Question: I notice when throwing load at our service on GKE the backend service reports 5xx from the backend service. Looking at our backend service there are no 500s coming from our service, so it must be something else in the data stream. Any ideas where I should start looking?

Asked By
matthew065
Asked At
2018-03-15 23:54:06

Found 15 possible answers.

User Answered At Possible Answer
knepperjm 2018-03-16 00:20:56 can you have a liveliness probe hit a service endpoint?
matthew065 2018-03-16 00:22:46 I have one
knepperjm 2018-03-16 00:23:18 i need my logstash container to come up after my es container
matthew065 2018-03-16 00:25:43 you could create a initContainers: that blocks until es is up.
knepperjm 2018-03-16 00:25:58 great idea - i'll try that
highwayoflife 2018-03-16 00:32:24 @davidmaitland SUPER! Thanks for the tip! I'
knepperjm 2018-03-16 00:32:52 what kind of service are you using? for your microservice 65k is the max open files, but this is without knowing what type of server or proxy you are using if on GKE use the LoadBalancer type and if you start getting 500s be sure that your OS has proper ulimits set - if you can't set them scale out horizontally.
chobomuffin 2018-03-16 00:51:39 does anyone use Tectonic? Is it worth it? How much is it?
graham.burgess 2018-03-16 00:52:40 Anyone else using Nexus as both a proxy and hosted registry?
delfick755 2018-03-16 02:29:40 Hi, is it possible to use rbac to limit listing/watching against a particular selector? For example, if I have a service with the selector app=myapp-headless and no clusterIp and I want to restrict another app to only being able to do an endpoint list/watch to those endpoints.
liggitt 2018-03-16 02:31:46 No, selector isn't part of the input to the authorizer
delfick755 2018-03-16 02:32:15 right, that's what I thought... hmmm but I'm struggling to figure out how to actually achieve that I'm making a service that can provide a grpc stream of endpoints for a selector (so I can use this to create a grpc balancer for a non clusterIp service) and we want to be able to restrict what the caller has access to
alden547 2018-03-16 02:41:41 *QUESTION FOR EVERYONE!* I've been containerizing my geodjango application with docker and was just finally able to get everything installed (only 212MB too :D) but when i run gunicorn i get the message: ImproperlyConfigured: Could not find the GDAL library (tried "gdal", "GDAL", "gdal2.1.0", "gdal2.0.0", "gdal1.11.0", "gdal1.10.0", "gdal1.9.0"). Is GDAL installed? If it is, try setting GDAL_LIBRARY_PATH in your settings. My question is where does alpine install the GDAL library? (or any library for that matter.) it works out of the box on ubuntu. PS. i had to use apk add py-gdal --update-cache --repository --allow-untrusted for getting it because its a test package
highwayoflife 2018-03-16 02:48:10 I think Alpine is a pretty slim install and might not have as many “default” packages as Ubuntu, which explains its significantly slim size. In that case, your Dockerfile will need to install the GDAL library.
alden547 2018-03-16 03:01:16 @highwayoflife yeah i run RUN apk add py-gdal --update-cache --repository --allow-untrusted in the Dockerfile

Related Questions