Usernetes can now be deployed inside an existing Kubernetes cluster, as pods running in user namespaces (hostUsers: false, KEP-127).
This is the Kubernetes-in-Kubernetes analog of running Usernetes inside Rootless Docker: "root" in a node pod is not the root on the hosts, so as to mitigate potential container-breakout vulnerabilities of the inner cluster.
With this new mode, the project generation is bumped from Gen2 to Gen3. Gen3 is a superset of Gen2: the Kubernetes-in-Docker (Docker Compose) mode remains the default deployment mode.
Full Changelog: gen2-v20260608.0...gen3-v20260728.0