From 2364bdc3bf517d81d00c3d02699fc15489df57d0 Mon Sep 17 00:00:00 2001 From: Hector Fernandez Date: Thu, 27 Apr 2017 11:59:34 +0200 Subject: [PATCH 1/4] Store heap dump in a persistence volume --- openshift/keycloak.app.yaml | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) diff --git a/openshift/keycloak.app.yaml b/openshift/keycloak.app.yaml index f3c1cdb613fe..0bcad1e2ffe3 100644 --- a/openshift/keycloak.app.yaml +++ b/openshift/keycloak.app.yaml @@ -4,6 +4,20 @@ metadata: creationTimestamp: null name: keycloak objects: +- kind: PersistentVolumeClaim + apiVersion: v1 + metadata: + name: keycloak-heap-dump + creationTimestamp: null + labels: + app: keycloak + spec: + accessModes: + - ReadWriteOnce + resources: + requests: + storage: 1Gi + status: {} - kind: DeploymentConfig apiVersion: v1 metadata: @@ -36,6 +50,9 @@ objects: - containerPort: 8080 protocol: TCP imagePullPolicy: Always + volumeMounts: + - mountPath: "/opt/jboss/keycloak/heapdumppath" + name: heapdumppath resources: {} livenessProbe: httpGet: @@ -106,6 +123,8 @@ objects: - name: JAVA_OPTS value: >- -server -Xms256m -Xmx4096m -XX:MetaspaceSize=96M + -XX:+HeapDumpOnOutOfMemoryError + -XX:HeapDumpPath=/opt/jboss/keycloak/heapdumppath -XX:MaxMetaspaceSize=512m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true @@ -113,6 +132,10 @@ objects: securityContext: {} terminationGracePeriodSeconds: 30 dnsPolicy: ClusterFirst + volumes: + - name: heapdumppath + persistentVolumeClaim: + claimName: keycloak-heap-dump status: {} - kind: Service apiVersion: v1 From 148592b3228345e0a630f8ac5d362551fa9ed5dd Mon Sep 17 00:00:00 2001 From: Hector Fernandez Date: Thu, 4 May 2017 18:49:58 +0200 Subject: [PATCH 2/4] Set to 4Gb the size of our persistence volume --- openshift/keycloak.app.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/openshift/keycloak.app.yaml b/openshift/keycloak.app.yaml index 0bcad1e2ffe3..327b2d50d994 100644 --- a/openshift/keycloak.app.yaml +++ b/openshift/keycloak.app.yaml @@ -16,7 +16,7 @@ objects: - ReadWriteOnce resources: requests: - storage: 1Gi + storage: 4Gi status: {} - kind: DeploymentConfig apiVersion: v1 From bd5320fb7ebd1ec8815c0cd15f0ac7850bf25947 Mon Sep 17 00:00:00 2001 From: Hector Fernandez Date: Mon, 8 May 2017 11:47:21 +0200 Subject: [PATCH 3/4] Renamed volume name to heapdumps --- minishift/keycloak.sa.yaml | 15 +++++++++++++++ openshift/keycloak.app.yaml | 4 ++-- 2 files changed, 17 insertions(+), 2 deletions(-) create mode 100644 minishift/keycloak.sa.yaml diff --git a/minishift/keycloak.sa.yaml b/minishift/keycloak.sa.yaml new file mode 100644 index 000000000000..da04d8df2ac2 --- /dev/null +++ b/minishift/keycloak.sa.yaml @@ -0,0 +1,15 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: keycloak +--- +apiVersion: v1 +kind: RoleBinding +metadata: + name: keycloak +roleRef: + name: view +subjects: +- kind: ServiceAccount + name: keycloak +--- diff --git a/openshift/keycloak.app.yaml b/openshift/keycloak.app.yaml index c2ad0535f7d3..26c50d4f7d8e 100644 --- a/openshift/keycloak.app.yaml +++ b/openshift/keycloak.app.yaml @@ -52,7 +52,7 @@ objects: imagePullPolicy: Always volumeMounts: - mountPath: "/opt/jboss/keycloak/heapdumppath" - name: heapdumppath + name: heapdumps resources: {} livenessProbe: httpGet: @@ -140,7 +140,7 @@ objects: terminationGracePeriodSeconds: 30 dnsPolicy: ClusterFirst volumes: - - name: heapdumppath + - name: heapdumps persistentVolumeClaim: claimName: keycloak-heap-dump status: {} From f75e6837797481344f0a640bca1d9100459e1af4 Mon Sep 17 00:00:00 2001 From: Hector Fernandez Date: Tue, 23 May 2017 12:41:19 +0200 Subject: [PATCH 4/4] Removed wrong file --- minishift/keycloak.sa.yaml | 15 --------------- 1 file changed, 15 deletions(-) delete mode 100644 minishift/keycloak.sa.yaml diff --git a/minishift/keycloak.sa.yaml b/minishift/keycloak.sa.yaml deleted file mode 100644 index da04d8df2ac2..000000000000 --- a/minishift/keycloak.sa.yaml +++ /dev/null @@ -1,15 +0,0 @@ -apiVersion: v1 -kind: ServiceAccount -metadata: - name: keycloak ---- -apiVersion: v1 -kind: RoleBinding -metadata: - name: keycloak -roleRef: - name: view -subjects: -- kind: ServiceAccount - name: keycloak ----