Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WIP: Benchmark tool #46

Closed
wants to merge 26 commits into from
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
26 commits
Select commit Hold shift + click to select a range
efaa9a9
PoC
wallrj Apr 6, 2024
c90606b
Remove secret provisioning
wallrj Apr 7, 2024
7ec8968
Configurable measurementInterval
wallrj Apr 7, 2024
e8caac4
Allow cleanup to be disabled
wallrj Apr 7, 2024
517b0c2
Documentation
wallrj Apr 7, 2024
bddba79
Configurable cert-manager installation namespace
wallrj Apr 7, 2024
d515513
Configurable Certificate private key size
wallrj Apr 7, 2024
4302a18
Experiment 2024-04-07-2
wallrj Apr 7, 2024
f2121df
Experiments 3,4,5
wallrj Apr 7, 2024
4c0ee73
Remove original experiment data
wallrj Apr 8, 2024
a0795b6
Move experiment data
wallrj Apr 8, 2024
67c1c9e
Add Excel files
wallrj Apr 8, 2024
b76daa2
Add experiment details
wallrj Apr 8, 2024
f7e1991
Document how I've been running the benchmark
wallrj Apr 8, 2024
27db12e
Add copyright headers
wallrj Apr 8, 2024
a7e76cb
Add charts
wallrj Apr 8, 2024
36bfa37
Various updates
wallrj Apr 9, 2024
c7a668c
Experiment 2024-04-09-1
wallrj Apr 9, 2024
a5e02d2
Configurable secret key algorithm
wallrj Apr 11, 2024
5da7443
Configurable ramp-up load interval
wallrj Apr 11, 2024
f00777e
A script to run the benchmark based on parameters in environment vari…
wallrj Apr 11, 2024
89219e1
Disable benchmark rate-limiter to create certificates as fast as poss…
wallrj Apr 12, 2024
2491210
Allow shorter steady-state phase when using run.sh
wallrj Apr 12, 2024
1d1d627
Get Secret Count and size in single operation and get the results in …
wallrj Apr 12, 2024
0e2b447
Allow for more CerificateRequests than Certificates
wallrj Apr 12, 2024
3a459ac
Configurable cleanup interval and cleanup in larger batches
wallrj Apr 12, 2024
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
1 change: 1 addition & 0 deletions go.mod
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,7 @@ require (
k8s.io/component-base v0.29.3
k8s.io/kube-aggregator v0.29.3
k8s.io/kubectl v0.29.3
k8s.io/metrics v0.29.3
k8s.io/utils v0.0.0-20240102154912-e7106e64919e
sigs.k8s.io/controller-runtime v0.17.2
sigs.k8s.io/gateway-api v1.0.0
Expand Down
2 changes: 2 additions & 0 deletions go.sum
Original file line number Diff line number Diff line change
Expand Up @@ -686,6 +686,8 @@ k8s.io/kube-openapi v0.0.0-20240103051144-eec4567ac022 h1:avRdiaB03v88Mfvum2S3BB
k8s.io/kube-openapi v0.0.0-20240103051144-eec4567ac022/go.mod h1:sIV51WBTkZrlGOJMCDZDA1IaPBUDTulPpD4y7oe038k=
k8s.io/kubectl v0.29.3 h1:RuwyyIU42MAISRIePaa8Q7A3U74Q9P4MoJbDFz9o3us=
k8s.io/kubectl v0.29.3/go.mod h1:yCxfY1dbwgVdEt2zkJ6d5NNLOhhWgTyrqACIoFhpdd4=
k8s.io/metrics v0.29.3 h1:nN+eavbMQ7Kuif2tIdTr2/F2ec2E/SIAWSruTZ+Ye6U=
k8s.io/metrics v0.29.3/go.mod h1:kb3tGGC4ZcIDIuvXyUE291RwJ5WmDu0tB4wAVZM6h2I=
k8s.io/utils v0.0.0-20240102154912-e7106e64919e h1:eQ/4ljkx21sObifjzXwlPKpdGLrCfRziVtos3ofG/sQ=
k8s.io/utils v0.0.0-20240102154912-e7106e64919e/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
oras.land/oras-go v1.2.4 h1:djpBY2/2Cs1PV87GSJlxv4voajVOMZxqqtq9AB8YNvY=
Expand Down
152 changes: 152 additions & 0 deletions pkg/benchmark/command.go
Original file line number Diff line number Diff line change
@@ -0,0 +1,152 @@
/*
Copyright 2021 The cert-manager Authors.

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

package benchmark

import (
"context"
"time"

"github.com/spf13/cobra"
"k8s.io/cli-runtime/pkg/genericiooptions"

"github.com/cert-manager/cmctl/v2/pkg/build"
"github.com/cert-manager/cmctl/v2/pkg/factory"
)

const (
label = "benchmark.cmctl.cert-manager.io/experiment"
)

const description = `
This command runs a cert-manager benchmark which stress tests the cert-manager
components and measures their CPU and memory.

The default benchmark takes ~50 minutes with the default installation of cert-manager.
There are five phases:

1. ramp-up (~8 minutes)

Creates 2000 self-signed RSA(4096) Certificate resources spread across 200 namespaces;
1 self-signed Issuer per namespace.
Certificates are created in batches: 1 namespace, 1 issuer, 10 Certificates.
All the benchmark resources are labelled: 'benchmark.cmctl.cert-manager.io/experiment=true'
so that they can easily be identified and deleted afterwards.

2. catch-up (~26 minutes)

Waits for cert-manager to reconcile all 2000 Certificates.

3. steady-state (~10 minutes)

Continues to measure the cert-manager CPU and memory consumption for 10 minutes.

4. cleanup (~3 minutes)

Deletes all 2000 Certificates and other benchmark resources.
The benchmark namespaces are deleted in batches of 10 per second.

5. final-measurements (~2 minutes)

Continues to measure the cert-manager CPU and memory consumption for 2 minutes.

Example:
kind create cluster

# Install metrics-server which is required for measuring cert-manager resource usage
helm upgrade metrics-server metrics-server \
--repo https://kubernetes-sigs.github.io/metrics-server/ \
--install \
--namespace kube-system \
--set args={--kubelet-insecure-tls}

# Install cert-manager
{{.BuildName}} x install

{{.BuildName}} x benchmark > data.json
`

type options struct {
genericiooptions.IOStreams
*factory.Factory

measurementInterval time.Duration
certManagerNamepsace string

rampUpLoadInterval time.Duration
rampUpCertificateAlgorithm string
rampUpCertificateSize int
rampUpTargetCertificateCount int64
steadyStateDuration time.Duration
cleanupDisabled bool
cleanupInterval time.Duration
finalMeasurementsDuration time.Duration
}

func NewCmd(ctx context.Context, ioStreams genericiooptions.IOStreams) *cobra.Command {
options := options{
IOStreams: ioStreams,
}

cmd := &cobra.Command{
Use: "benchmark",
Short: "benchmark cert-manager",
Long: build.WithTemplate(description),
RunE: func(cmd *cobra.Command, args []string) error {
e := experiment{
options: options,
measurements: newMeasurements(options),
}
if err := e.run(cmd.Context()); err != nil {
return err
}
return nil
},
}

cmd.Flags().DurationVar(&options.measurementInterval, "benchmark.measurement-interval", time.Second*10,
"The interval between measurements.")

cmd.Flags().StringVar(&options.certManagerNamepsace, "benchmark.cert-manager-namespace", "cert-manager",
"The namespace where cert-manager is installed.")

cmd.Flags().DurationVar(&options.rampUpLoadInterval, "benchmark.phase1.load-interval", time.Second,
"The interval between new batches of new Certificates.")

cmd.Flags().StringVar(&options.rampUpCertificateAlgorithm, "benchmark.phase1.certificate-algorithm", "RSA",
"The private key algorithm of Certificate resources created during the ramp-up phase: RSA, ECDSA.")

cmd.Flags().IntVar(&options.rampUpCertificateSize, "benchmark.phase1.certificate-size", 4096,
"The private key size of Certificate resources created during the ramp-up phase.")

cmd.Flags().Int64Var(&options.rampUpTargetCertificateCount, "benchmark.phase1.target-certificate-count", 2000,
"The number of Certificate resources to create during the ramp-up phase.")

cmd.Flags().DurationVar(&options.steadyStateDuration, "benchmark.phase3.duration", time.Minute*10,
"The duration of the steady-state phase.")

cmd.Flags().BoolVar(&options.cleanupDisabled, "benchmark.phase4.disabled", false,
"Disable the cleanup phase.")

cmd.Flags().DurationVar(&options.cleanupInterval, "benchmark.phase4.cleanup-interval", time.Second,
"The interval between deletion of batches of namespaces.")

cmd.Flags().DurationVar(&options.finalMeasurementsDuration, "benchmark.phase5.duration", time.Minute*2,
"The duration of the final-measurements phase.")

options.Factory = factory.New(cmd)
return cmd
}