carvel-dev / carvel-dev/kapp

gke auth config-helper is hitting against too many open files

Open
#30 5 comments 2 reactions 0 assignees View on GitHub
enhancement good first issue helping with an issue
Dominant language
Go
Stars
1.1k
Forks
134
PR merge metrics
No merged PRs in 30d

Description

@andyshinn reported following error during `kapp deploy`.

```
Error: Listing schema.GroupVersionResource{Group:"certificates.k8s.io", Version:"v1beta1", Resource:"certificatesigningrequests"}, namespaced: false: Get https://x.x.x.x/apis/certificates.k8s.io/v1beta1/certificatesigningrequests?labelSelector=kapp.k14s.io%2Fapp%3D1565298894854176000: error executing access token command "/usr/local/Caskroom/google-cloud-sdk/latest/google-cloud-sdk/bin/gcloud config config-helper --format=json": err=pipe: too many open files output= stderr=
```

it appears that number of allowed open fds is exceeded due to gke auth.

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the failure during `kapp deploy` with GKE authentication and inspect file-descriptor usage around `gcloud config config-helper --format=json`. Trace how the authentication command is invoked and confirm that repeated Kubernetes API access does not exhaust open files; done when the reported error no longer occurs under the same conditions.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, google-cloud, kubernetes
Domain
authentication, cli, devops
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.