usernetes
usernetes copied to clipboard
master components do not need to be executed inside RootlessKit
etcd and kube-{apiserver,scheduler,controller-manager} do not require privileges and should be executed as a plain old rootless user without nsentering into RootlessKit's USER+MNT+NET namespaces.