Skip to content

Commit

Permalink
Update image file names
Browse files Browse the repository at this point in the history
Signed-off-by: Richard Wall <richard.wall@venafi.com>
  • Loading branch information
wallrj committed Apr 11, 2024
1 parent b89996b commit 0d00c8e
Show file tree
Hide file tree
Showing 6 changed files with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions content/docs/devops-tips/large-clusters.md
Original file line number Diff line number Diff line change
Expand Up @@ -53,14 +53,14 @@ It takes 34 minutes to reconcile all 2000 Certificate resources.
In the cert-manager controller logs you will see messages such as:
> `I0409 12:42:48.601911 1 request.go:697] Waited for 1.241596263s due to client-side throttling, not priority and fairness, request: PUT:https://10.96.0.1:443/apis/cert-manager.io/v1/namespaces/team-mplnf/certificates/app-1/status`

<img src="/docs/devops-tips/large-clusters/experiment.2024-04-07-1/Screenshot 2024-04-09 121627.png"
<img src="/docs/devops-tips/large-clusters/experiment.2024-04-07-1/cpu.png"
alt="Scatter chart showing cert-manager CPU usage and cluster resource counts over time with default cert-manager configuration" />

After disabling client-side rate-limiting and repeating the experiment, the CPU use is much more uniform.
cert-manager is now free to make API requests as rapidly as the API server will allow and makes use of all available CPU time.
It takes 22 minutes to reconcile all 2000 Certificate resources.

<img src="/docs/devops-tips/large-clusters/experiment.2024-04-07-4/Screenshot 2024-04-09 130635.png"
<img src="/docs/devops-tips/large-clusters/experiment.2024-04-07-4/cpu.png"
alt="Scatter chart showing cert-manager CPU usage and cluster resource counts over time with client-side rate-limiting disabled" />

## Prefer ECDSA keys over RSA for performance
Expand All @@ -71,7 +71,7 @@ Note that the CPU usage is significantly lower than with the RSA 4096 experiment
And the rate of reconciliation is significantly higher: `~285/min` vs `~58/min`.
(and this is probably limited by the rate at which the benchmark creates the Certificates)

<img src="/docs/devops-tips/large-clusters/experiment.2024-04-09-3/Screenshot 2024-04-09 194601.png"
<img src="/docs/devops-tips/large-clusters/experiment.2024-04-09-3/cpu.png"
alt="Scatter chart showing cert-manager CPU usage and cluster resource counts over time with server-side rate-limiting and 2000 ECDSA Certificates" />

## Restrict the use of large RSA keys
Expand Down Expand Up @@ -130,7 +130,7 @@ This chart shows the memory consumption of the cert-manager controller (1.14)
during an experiment where 2000 RSA 4096 Certificate are created, signed and
then deleted.

<img src="/docs/devops-tips/large-clusters/experiment.2024-04-07-1/Screenshot 2024-04-09 091612.png"
<img src="/docs/devops-tips/large-clusters/experiment.2024-04-07-1/memory.png"
alt="Scatter chart showing cert-manager memory usage and cluster resource counts over time" />

The pattern of memory consumption can be explained as follows:
Expand Down

0 comments on commit 0d00c8e

Please sign in to comment.