<p>In the kubernetes documentation for running kubelet in user namespace, <a href="https://kubernetes.io/docs/tasks/administer-cluster/kubelet-in-userns/" rel="nofollow noreferrer">https://kubernetes.io/docs/tasks/administer-cluster/kubelet-in-userns/</a>, one of the requirements is:</p>
<pre><code>At least, the following directories need to be writable in the namespace (not outside the namespace):

/etc
</code></pre>
<p>How can this be achieved in a user namespace?</p>

Laurentiu Soica
<p>The part of the documentation right above where you quoted explains that:</p>
<blockquote>
<p>After unsharing the user namespace, you will also have to unshare other namespaces such as mount namespace.</p>
<p>You do <em>not</em> need to call <code>chroot()</code> nor <code>pivot_root()</code> after unsharing the mount namespace, however, you have to mount writable filesystems on several directories <em>in</em> the namespace.</p>
</blockquote>
