Wiz publishes guidance on Kubernetes user namespaces

Wiz has published guidance on using user namespaces to strengthen Kubernetes cluster security. The feature, introduced in Kubernetes v1.25, is explained in a new resource from the company.

The guidance notes that user namespaces are still in alpha and not production ready, and that the only place they can be tested in managed clusters is Google Kubernetes Engine (GKE) alpha clusters. It also highlights that over 30% of pods run with host-shared namespaces and 44% have problematic volumes mounted, indicating that the feature is ill-suited to a significant portion of production workloads.