kubernetes.io › blog › 2026 › … Kubernetes v1.36: User Namespaces in Kubernetes are finally GA … When hostUsers: false is set, capabilities like CAP NET ADMIN become namespaced , meaning they grant administrative power over container local resources without affecting the host. … Apr 23, 2026