

Done Checklist

• CI - CI is running, tests are automated and merged.
• Release Enablement <link to Feature Enablement Presentation>
• DEV - Upstream code and tests merged: <link to meaningful PR or GitHub Issue>
• DEV - Upstream documentation merged: <link to meaningful PR or GitHub Issue>
• DEV - Downstream build attached to advisory: <link to errata>
• QE - Test plans in Polarion: <link or reference to Polarion>
• QE - Automated tests merged: <link or reference to automated tests>
• DOC - Downstream documentation merged: <link to meaningful PR>