aws / aws/containers-roadmap

Support node-level user namespace remapping

Open
#422 10 comments 11 reactions 0 assignees View on GitHub
EKS Proposed
Dominant language
Shell
Stars
5.4k
Forks
334
PR merge metrics
No merged PRs in 30d

Description

**Tell us about your request**
Support user namespace remapping to map root inside container to non-root on host. This is good feature for container security, and give better protection against Worker Node. However it is not implemented by upstream yet, would like to know if AWS can add it to EKS.

KEP: https://github.com/kubernetes/community/pull/2067

Enhancement issue: https://github.com/kubernetes/enhancements/issues/127

@mhausenblas pls check

Contributor guide

Open the contributing guide

Research direction

Start with the linked Kubernetes KEP and enhancement issue to understand the proposed user namespace remapping design and its upstream status. Confirm whether upstream support exists before assessing EKS implementation; done would mean AWS documents or delivers support for mapping container root to a non-root host identity.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, kubernetes
Domain
cloud, infrastructure, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.