gVisor

Hardening Kubernetes Nodes: Sandboxing Containers with gVisor & RuntimeClasses

Learn how to improve Kubernetes workload isolation using gVisor and RuntimeClasses. Understand how containers interact with the Linux kernel, why shared kernels are a security concern, and how to run sandboxed workloads with minimal overhead.