Skip to content

chore: add user namespace requirement #725

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
chalindukodikara merged 1 commit into from
Jun 16, 2026
Merged

chore: add user namespace requirement #725

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion docs/getting-started/try-it-out/on-k3d-locally.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -50,7 +50,7 @@ npx skills add openchoreo/skills --skill openchoreo-setup
| -------------------------------------------------- | ---------------------- | ------------------------- |
| [Docker](https://docs.docker.com/get-docker/) | v26+ (8 GB RAM, 4 CPU) | Container runtime |
| [k3d](https://k3d.io/stable/#installation) | v5.8+ | Local Kubernetes clusters |
| [kubectl](https://kubernetes.io/docs/tasks/tools/) | v1.32+ | Kubernetes CLI |
| [kubectl](https://kubernetes.io/docs/tasks/tools/) | v1.33+ | Kubernetes CLI |
| [Helm](https://helm.sh/docs/intro/install/) | v3.12+ | Package manager |

Verify everything is installed:
Expand Down
23 changes: 21 additions & 2 deletions docs/getting-started/try-it-out/on-your-environment.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -48,10 +48,22 @@ npx skills add openchoreo/skills --skill openchoreo-setup

| Tool | Version | Purpose |
| -------------------------------------------------- | ------- | --------------- |
| [kubectl](https://kubernetes.io/docs/tasks/tools/) | v1.32+ | Kubernetes CLI |
| [kubectl](https://kubernetes.io/docs/tasks/tools/) | v1.33+ | Kubernetes CLI |
| [Helm](https://helm.sh/docs/intro/install/) | v3.12+ | Package manager |

Recommended cluster baseline: Kubernetes 1.32+, LoadBalancer support, and a default StorageClass.
Recommended cluster baseline: Kubernetes 1.33+, LoadBalancer support, and a default StorageClass.

:::warning User namespaces required
OpenChoreo's default build workflows run Argo Workflow pods that opt in to Kubernetes [user namespaces](https://kubernetes.io/docs/concepts/workloads/pods/user-namespaces/) by setting `hostUsers: false`. Use **Kubernetes 1.33 or newer**; Kubernetes 1.33 enables user namespaces by default when the node stack supports them.

Every Linux node that can run Workflow Plane build pods must also provide:

- **Linux kernel 6.3 or newer**
- **containerd 2.0 or newer** or **CRI-O 1.25 or newer**
- **runc 1.2 or newer** or **crun 1.9 or newer**

See the [Kubernetes user namespaces guide](https://kubernetes.io/docs/concepts/workloads/pods/user-namespaces/) for details.
:::

Verify everything is installed:

Expand All @@ -62,6 +74,13 @@ kubectl get nodes
kubectl auth can-i '*' '*' --all-namespaces
```

Verify the node kernel and CRI runtime reported by Kubernetes:

```bash
kubectl get nodes \
-o custom-columns=NAME:.metadata.name,KERNEL:.status.nodeInfo.kernelVersion,RUNTIME:.status.nodeInfo.containerRuntimeVersion,KUBELET:.status.nodeInfo.kubeletVersion
```

## Step 1: Install Prerequisites

These are third-party components that OpenChoreo depends on. None of them are OpenChoreo-specific, they are standard Kubernetes building blocks.
Expand Down