Merge pull request #27160 from dnlzro/main

docs: clarify that `--userns=keep-id` runs container as host UID

Author: openshift-merge-bot[bot]

docs/source/markdown/options/userns.container.md

@@ -56,6 +56,8 @@ For details see **--uidmap**.
 
 **keep-id**: creates a user namespace where the current user's UID:GID are mapped to the same values in the container. For containers created by root, the current mapping is created into a new user namespace.
 
+  In addition, the init process within the container will run under the current user's UID. This behavior overrides the image's `USER` instruction unless you explicitly set `--user`.
+
   Valid `keep-id` options:
 
   - *uid*=UID: override the UID inside the container that is used to map the current user to.