Spotlight

User namespaces in Kubernetes: the implementation

Rodrigo Campos Catelin

This article explains how Kubernetes user namespaces are implemented through pod UID/GID range allocation, idmap mounts, containerd, runc, and safeguards against privilege escalation.

More articles →

Tools and utilities

  • PIQC: vLLM inference fact collector for Kubernetes

    PIQC scans Kubernetes clusters for vLLM and Ray Serve workloads, collects GPU, model, cost, utilization, KV cache, and waste facts, then prints an actionable inference cost report.

  • Kubeswitch: switch contexts

    Kubeswitch is a command-line tool to ease switching between different kubectl contexts.

  • Okteto: Kubernetes Development Platform

    Okteto is a development platform that creates production-like Kubernetes environments with live code sync, allowing developers to code directly in clusters without local setup or Docker builds.

  • Reloader: controller to watch changes and restart

    Reloader is a Kubernetes controller that monitors changes in ConfigMap and Secrets and triggers rolling upgrades on Pods with their associated Deployment, StatefulSet or DaemonSet.

  • KubeGUI: Kubernetes admin UI

    KubeGUI is a desktop application that provides a graphical interface for managing Kubernetes clusters with resource visualization and management capabilities.

More projects →

Events starting soon

Discover more events onn Kube Events →

From KIAM to EKS Pod Identities
From KIAM to EKS Pod Identities

An unmaintained identity component can remain invisible until a routine Kubernetes upgrade turns it into an incident.

Fabián Sellés Rosa, Platform Engineer and Runtime Tech Lead at Adevinta, explains how his team moved from KIAM to EKS Pod Identities without discarding the security boundaries and application interface that their internal platform depended on.

In this interview:

  • Why KIAM became urgent to replace after years of stable operation
  • How Crossplane, a custom controller, and KRO with ACK compared against the team's criteria
  • Why managed EKS Capabilities reduced toil but introduced observability and rollout trade-offs
  • How Kyverno preserved namespace-level authorization for IAM roles

Learn from production

More case studies →

Matching jobs

    • DevOps Engineer with Mark43

    • Salary: $155K to $170K a year

    • Location: remote from

    • Tech stack: Kubernetes, Docker, Terraform

    • DevOps Engineer with RobCo

    • Salary: US$70.74K to US$440K a year

    • Location: based in the office in Munich, DE

    • Tech stack: Kubernetes, AWS, Go, Python, Terraform, Datadog, Grafana, Prometheus

    • Site Reliability Engineer with MyFitnessPal

    • Salary: $120K to $165K a year

    • Location: remote from

    • Tech stack: Kubernetes, AWS, Docker, Go, Python, Typescript, Terraform, GitHub Actions, Datadog

    • AI Enterprise Technical Program Manager with Redhorse Corporation

    • Salary: $37 to $485.65K a year

    • Location: based in the office in Arlington, VA, USA

    • Tech stack: Kubernetes, AWS, Azure, Docker, Spark

Discover more Kubernetes jobs on Kube Careers →

Subscribe to Learn Kubernetes Weekly

Trusted by 77K engineers. Delivered 194 issues and counting.

or subscribe via

Build something

More tutorials →

Call for Papers closing soon

  1. 8

    days

    AI Coding Summit Berlin

    The Call For Paper is open until 12 August 2026 at GMT-4. More info →
    • Location: Berlin, DE and virtual

    • Online & in-person conference organized by GitNation.

    • The conference starts on the 4 December 2026.

    • Apply here
  2. 10

    days

    Cloud Native AI Summit Europe

    The Call For Paper is open until 14 August 2026 at GMT-4. More info →
    • Location: Paris, FR

    • In-person conference organized by mate.dev.

    • The conference starts on the 3 December 2026.

    • Apply here
  3. 11

    days

    Cloud Security Space 2026

    The Call For Paper is open until 15 August 2026 at GMT-4. More info →
    • Location: Buenos Aires, AR

    • In-person conference organized by Cloud Security Space.

    • The conference starts on the 9 October 2026.

    • Apply here
  4. 11

    days

    Kubernetes Community Days Suisse Romande 2026

    The Call For Paper is open until 16 August 2026 at GMT-4. More info →
    • Location: Geneva, CH

    • In-person conference organized by KCD Suisse Romande.

    • The conference starts on the 9 December 2026.

    • Apply here
  5. 24

    days

    Monster Scale Summit 2027

    The Call For Paper is open until 28 August 2026 at GMT-4. More info →
    • This is a virtual event

    • Online conference organized by ScyllaDB.

    • The conference starts on the 11 March 2027.

    • Apply here
  6. 26

    days

    Devopsdays Warsaw

    The Call For Paper is open until 30 August 2026 at GMT-4. More info →
    • Location: Warsaw, PL

    • In-person conference organized by Devopsdays.

    • The conference starts on the 23 November 2026.

    • Apply here
  7. 26

    days

    Devopsdays Recife

    The Call For Paper is open until 30 August 2026 at GMT-4. More info →
    • Location: Recife, BR

    • In-person conference organized by Devopsdays.

    • The conference starts on the 12 December 2026.

    • Apply here

Thanks to our sponsors who make Kube Today possible

Find out more about being a sponsor →

More articles

Even more articles →