Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Rolling Update Kubernetes Deployment with Zero Downtime

Rolling Update Kubernetes Deployment with Zero Downtime

mkmk#12

Takeshi Kondo

August 22, 2019
Tweet

More Decks by Takeshi Kondo

Other Decks in Technology

Transcript

  1. Kubernetes manifest apiVersion: extensions/v1beta1 kind: Deployment metadata: name: "${SERVICE_NAME}" spec:

    replicas: 35 strategy: rollingUpdate: maxSurge: 21 maxUnavailable: 7 type: RollingUpdate
  2. Termination of Pods • 3. Pod shows up as “Terminating”

    when listed in client commands • 4. (simultaneous with 3) When the Kubelet sees that a Pod has been marked as terminating because the time in 2 has been set, it begins the Pod shutdown process. • 1. If one of the Pod’s containers has defined a preStop hook, it is invoked inside of the container. If the prestop hook is still running after the grace period expires, step 2 is then invoked with a small (2 second) extended grace period. • 2. The container is sent the TERM signal. Note that not all containers in the Pod will receive the TERM signal at the same time and may each require a prestop hook if the order in which they shut down matters. • 5. (simultaneous with 3) Pod is removed from endpoints list for service, and are no longer considered part of the set of running Pods for replication controllers. Pods that shutdown slowly cannot continue to serve traffic as load balancers (like the service proxy) remove them from their rotations. https://kubernetes.io/docs/concepts/workloads/pods/pod/#termination-of-pods
  3. Termination of Pods • 3. Pod shows up as “Terminating”

    • 4. (simultaneous with 3) When the Kubelet sees that a Pod has been marked as terminating • Do PreStop hook • Sent the TERM signal • 5. Pod is removed from endpoints list for service, If preStop is not set, it means that Sent the TERM signal and Pod is removed from endpoints list for service are performed asynchronously
  4. Happens asynchronously Deployment Service 35 replicas of pods Reverse Proxy

    Service Router Pod Sent the TERM signal Pod is removed from endpoints list for service
  5. Happens asynchronously Deployment Service 35 replicas of pods Reverse Proxy

    Service Router Pod Sent the TERM signal Pod is removed from endpoints list for service *G4FOUUIF5&3.TJHOBMJTEPOFFBSMJFS UIBO1PEJTSFNPWFEGSPNFOEQPJOUTMJTU GPSTFSWJDF SFRVFTUGBJMT
  6. Solution: Sleep by preStop • 3. Pod shows up as

    “Terminating” • 4. (simultaneous with 3) When the Kubelet sees that a Pod has been marked as terminating • Do PreStop hook • Sent the TERM signal • 5. Pod is removed from endpoints list for service,
  7. Conclusion • When a pod is deleted, the following happens

    asynchronously • Do PreStop and Sent the TERM signal • Pod is removed from endpoints list for service • If you do not wait synchronously with prestop, traffic will be sent after sending SIGTERM
  8. Thank You! chaspy chaspy_ / chaspy_en Site Reliability Engineer at

    Quipper Takeshi Kondo SRE Lounge Terraform-jp