Skip to content

CKS: reconcile node capacity after live resize - #14223

Open
andrijapanicsb wants to merge 15 commits into
mainfrom
cks-live-resize-capacity-reconciliation
Open

andrijapanicsb wants to merge 15 commits into
mainfrom
cks-live-resize-capacity-reconciliation

Conversation

@andrijapanicsb

@andrijapanicsb andrijapanicsb commented Sep 22, 2026 •

Copy link
Copy Markdown
Contributor

Context

#13226 added live compute-offering changes for CKS nodes, building on #12975. The VM could gain CPU/RAM while Kubernetes still reported the old capacity. Operators had to activate guest resources and restart kubelet manually. #14213 tracks that gap.

Changes

CKS now activates and verifies the added guest CPU/RAM, restarts kubelet when needed, and waits for the Node to report the new capacity and allocatable resources before completing the scale operation.

Nodes are handled one at a time without draining resident Pods. While a node's resize is in progress, the node carries a cloudstack.apache.org/cks-live-resize-pending annotation and, unless an operator had already cordoned it, a CKS cordon. Both are set and removed with single conditional Node updates. If a scale fails, the annotation stays, and the CKS cordon stays too if the VM already reached the new offering. A retry of the same scale finishes that node before it changes any other. An existing operator cordon is preserved.

QA also exposed a pre-existing cluster CPU/RAM accounting bug, not a regression from this PR. Totals are now calculated from the configured per-node-type offerings and counts, so the API and UI reflect mixed control/worker offerings correctly.

Functional and regression testing

Test environment: Cloud-managed KVM, isolated network, published packages from f92e52d736b9, before the review changes. The tests will be repeated on the final commit.

Test Result
Two-worker CPU-only, RAM-only and combined live increases (API) Guest and Kubernetes capacity/allocatable updated correctly
Control CPU increase (API) and RAM increase (UI) Automatic reconciliation; UI scale task successful
Injected kubelet failure and retry (API) Expected failure left the first node cordoned and second untouched; retry completed both; temporary fault cleaned
Operator cordon, cap-only and same-offering requests Cordon preserved; no unnecessary kubelet restart
Stop/start, stopped offering change, worker scale-out/in and live migration Passed; scale-in used worker count and the current worker offering
Invalid parameters and insufficient CPU capacity Correctly rejected without resource changes
Final UI Refresh, API, guest and Kubernetes checks Correct 6 CPU / 7168 MiB total; both Nodes Ready; no VM reboot; 17 Pod UIDs/restart counts unchanged; HTTP/DNS passed

VPC/direct-access and multi-control HA were not tested. Dedicated etcd VMs are resized the same way as on main; they are not Kubernetes nodes, so nothing is reconciled on them (not live-tested). The separate existing nodeids-only scale-in issue found during QA is tracked in #14458, with its fix in #14459.

UI evidence

Successful scale task and correct aggregate capacity:

Successful UI scale and correct CPU/RAM total

Scale request and result after Refresh

Control RAM: 2048 → 3072 MiB; worker unchanged at 3 CPU / 4096 MiB.

Control RAM-only scale request

After Refresh: 6 CPU / 7168 MiB.

Capacity after UI Refresh

@codecov

codecov Bot commented Sep 22, 2026 •

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 87.76371% with 87 lines in your changes missing coverage. Please review.
✅ Project coverage is 20.87%. Comparing base (af9764b) to head (a8a500f).
⚠️ Report is 39 commits behind head on main.

Files with missing lines Patch % Lines
...utils/KubernetesClusterNodeCapacityReconciler.java 85.90% 14 Missing and 29 partials ⚠️
...er/actionworkers/KubernetesClusterScaleWorker.java 79.43% 8 Missing and 14 partials ⚠️
...nworkers/KubernetesClusterNodeOfferingResizer.java 94.61% 2 Missing and 7 partials ⚠️
...cloud/kubernetes/cluster/utils/GuestResources.java 81.81% 3 Missing and 1 partial ⚠️
.../src/main/java/com/cloud/vm/UserVmManagerImpl.java 70.00% 2 Missing and 1 partial ⚠️
...kubernetes/cluster/utils/NodeCapacitySnapshot.java 95.45% 0 Missing and 2 partials ⚠️
...ubernetes/cluster/utils/KubernetesClusterUtil.java 88.88% 1 Missing ⚠️
...com/cloud/kubernetes/cluster/utils/NodeAccess.java 96.29% 0 Missing and 1 partial ⚠️
...ter/utils/NodeCapacityReconciliationException.java 80.00% 0 Missing and 1 partial ⚠️
.../cloud/kubernetes/cluster/utils/NodeResources.java 90.90% 0 Missing and 1 partial ⚠️
Additional details and impacted files
@@             Coverage Diff              @@
##               main   #14223      +/-   ##
============================================
+ Coverage     20.45%   20.87%   +0.42%     
- Complexity    21415    22137     +722     
============================================
  Files          6487     6503      +16     
  Lines        589303   592255    +2952     
  Branches      72245    72678     +433     
============================================
+ Hits         120525   123638    +3113     
+ Misses       455643   455178     -465     
- Partials      13135    13439     +304     
Flag Coverage Δ
uitests 3.88% <ø> (+0.17%) ⬆️
unittests 22.19% <87.76%> (+0.43%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@andrijapanicsb andrijapanicsb changed the title CKS: reconcile node capacity after live resize (WIP)CKS: reconcile node capacity after live resize Sep 22, 2026
@andrijapanicsb

Copy link
Copy Markdown
Contributor Author

@ACSHomeBot package G

@ACSHomeBot

ACSHomeBot commented Sep 22, 2026 •

Copy link
Copy Markdown

Packaging results:

Result Artifact Platform
PASS RPM EL (EL8/9/10)
PASS DEB Ubuntu, Debian

Test packages are available at:

@github-actions

github-actions Bot commented Sep 22, 2026 •

Copy link
Copy Markdown

🔴 Test Coverage Grade: D — Marginal

Metric Value
Line coverage 26.00%
Branch coverage 20.40%

Grade Scale

Grade Line Coverage Meaning
🟢 A ≥ 80% Excellent - this code sleeps well at night 😴
🟡 B 60-79% Good - almost there, don't stop now 😉
🟠 C 40-59% Acceptable - your code is wearing a seatbelt, but no airbags 😬
🔴 D 20-39% Marginal - boldly shipping where no test has gone before 🖖
⛔ F < 20% Failing - tests? what tests? 🔥

Branch coverage is shown as a secondary signal. Grade is determined by line coverage.
View full Actions run

@andrijapanicsb
andrijapanicsb force-pushed the cks-live-resize-capacity-reconciliation branch from 40b50b0 to 7e5a95a Compare October 20, 2026 05:18
@andrijapanicsb

Copy link
Copy Markdown
Contributor Author

@ACSHomeBot package G

@ACSHomeBot

Copy link
Copy Markdown

Accepted: package kvm G for 2a404aa1ffcc.

Planned: RPM + DEB, KVM SystemVM.

Status: Queued for worker G. Jobs ahead: 0.

@ACSHomeBot

Copy link
Copy Markdown

Package building started on worker G.

@ACSHomeBot

Copy link
Copy Markdown

Packaging results:

Result Artifact Platform Build Time
PASS RPM EL (EL8/9/10) 31 min
PASS DEB Ubuntu, Debian 22 min

Test packages are available at:

@andrijapanicsb

Copy link
Copy Markdown
Contributor Author

@ACSHomeBot package G

@ACSHomeBot

Copy link
Copy Markdown

Accepted: package kvm G for f92e52d736b9.

Planned: RPM + DEB, KVM SystemVM.

Status: Queued for worker G. Jobs ahead: 0.

@ACSHomeBot

Copy link
Copy Markdown

Package building started on worker G.

@ACSHomeBot

Copy link
Copy Markdown

Packaging results:

Result Artifact Platform Build Time
PASS RPM EL (EL8/9/10) 30 min
PASS DEB Ubuntu, Debian 22 min

Test packages are available at:

@andrijapanicsb andrijapanicsb changed the title (WIP)CKS: reconcile node capacity after live resize CKS: reconcile node capacity after live resize Oct 21, 2026
@andrijapanicsb
andrijapanicsb marked this pull request as ready for review October 21, 2026 20:09
@andrijapanicsb

Copy link
Copy Markdown
Contributor Author

Hi @Pearl1594, thanks a lot for the detailed review, I really appreciate the time you put into it. I've pushed the changes in 306cc2e and replied to each of your comments above.

While working through them I also found two problems I had missed: a node cordoned by an operator would never have been retried after a failure, and the node SSH address was wrong on Netris VPC tiers. Both are fixed now. In two places I went a slightly different way from what you suggested (the etcd check and the skip on SSH failure), and I explained why in those threads.

Let me know if anything still looks off.

@andrijapanicsb

Copy link
Copy Markdown
Contributor Author

@ACSHomeBot package G

@ACSHomeBot

ACSHomeBot commented Oct 28, 2026 •

Copy link
Copy Markdown

Accepted: package kvm G for 306cc2e02f7b.

Planned: RPM + DEB, KVM SystemVM.

Status: Completed. Packaging results.

- Name the repeated READ_GUEST, metadata and status strings once.
- Use \d in the guest and Kubernetes quantity patterns.
- Move the node type selection of the offering preflight into its own
  method, so the loop has no continue statements.
- Drop throws Exception from two tests that cannot throw it.
@andrijapanicsb

Copy link
Copy Markdown
Contributor Author

@blueorangutan package

@blueorangutan

Copy link
Copy Markdown

@andrijapanicsb a [SL] Jenkins job has been kicked to build packages. It will be bundled with no SystemVM templates. I'll keep you posted as I make progress.

@andrijapanicsb

andrijapanicsb commented Oct 28, 2026 •

Copy link
Copy Markdown
Contributor Author

@DaanHoogland, unrelated to all this work - share with @rajujith some of the PR fixes that I've raised against virt-v2v that are critical for VMware migrations, I'm sure Jithin will appreciate those - https://github.com/libguestfs/virt-v2v/pulls?q=is%3Apr+author%3Aandrijapanicsb - all merged, and he can just take the source DEB/RPM (whatever your worker uses) and backport those, together with the stupid FSTRIM that virt-v2v does - I had a 30TB migration over weekened, and FSTRIM added 2h of duration inside virt-v2v on top of 200 seconds that it really took to convert a WIndows VM with 12 disks/30TB of space. Perhaps he wants to also backport the --no-fstrim option from upstream.

@rajujith ping me if you want to test openvddk.com - it's NBD/NBDSSL and HotAdd - that is a 1:1 binary compatible replacement for VMware's VDDK - completely free. I'm sure you might want to test it in your in-house product.

@DaanHoogland

Copy link
Copy Markdown
Contributor

that is a 1:1 binary compatible replacement for VMware's VDDK

@andrijapanicsb , looks like a compatitor of the one mentioned in https://www.networkworld.com/article/4241265/fluidcloud-replaces-vddk-with-its-own-disk-copy-engine-for-vmware-exits.html

needs a comparison? (in a discussion item, probably not here)

@ACSHomeBot

Copy link
Copy Markdown

Packaging results:

Result Artifact Platform Build Time
PASS RPM EL (EL8/9/10) 35 min
PASS DEB Ubuntu, Debian 22 min

Test packages are available at:

@andrijapanicsb

Copy link
Copy Markdown
Contributor Author

@ACSHomeBot package G

@ACSHomeBot

ACSHomeBot commented Oct 28, 2026 •

Copy link
Copy Markdown

Accepted: package kvm G for c48bd344eeb1.

Planned: RPM + DEB, KVM SystemVM.

Status: Completed. Packaging results.

@DaanHoogland

Copy link
Copy Markdown
Contributor

code looks very clean now @andrija, thnks.

@andrijapanicsb

andrijapanicsb commented Oct 28, 2026 •

Copy link
Copy Markdown
Contributor Author

that is a 1:1 binary compatible replacement for VMware's VDDK

@andrijapanicsb , looks like a compatitor of the one mentioned in https://www.networkworld.com/article/4241265/fluidcloud-replaces-vddk-with-its-own-disk-copy-engine-for-vmware-exits.html

needs a comparison? (in a discussion item, probably not here)

@DaanHoogland you know me well enough - don't compare apples and oranges... ;)

"The FluidCloud engine exports the VM disk using Network File Copy (NFC) through standard application programming interfaces (API) on the VMware ESXi hypervisor. It then streams the virtual machine disk (VMDK) file over the network to the destination. Omar said the export captures everything, with no functionality loss.

The engine does not do delta sync, so every export is a full export of the VM."

Their stuff is a workaorund but uses NFC, My artefact is the libvixdisk.so.8.0.3 that you replace and off you go (HotAdd, NBD/NBDSSL (via NFC) - 100% compatible with VDDK = so all tools previously designed to work with VMware VDDK now works with OpenVDDK. Check the sites, numbers, compatibility, etc. I will share this publicly soon. Free and open source.

@andrijapanicsb

Copy link
Copy Markdown
Contributor Author

@ACSHomeBot package G

@ACSHomeBot

ACSHomeBot commented Oct 28, 2026 •

Copy link
Copy Markdown

Accepted: package kvm G for c48bd344eeb1.

Planned: RPM + DEB, KVM SystemVM.

Status: Completed. Packaging results.

@ACSHomeBot

Copy link
Copy Markdown

Packaging results:

Result Artifact Platform Build Time
PASS RPM EL (EL8/9/10) 34 min
PASS DEB Ubuntu, Debian 23 min

Test packages are available at:

@blueorangutan

Copy link
Copy Markdown

Packaging result [SF]: ✔️ el8 ✔️ el9 ✔️ el10 ✔️ debian ✔️ suse15. SL-JID 19802

@ACSHomeBot

Copy link
Copy Markdown

Packaging results:

Result Artifact Platform Build Time
PASS RPM EL (EL8/9/10) 34 min
PASS DEB Ubuntu, Debian 23 min

Test packages are available at:

@DaanHoogland

Copy link
Copy Markdown
Contributor

@blueorangutan test

@blueorangutan

Copy link
Copy Markdown

@DaanHoogland a [SL] Trillian-Jenkins test job (ol8 mgmt + kvm-ol8) has been kicked to run smoke tests

@blueorangutan

Copy link
Copy Markdown

[SF] Trillian test result (tid-17329)
Environment: kvm-ol8 (x2), zone: Advanced Networking with Mgmt server ol8
Total time taken: 64763 seconds
Marvin logs: https://github.com/blueorangutan/acs-prs/releases/download/trillian/pr14223-t17329-kvm-ol8.zip
Smoke tests completed. 157 look OK, 0 have errors, 0 did not run
Only failed and skipped tests results shown below:

Test Result Time (s) Test File

Defer node preparation until a live CPU or memory change can be dispatched. On a retry of the committed offering, reconcile owned pending work without changing individual VM offerings or operator cordons.
@sonarqubecloud

Copy link
Copy Markdown

@andrijapanicsb

Copy link
Copy Markdown
Contributor Author

@ACSHomeBot package G

@ACSHomeBot

ACSHomeBot commented Oct 31, 2026 •

Copy link
Copy Markdown

Accepted: package kvm G for a8a500f02238.

Planned: RPM + DEB, KVM SystemVM.

Status: Completed. Packaging results.

@ACSHomeBot

Copy link
Copy Markdown

Packaging results:

Result Artifact Platform Build Time
PASS RPM EL (EL8/9/10) 29 min
PASS DEB Ubuntu, Debian 21 min

Test packages are available at:

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

CKS: Kubernetes nodes report stale CPU/RAM capacity after live resize

5 participants