Implementing privilege capabilities for devices used for container native function operations

A method comprising:

• receiving a request for executing a container native function (CNF) using a device in a computing cluster, the CNF involving an operation associated with a privileged capability;
• determining the CNF is associated with a first credential for the privileged capability based on a data structure that stores process-level capabilities for the CNF and file handle level capabilities for the device;
• determining the device is associated with a second credential for the privileged capability based on the data structure;
• and
• in response to determining that the CNF is associated with the first credential and the device is associated with the second credential, executing the CNF using the device in the computing cluster.

A system comprising:

• a processing device;
• and
• a memory device including instructions that are executable by the processing device for causing the processing device to:
• receive a request for executing a container native function (CNF) using a device in a computing cluster, the CNF involving an operation associated with a privileged capability;
• determine the CNF is associated with a first credential for the privileged capability based on a data structure that stores process-level capabilities for the CNF and file handle level capabilities for the device;
• determine the device is associated with a second credential for the privileged capability based on the data structure;
• and
• in response to determining that the CNF is associated with the first credential and the device is associated with the second credential, execute the CNF using the device in the computing cluster.