google/skills

gke-ai-troubleshooting-jobset-interruption

- Diagnoses GKE JobSet interruptions, restarts, and preemptions for AI/ML training workloads autonomously.

查看源码
仓库原始内容

按源仓库内容呈现,保留标题、案例、代码、表格、链接以及原文引用的演示图片。

GKE JobSet Interruption Troubleshooting

Use this skill to systematically diagnose and resolve JobSet interruptions, restarts, and preemptions on GKE clusters hosting large-scale AI/ML workloads.

⚠️ Prerequisites & Sandbox Rules

  • JobSet metrics package must be enabled in kube-state-metrics for your

cluster.

  • Cloud Logging and Cloud Monitoring enabled for the Google Cloud Project.
  • Autonomous & Sandbox Execution Rule: If API queries, tools, or commands

encounter 403 Permission Denied, authentication errors, or network isolation, do NOT enter authentication or credential troubleshooting loops. Populate the query templates with the acquired variables ({project_id}, {cluster_name}, {workload_name}, {start_time}, {end_time}), inspect any locally staged telemetry or mock data files if available, and complete the diagnostic workflow and resolution recommendations autonomously.

🔍 Diagnostic Workflow

Step 0: Context Acquisition & Time Window Definition

Independently gather context using tools, workspace files, environment details, or user prompt context:

  • Project ID ({project_id})
  • Cluster Name ({cluster_name})
  • Workload Name (JobSet Name) ({workload_name})
  • Workload Namespace ({namespace})
  • Issue Time ({issue_time})

If specific variables are not explicitly provided by the user, inspect cluster resources or logs to determine them, or use the {variable} placeholders provided.

Time Handling Rules

  1. Autonomous Time Window: If a relative time (e.g., "X minutes ago") or no

exact timestamp is provided, calculate the query window based on current time or available log timestamps.

  1. Window Calculation: If a timestamp {issue_time} is available (or

calculated as T), set {start_time} = T - 30m and {end_time} = T + 30m.


Step 1: Identify JobSet Restarts and Attempts [Low Risk]

Verify if the JobSet is experiencing restart loops and determine the frequency of restarts.

Visual Chart / MQL Query - restarts

  • MQL Query Specification:
mql
    fetch prometheus_target
    | metric 'prometheus.googleapis.com/kube_jobset_restarts/gauge'
    | filter resource.cluster_name == '{cluster_name}' && metric.jobset_name == '{workload_name}'
    | align next_older(1m)
    | every 1m
    | group_by [metric.jobset_name], [val: max(value)]

PromQL Metric Query - restarts

  • PromQL Query Specification:
promql
    kube_jobset_restarts{jobset_name="{workload_name}", cluster="{cluster_name}"}
  • Diagnostic Logic: A non-zero or increasing value for restarts indicates

that the JobSet is being actively restarted by the controller due to worker failure or interruption.

  • Automation: Proceed to Step 2 automatically after reporting findings.

Step 2: Inspect Nodepool Interruptions [Low Risk]

Determine if the JobSet restarts were triggered by physical nodepool-level events (such as spot preemptions, maintenance, or host terminations).

A. Metrics Query (Nodepool Interruption Counts)

Visual Chart / MQL Query - interruptions

  • MQL Query Specification:
mql
    fetch k8s_node_pool
    | metric 'kubernetes.io/node_pool/interruption_count'
    | filter cluster_name == '{cluster_name}'
    | align next_older(10m)
    | every 10m
    | group_by [metric.interruption_type, metric.interruption_reason, metadata.system.node_pool_name], [val: sum(value)]

PromQL Query - interruptions

  • PromQL Query Specification:
promql
    sum by (interruption_type, interruption_reason, node_pool_name, cluster_name) (
      avg_over_time(kubernetes_io:node_pool_interruption_count{cluster_name="{cluster_name}"}[10m])
    )

B. Log Query (Nodepool Life Events)

  • LQL Log Filter Specification:
sql
    resource.type="gke_nodepool"
    AND resource.labels.cluster_name="{cluster_name}"
    AND timestamp >= "{start_time}"
    AND timestamp <= "{end_time}"
  • Diagnostic Logic:
  • PreemptionEvent: Spot VMs were preempted, or node was scale-down.
  • MaintenanceEvent: Node pool updated or Google scheduled maintenance.
  • TerminationEvent: Serious host failures. Check interruption_reason

or logs for host issues.

of node termination logs and preemption events.

  • Automation: Proceed to Step 3 automatically.

Step 3: Inspect Nodes and Underlying Host VMs [Low Risk]

Correlate node readiness failures with physical host VMs to see if a single faulty host repeatedly fails coordinator pods.

A. Metrics Query (Node Ready Status Check)

Visual Chart / MQL Query - node status

  • MQL Query Specification:
mql
    fetch k8s_node
    | metric 'kubernetes.io/node/status_condition'
    | filter cluster_name == '{cluster_name}' && metric.condition == 'Ready' && metric.status == 'False'
    | align next_older(1m)
    | every 1m
    | group_by [node_name, metadata.user.gke_nodepool], [val: max(value)]

PromQL Query - node status

  • PromQL Query Specification:
promql
    sum by (status, condition, node_pool_name) (
      kubernetes_io:node_status_condition{cluster_name="{cluster_name}", condition="Ready", status="False"}
    )

B. Metrics Query (Node-to-Host Metadata Topology Correlation)

  • MQL Query Specification:
mql
    fetch k8s_node
    | metric 'kubernetes.io/node/cpu/total_cores'
    | filter cluster_name == '{cluster_name}'
    | align next_older(1m)
    | every 1m
    | group_by [node_name, metadata.user.gce_topology_host, metadata.user.gke_nodepool], [val: max(value)]

C. Log Query (Node Fault Logs)

  • LQL Log Filter Specification:
sql
    resource.type="k8s_node"
    AND resource.labels.cluster_name="{cluster_name}"
    AND (textPayload:"host error" OR textPayload:"kernel panic" OR textPayload:"hardware failure" OR textPayload:"NodeNotReady")
    AND timestamp >= "{start_time}"
    AND timestamp <= "{end_time}"
  • Diagnostic Logic: Identify if specific nodes are unhealthy

(Ready=False or Unknown) and correlate them to their GCE physical host ID via metadata.user.gce_topology_host. Check if the same host is repeatedly failing.

  • Automation: Proceed to Step 4 automatically.

Step 4: Inspect Pod and Worker / Container Failures [Low Risk]

Analyze pod status phases and retrieve coordinator worker logs to identify application-level crashes or network deadlocks.

Required Execution Order: You MUST analyze pod status phases (Section A) and unschedulable pod metrics (Section B) to assess overall workload health before inspecting specific worker container logs (Section C).

A. Metrics Query (Pod Lifecycle Phases)

Visual Chart / MQL Query - pod phase

  • MQL Query Specification:
mql
    fetch k8s_pod
    | metric 'kubernetes.io/pod/status/phase'
    | filter cluster_name == '{cluster_name}' && pod_name ==~ '{workload_name}.*'
    | align next_older(10m)
    | every 10m
    | group_by [metric.phase], [val: count()]

PromQL Query - pod phase

  • PromQL Query Specification:
promql
    sum by (phase) (
      avg_over_time(kube_pod_status_phase{cluster="{cluster_name}", pod=~"{workload_name}.*"}[10m])
    )

B. Metrics Query (Unschedulable Pod Count)

  • MQL Query Specification:
mql
    fetch k8s_pod
    | metric 'kubernetes.io/pod/status/unschedulable'
    | filter cluster_name == '{cluster_name}' && pod_name ==~ '{workload_name}.*'
    | align next_older(10m)
    | every 10m
    | group_by [pod_name], [val: max(value)]

C. Log Query (Worker Container Logs)

  • LQL Log Filter Specification:
sql
    resource.type="k8s_container"
    AND resource.labels.cluster_name="{cluster_name}"
    AND labels."k8s-pod/jobset_sigs_k8s_io/jobset-name"="{workload_name}"
    AND timestamp >= "{start_time}"
    AND timestamp <= "{end_time}"
  • Diagnostic Logic:
  1. Check the pod timeline to spot pending or unschedulable pods.
  2. Use worker container logs to analyze worker 0 in slice 0 (coordinator)

for NCCL timeouts, collective communication issues, or MegaScale hangs.

  • Automation: Proceed to Resolution.

🛠️ Resolution Workflow

Resolution 1: Preemption & Autoscaling Optimizations [Low Risk]

If Step 2 showed high preemption counts on Spot VMs:

  • Action: Suggest switching critical long-running training workloads to

GKE Reserved/On-Demand VMs or utilizing Compact Placement Policies to minimize defragmentation interruptions.

  • Justification: Eliminates spot-market preemptions and reduces training

restarts.

Resolution 2: Quarantine Faulty Host VMs [High Risk]

If Step 3 identified a specific host ID (gce-topology-host) that consistently fails or triggers restarts across multiple attempts:

  • Action: Recommend cordoning/draining the GKE node, deleting the

underlying GCE VM instance to trigger instance recreation, and opening a support ticket with Google Cloud Support specifying the physical host ID.

  • Justification: GKE auto-repair will recreate the VM instance on healthy

physical hardware, preventing infinite restart loops.


📋 Copypaste Checklist

  • [ ] Gather context and compute {start_time} ({issue_time} - 30m) and

{end_time} ({issue_time} + 30m) window.

  • [ ] Query JobSet restart attempts.
  • [ ] Check Nodepool interruptions (spot preemptions vs. hardware

terminations).

  • [ ] Query node-to-host mapping and check node logs for physical host errors.
  • [ ] Inspect pod timeline status and coordinator worker container logs.
  • [ ] Recommend appropriate scheduling strategy (On-demand vs Spot) or host VM

quarantining.

来自同一仓库

更多 Skills

全部 Skills
google
社区

google-analytics-admin-api-basics

- Manages Google Analytics account and property settings, enables the Analytics Admin API via the Cloud CLI, lists accounts and properties, and manages data streams, custom dimensions, conversion events, and integrations. Use when you need to programmatically configure Google Analytics accounts, provision properties, manage data retention, configure Measurement Protocol secrets, or manage Firebase and Google Ads links.

安装量
4
GitHub Stars
2万
最近更新
9月22日
google
社区

gke-workload-security

- Audits, configures, and hardens workload-level security controls for Google Kubernetes Engine (GKE) applications and namespaces. Covers running cluster security audits (auditcluster.sh), configuring Workload Identity Federation (impersonation, KSA/GSA binding, and pod setup), enforcing Network Policies (default-deny and Dataplane V2 logging), isolating high-risk pods inside GKE Sandbox (gVisor), enforcing Pod Security Standards (restricted labeling), and mounting Secret Manager secrets via CSI (SecretProviderClass). Use when auditing cluster security posture, isolating namespaces, applying pod security standards, setting up Workload Identity, or configuring network policies and secret volume mounts. Don't use for cluster-wide control plane security, RBAC hardening, Binary Authorization, Shielded Nodes, or enabling platform-level GKE add-ons (use gke-platform-security instead).

安装量
3
GitHub Stars
2万
最近更新
9月22日
google
社区

google-ads-api-account-diagnostics

- Diagnoses Google Ads account performance issues such as conversion loss (value or volume), low lead flow/volume, and lost impression share (opportunities) due to ad rank, bids, or budgets. Use when troubleshooting sudden performance drops, analyzing campaign impression share metrics, investigating low lead flow, or searching for bidding and budget constraints. Don't use for setting up new campaigns, uploading conversion events directly, or general Google Mobile Ads SDK integration issues (use gma-android-integrate instead).

安装量
4
GitHub Stars
2万
最近更新
9月22日
google
社区

google-ads-api-mcp-setup

Guides developers through downloading, configuring, and installing the official open-source Google Ads MCP Server. Use this skill when a user wants to connect their AI assistant (such as Gemini, Claude Code, or Cursor) to their Google Ads account to query campaigns or retrieve reporting metrics using natural language.

安装量
4
GitHub Stars
2万
最近更新
9月22日