diff --git a/pkg/kubelet/kuberuntime/kuberuntime_container_linux.go b/pkg/kubelet/kuberuntime/kuberuntime_container_linux.go index 3cb9c968fb1..4c753b466f3 100644 --- a/pkg/kubelet/kuberuntime/kuberuntime_container_linux.go +++ b/pkg/kubelet/kuberuntime/kuberuntime_container_linux.go @@ -54,6 +54,15 @@ func (m *kubeGenericRuntimeManager) applyPlatformSpecificContainerConfig(config return err } config.Linux = cl + + if utilfeature.DefaultFeatureGate.Enabled(kubefeatures.UserNamespacesStatelessPodsSupport) { + if cl.SecurityContext.NamespaceOptions.UsernsOptions != nil { + for _, mount := range config.Mounts { + mount.UidMappings = cl.SecurityContext.NamespaceOptions.UsernsOptions.Uids + mount.GidMappings = cl.SecurityContext.NamespaceOptions.UsernsOptions.Gids + } + } + } return nil }