ECK TestFleet* is failing #7790
Comments
|
@cmacknz could you help us assess what the problem might be? It is an older version of the stack, 8.1.3, that we are testing here that might have known issues. If that were the case we would be also glad for some guidance for which versions to mute our tests. |
|
From the logs posted here, this is what I see:
I suspect that Fleet Server restarting is going to be the root cause here but I can't tell why it is shutting down in the logs. Fleet Server doesn't actually depend on Kibana at all, it depends on Elasticsearch and information between Fleet Server and Kibana is exchanged via the .fleet indices. Was Elasticsearch working as expected during this test? Are there any more Fleet Server logs besides those posted here? |
Cluster was green with the following indices: I can't find any error in the logs.
Sorry for the screenshot, I have some issues when I try to get an export: 
Please note that Kibana has used my TZ (GMT+2) in the screenshot above |
|
@michel-laterman does anything jump out in these 8.1.3 agent logs? |
|
The "Fleet Server - Waiting in policy..." message indicates that the policy self-monitor is awaiting for the policy to be detected, but |
|
So the problem may be Kibana after all. |
|
yes, i think it's written by kibana. but i'm not sure why there's no error logs from fleet-server to indicate the reason for the shutdown |
|
I'll try to reproduce it in my dev env, with log level increased. |
|
FWIW the last successful run was on Saturday |
😞 |
|
I reproduced the problem in our CI, attempted to run the Agent diagnostic tool using https://github.com/elastic/eck-diagnostics/, but for some reasons there is no Agent diagnostic data in the archive 😞 I also attempted to enable debug logs without success, it does not seem to give us more logs, I'm a bit out of ideas... |
|
We seem to hit a similar failure on 8.15.0-SNAPSHOT as well |
|
I think I was able to repro this on my dev cluster, and I saw no container kills or pod restarts but on the node where the agent pods were running, I see the agent process being continously OOM killed |
|
It seems like the jump in memory usage actually occurs in 8.14.0 and not 8.13.0, summarizing some measurements from Slack: 8.13.0: 8.14.0+ |
|
The heap profiles in the agent diagnostics in the ECK build failures aren't particularly helpful, all 3 look like: 
|
cmacknz
changed the title
|
Pinging @elastic/elastic-agent-control-plane (Team:Elastic-Agent-Control-Plane) |
|
@cmacknz the original issue here was related to fleet server restarting, the issue I mentioned is related to the elastic agent, could this be two separate issues? just want to make sure. |
|
Quite possibly yes, fleet server could also be OOMing as the root cause there, but all we have confirmed so far is that agent in 8.14+ seems to use more baseline memory (or more memory at startup) then it did before. I can fork off the second problem into a second issue if that makes things clearer. |
|
might be better until we know for sure the two issues are related. |
|
Looking at the issue description, at least the symptom |
cmacknz
changed the title
|
I created elastic/elastic-agent#4730 specifically about the agent memory usage increase, I am going to send this one back to the ECK repository to track the test failures. As discussed on Slack, the best initial mitigation would be to increase the memory limit and confirm it fixes the tests. We have a similar issue we've detected in MKI which is probably the same root cause. elastic/elastic-agent#4729 |
https://buildkite.com/elastic/cloud-on-k8s-operator-nightly/builds/530:
I had a closer look at
TestFleetMode/Fleet_in_same_namespace_as_Agent:2024-04-29T23:03:21.220427957Z-TestFleetMode/Fleet_in_same_namespace_as_Agent/ES_data_should_pass_validationsstarts2024-04-29T23:18:21.222389355Z- Failure with{Status:404 Error:{CausedBy:{Reason: Type:} Reason:no such index [logs-elastic_agent-default]Agents
The 3 Agents have the same exact same final log lines:
{ "log.level": "error", "@timestamp": "2024-04-29T23:10:26.530Z", "log.origin": { "file.name": "fleet/fleet_gateway.go", "file.line": 206 }, "message": "Could not communicate with fleet-server Checking API will retry, error: fail to checkin to fleet-server: Post \"https://test-agent-fleet-fs-w6xh-agent-http.e2e-fo9kn-mercury.svc:8220/api/fleet/agents/e94192f6-77db-431e-929e-98a11f267d6b/checkin?\": dial tcp 10.56.235.142:8220: connect: connection refused", "ecs.version": "1.6.0" }{ "log.level": "error", "@timestamp": "2024-04-29T23:15:23.323Z", "log.origin": { "file.name": "fleet/fleet_gateway.go", "file.line": 206 }, "message": "Could not communicate with fleet-server Checking API will retry, error: fail to checkin to fleet-server: Post \"https://test-agent-fleet-fs-w6xh-agent-http.e2e-fo9kn-mercury.svc:8220/api/fleet/agents/bc83885c-c297-44a9-95db-b5471fba15e8/checkin?\": dial tcp 10.56.235.142:8220: connect: connection refused", "ecs.version": "1.6.0" }{ "log.level": "error", "@timestamp": "2024-04-29T23:16:30.150Z", "log.origin": { "file.name": "fleet/fleet_gateway.go", "file.line": 206 }, "message": "Could not communicate with fleet-server Checking API will retry, error: fail to checkin to fleet-server: Post \"https://test-agent-fleet-fs-w6xh-agent-http.e2e-fo9kn-mercury.svc:8220/api/fleet/agents/4509833f-ba40-41d1-b164-fd29009b01ab/checkin?\": dial tcp 10.56.235.142:8220: connect: connection refused", "ecs.version": "1.6.0" }Fleet Server
Fleet server seems to restart quite often, last start is 13 minutes after the Pod has been created:
{ "apiVersion": "v1", "kind": "Pod", "metadata": { "creationTimestamp": "2024-04-29T23:03:16Z", "name": "test-agent-fleet-fs-w6xh-agent-6bdfbbdc7f-m5dpk", "namespace": "e2e-fo9kn-mercury", } "status": { "containerStatuses": [ { "image": "docker.elastic.co/beats/elastic-agent:8.1.3", "lastState": { "terminated": { "exitCode": 1, "finishedAt": "2024-04-29T23:15:23Z", "reason": "Error", "startedAt": "2024-04-29T23:13:16Z" } }, "name": "agent", "ready": true, "restartCount": 5, ### WHY ? "started": true, "state": { "running": { "startedAt": "2024-04-29T23:16:53Z" ## ~13 minutes after the Pod has been created } } } ],Looking at the logs of a previous container instance:
I think the question is what is the root cause of this
fleet-server failed: context canceled?Kibana
On the Kibana side the container has been oomkilled once but seems to be ready way before Agent as expected:
{ "containerID": "containerd://2abe4cde65635722a5fdc84cf3502b33c3567fbffdea8d58f2e8f4079a49e56b", "image": "docker.elastic.co/kibana/kibana:8.1.3", "imageID": "docker.elastic.co/kibana/kibana@sha256:1d7cd5fa140df3307f181830b096562c9f2fc565c94f6f9330aa2313ecb7595c", "lastState": { "terminated": { "containerID": "containerd://e14eb76e157c85b18a44d60ea21ffdf0fb475ee54a9e0bedf6843e2381ed4ed7", "exitCode": 137, "finishedAt": "2024-04-29T23:00:39Z", "reason": "OOMKilled", "startedAt": "2024-04-29T23:00:00Z" } }, "name": "kibana", "ready": true, "restartCount": 1, "started": true, "state": { "running": { "startedAt": "2024-04-29T23:00:39Z" } } }In the Kibana logs we have a few
401from23:02:39.664+00:00to23:02:45.162+00:00, which might be related to the operator trying to callhttps://test-agent-fleet-qj5h-kb-http.e2e-fo9kn-mercury.svc:5601/api/fleet/setup(last401. in the operator is at23:02:45.193Z). Seems to be ok otherwise.The text was updated successfully, but these errors were encountered: