Kubernetes capabilities/privileges

Describes all the capabilities/privileges that Bugsnag On-premise uses in Kubernetes

Capabilities

  • IPC_LOCK - For increasing memlock limit on the node running Elasticsearch
  • SYS_RESOURCE - For increasing memlock limit on the node running Elasticsearch

Privileges

  • Privileged containers - For increasing the mmap counts on the node running Elasticsearch