kind needs a container runtime to create clusters, so only install it when a rootless Docker daemon is actually reachable (SecurityOptions reports name=rootless). Otherwise skip with a note. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>