3 ms·
according to this reddit post https://www.reddit.com/r/kubernetes/comments/1szn6p1/comment/oj4cs67/ https://www.reddit.com/r/kubernetes/comments/1szn6p1/comment
by j16sdiz 6mo ago
according to this reddit post https://www.reddit.com/r/kubernetes/comments/1szn6p1/comment/oj4cs67/ https://www.reddit.com/r/kubernetes/comments/1szn6p1/comment...?
> the primary mitigation is still patching the node kernel; user namespaces are blast-radius reduction, not a complete mitigation for this path
- parliament32 6mo agoallowPrivilegeEscalation is unrelated to user namespaces. Many vendors do not yet have kernel patches available, but yes that'll eventually be the proper fix.