[Agent] How we could reduce the need for root privileges for beats. about elastic-agent HOT 7 CLOSED

Original comment by @ph:

@michalpristas I know we have logic in place to control group/user that a process is executed, but at the moment I don't think we ever exposed that to the end user.

from elastic-agent.

Original comment by @ph:

cc @mattapperson for awareness.

from elastic-agent.

Original comment by @michalpristas:

also a sidenote: this should be configurable, agent is capable of running beat as a different user if configuration is provided.
we have this isolation story in the backlog for specifying namespaces when running processes, i think this should also help

from elastic-agent.

Pinging @elastic/ingest-management (Team:ingest-management)

from elastic-agent.

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

from elastic-agent.

Pinging @elastic/elastic-agent-control-plane (Team:Elastic-Agent-Control-Plane)

from elastic-agent.

Closing this as done now that there is an unprivileged Elastic Agent experience. Example on Mac: #3867

from elastic-agent.