#cloudnative
Kyverno graduated: what CNCF top-level status means for Kubernetes policy
https://jorijn.com/en/blog/kyverno-cncf-graduation-kubernetes-policy/
User namespaces graduated stable in Kubernetes 1.36: pod-level isolation without gVisor
https://jorijn.com/en/blog/kubernetes-user-namespaces-pod-isolation-without-gvisor/