You can enable user namespace isolation, but it comes with a significant number of tradeoffs. https://docs.docker.com/engine/security/userns-remap/ https://doc

You can enable user namespace isolation, but it comes with a significant number of tradeoffs. https://docs.docker.com/engine/security/userns-remap/ https://docs.docker.com/engine/security/userns-remap/ Also, Kubernetes doesn't support it. https://github.com/kubernetes/enhancements/issues/127 https://github.com/kubernetes/enhancements/issues/127