concourse / concourse/concourse-chart
PreStop Hook exited with 137 blocking clean `kubectl delete pod`
Nobody has claimed this yet.
- Dominant language
- Mustache
- Stars
- 160
- Forks
- 189
- PR merge metrics
- No merged PRs in 30d
Description
Using the following command stucks for too much time:
smoke@rkirilov-work-pc ~ $ kubectl delete pod -n ci concourse-ci-worker-0
pod "concourse-ci-worker-0" deleted
When I describe the POD it is clear that the PreStop Hook did not exit clean:
smoke@rkirilov-work-pc ~ $ kubectl describe pod -n ci concourse-ci-worker-0 | cat | tail -n 12
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal Scheduled 79s default-scheduler Successfully assigned ci/concourse-ci-worker-0 to ip-10-200-3-38.ec2.internal
Normal Pulled 78s kubelet, ip-10-200-3-38.ec2.internal Container image "concourse/concourse:5.8.0" already present on machine
Normal Created 78s kubelet, ip-10-200-3-38.ec2.internal Created container concourse-ci-worker-init-rm
Normal Started 78s kubelet, ip-10-200-3-38.ec2.internal Started container concourse-ci-worker-init-rm
Normal Pulled 72s kubelet, ip-10-200-3-38.ec2.internal Container image "concourse/concourse:5.8.0" already present on machine
Normal Created 72s kubelet, ip-10-200-3-38.ec2.internal Created container concourse-ci-worker
Normal Started 72s kubelet, ip-10-200-3-38.ec2.internal Started container concourse-ci-worker
Normal Killing 54s kubelet, ip-10-200-3-38.ec2.internal Stopping container concourse-ci-worker
Warning FailedPreStopHook 11s kubelet, ip-10-200-3-38.ec2.internal Exec lifecycle hook ([/bin/bash /pre-stop-hook.sh]) for Container "concourse-ci-worker" in Pod "concourse-ci-worker-0_ci(8688f7aa-6444-11ea-9917-0ad140727ba9)" failed - error: command '/bin/bash /pre-stop-hook.sh' exited with 137: , message: ""
So the only workaround is to now force delete the pod:
smoke@rkirilov-work-pc ~ $ kubectl delete pod --force --grace-period=0 -n ci concourse-ci-worker-0
warning: Immediate deletion does not wait for confirmation that the running resource has been terminated. The resource may continue to run on the cluster indefinitely.
pod "concourse-ci-worker-0" force deleted
May be /pre-stop-hook.sh should be patched to handle (trap) the relevant signals (e.g. SIGTERM, SIGINT, SIGHUP) and exit cleanly. I assume when the dumb-init is signaled, it on its own tries to cleanly terminate the /pre-stop-hook.sh and given it does not terminate cleanly - it gets killed with the exit code 137 that then blocks K8S.
I will give it a try and will update the ticket, hopefully with a PR.
Actually K8S just waits for the PreStop Hook only for a terminationGracePeriodSeconds amount of time and then sends a SIGTERM the containers and then SIGKILL all the running processes after 2 more seconds as per https://github.com/kubernetes/kubernetes/issues/39170#issuecomment-448195287 and https://kubernetes.io/docs/concepts/workloads/pods/pod/#termination-of-pods
However strange thing is the POD is left in terminating state for many more minutes and doesn't seem to restart.
So may be the best course of action would be to use timeout -k {.Values.worker.terminationGracePeriodSeconds} bash -c 'while [ -e /proc/1 ]; do sleep 1; done' or something similar I guess. This way at least the delete command will not be blocked.
Also it is important to increase the .Values.worker.terminationGracePeriodSeconds to something that makes sense for your own Pipelines.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by inspecting the /pre-stop-hook.sh lifecycle hook and the Helm value .Values.worker.terminationGracePeriodSeconds. Reproduce the pod deletion with kubectl and review kubectl describe output for FailedPreStopHook and termination timing. Done means the worker pod deletion no longer remains blocked beyond the configured grace period and the observed termination behavior is documented or corrected.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- bash, helm, kubernetes
- Domain
- devops, infrastructure
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100