Kubernetes-打开的文件太多

问题描述

我正在尝试评估在Pod中运行的其中一个go服务器的性能。但是，收到一条错误消息，指出打开的文件太多。有什么方法可以在kubernetes中设置ulimit吗？

ubuntu@ip-10-0-1-217:~/ppu$ kubectl exec -it go-ppu-7b4b679bf5-44rf7 -- /bin/sh -c 'ulimit -a'
core file size (blocks)         (-c) unlimited
data seg size (kb)              (-d) unlimited
scheduling priority             (-e) 0
file size (blocks)              (-f) unlimited
pending signals                 (-i) 15473
max locked memory (kb)          (-l) 64
max memory size (kb)            (-m) unlimited
open files                      (-n) 1048576
POSIX message queues (bytes)    (-q) 819200
real-time priority              (-r) 0
stack size (kb)                 (-s) 8192
cpu time (seconds)              (-t) unlimited
max user processes              (-u) unlimited
virtual memory (kb)             (-v) unlimited
file locks                      (-x) unlimited

部署文件。

---
apiVersion: apps/v1
kind: Deployment                 # Type of Kubernetes resource
Metadata:
  name: go-ppu           # Name of the Kubernetes resource
spec:
  replicas: 1                    # Number of pods to run at any given time  
  selector:
    matchLabels:
      app: go-ppu         # This deployment applies to any Pods matching the specified label
  template:                      # This deployment will create a set of pods using the configurations in this template
    Metadata:
      labels:                    # The labels that will be applied to all of the pods in this deployment
        app: go-ppu  
    spec:                        # Spec for the container which will run in the Pod
      containers:
      - name: go-ppu 
        image: ppu_test:latest
        imagePullPolicy: Never
        ports:
          - containerPort: 8081  # Should match the port number that the Go application listens on
        livenessProbe:           # To check t$(minikube docker-env)he health of the Pod
          httpGet:
            path: /health
            port: 8081
            scheme: HTTP
          initialDelaySeconds: 35
          periodSeconds: 30
          timeoutSeconds: 20
        readinessProbe:          # To check if the Pod is ready to serve traffic or not
          httpGet:
            path: /readiness
            port: 8081
            scheme: HTTP
          initialDelaySeconds: 35
          timeoutSeconds: 20

荚信息：

ubuntu@ip-10-0-1-217:~/ppu$ kubectl get pods
NAME                           READY   STATUS    RESTARTS   AGE
go-ppu-7b4b679bf5-44rf7        1/1     Running   0          18h

ubuntu@ip-10-0-1-217:~/ppu$ kubectl get services
NAME          TYPE           CLUSTER-IP      EXTERNAL-IP                                                               PORT(S)          AGE
kubernetes    ClusterIP      100.64.0.1      <none>                                                                    443/TCP          19h
ppu-service   LoadBalancer   100.64.171.12   74d35bb2a5f30ca13877-1351038893.us-east-1.elb.amazonaws.com   8081:32623/TCP   18h

当我使用蝗虫来测试收到以下错误的服务器的性能时。

# fails Method  Name    Type
3472    POST    /supplyInkHistory   ConnectionError(MaxRetryError("httpconnectionPool(host='74d35bb2a5f30ca13877-1351038893.us-east-1.elb.amazonaws.com',port=8081): Max retries exceeded with url: /supplyInkHistory (Caused by NewConnectionError('<urllib3.connection.httpconnection object at 0x....>: Failed to establish a new connection: [Errno 24] Too many open files',))",),)

解决方法

请您看看this 您不过需要启用一些功能才能使其正常工作。

  securityContext:
sysctls:
- name: fs.file-max
  value: "YOUR VALUE HERE"

在少数情况下，需要设置--ulimit参数，您可以找到它们here或选中this article。可以在容器启动期间通过Docker设置此资源限制。当您添加标签google-kubernetes-engine时，答案将与GKE环境有关，但是在其他云上，它的工作原理可能相似。

如果要设置unlimit for open files，则可以修改配置文件/etc/security/limits.conf。但是，请注意，它不会在重新启动后仍然存在。

第二个选项是编辑/etc/init/docker.conf并重新启动docker服务。默认情况下，它有一些限制，例如nofile或nproc，您可以在此处添加。

另一个选择是使用instance template。实例模板将包括一个设置所需限制的启动脚本。之后，您将需要将此新实例模板用于GKE中的实例组。更多信息here和here。

docker google-kubernetes-engine kops kubernetes kubernetes-ingress