Skip to content

If you have problems getting your pods running you should check out the official documentation from Kubernetes:

PS: Applications in the context above is not the NAIS applications. Debugging a NAIS applications resource is done with kubectl describe application $app_name.

Debugging Memory Leaks

If you experience memory leaks in Java processes you can get heap dumps either automatically on OOM or on-demand.

Automatically on OOM

Set JAVA_OPTS to -XX:+HeapDumpOnOutOfMemoryError -XX:HeapDumpPath=/tmp

The /tmp volume is maintained through restarts, so if your app is restarting because of OOM, the heap dumps can be retrieved from there.

Manually on-demand

You can use jmap to create a heap dump of a running Java process.

Find a pod and exec jmap in it (assuming PID 1 is the Java process): 

kubectl get pods -l app=[app-name]
kubectl exec [pod-name] -- jmap -dump:all,file=/tmp/heap.hprof 1

Getting the heap dump

You can use kubectl cp to get the files from the pod to your local computer:

kubectl cp [pod-name]:/tmp/heap.hprof ./heap.hprof

You can inspect the heap dumps with tools like JProfiler, VisualVM or IntelliJ.

FAQ

I get an HTTP 503 Service Unavailable error when visiting the ingress for my application, why?

Answer

This indicates that your application is not ready to serve traffic. This is usually due to one of the following:

  • The application is not deployed to the cluster
  • The application is not up and running. This can be caused by a problem with the application itself, for example:
    • The application doesn't respond to any configured health checks
    • The application only has a single pod or replica, and that pod is not running
    • The application is configured incorrectly (e.g. has missing required dependencies, has the wrong image, etc.)
    • The application attempts to write files to the filesystem, which is mostly read-only by default

See also troubleshooting for deployments.

My application gets an HTTP 504 Gateway Timeout error when attempting to communicate with another application, why?

Answer

If you're using service discovery, ensure that the access policies for both applications are correctly set up.

Otherwise, ensure that the other application is running and responding to requests in a timely manner (see also ingress customization for timeout configuration).

Last update: 2022-11-22
Created: 2022-01-10