Container Runtime Environment with Distributed Monitoring Tasks and Minimum Privileges

A system comprising:

• a technical device with container runtime environment;
• and
• a superordinate management system assigned to the technical device;
• wherein the container runtime environment comprises:
• container application instances;
• and
• container monitoring instances;
• wherein the container monitoring instances monitor the container application instances;
• monitoring of the container application instances includes subdivided monitoring tasks;
• each monitoring task is assigned at least one privilege exclusively enabling an execution of the respective assigned monitoring task;
• execution of the monitoring task comprises enforcement of an assigned set of rules;
• the container monitoring instances are each allocated monitoring task;
• and
• the container monitoring instances each have the at least one privilege assigned to their monitoring task.