Strimzi 0.36.1 Terminating due to java.lang.OutOfMemoryError: Java heap space

[sreelu27]

I have deployed strimzi operator 0.36.1 and it is restarting due to java.lang.OutOfMemoryError: Java heap space. I have attached the CR and also attaching the heap dump for better analysis.Could you please help us with this issue?

heapdump.log

apiVersion: kafka.strimzi.io/v1beta2
kind: Kafka
metadata:
  annotations:
  creationTimestamp: "2025-06-10T08:29:58Z"
  generation: 2
  labels:
  name: message-bus
  namespace: sree
spec:
  cruiseControl:
    additionalVolumes:
    - mountPath: 
      name: 
      targetContainers:
      - cruise-control
      volumeSource:
        secret:
          items:
          - key: 
            path: 
          secretName: 
        type: secret
    logging:
      loggers:
        appender.console.layout.pattern: '{"version": "1.2.0", "timestamp": "%d{yyyy-MM-dd''T''HH:mm:ss,nnnnn}",
          "severity": "%p{WARN=warning, DEBUG=debug, ERROR=error, FATAL=critical,
          TRACE=debug, INFO=info}", "service_id": "messagebus", "message":
          "%enc{%m}{JSON}%enc{%ex{separator(|)}}{JSON}", "metadata": {"container_name":
          "cruise-control", "pod_name": "$${env:HOSTNAME}"}, "extra_data": {"file":
          "%file", "line": "%line", "mbkf_cluster_name": "message-bus"}}%n'
        appender.console.layout.type: PatternLayout
        appender.console.name: consoleLogger
        appender.console.target: SYSTEM_OUT
        appender.console.type: Console
        rootLogger.additivity: "false"
        rootLogger.appenderRef.console.ref: consoleLogger
      type: inline
    resources:
      limits:
        cpu: "2"
        memory: 1Gi
      requests:
        cpu: "1"
        memory: 512Mi
    template:
      cruiseControlContainer:
        env:
        - name: METRICS_JMX_ENABLED
          value: "true"
        - name: METRICS_JMX_PORT
          value: 
        - name: LOG4J_LOG_LEVEL
          value: INFO
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          privileged: false
          readOnlyRootFilesystem: true
          runAsNonRoot: true
      pod:
        affinity: {}
        imagePullSecrets:
        - name: 
        metadata:
          annotations:
          labels:
        securityContext:
          fsGroup: 10000
          runAsNonRoot: true
  entityOperator:
    template:
      pod:
        affinity: {}
        imagePullSecrets:
        - name: 
        metadata:
          annotations:
          labels:
        securityContext:
          fsGroup: 10000
          runAsNonRoot: true
      tlsSidecarContainer:
        env:
        - name: METRICS_JMX_ENABLED
          value: "true"
        - name: METRICS_JMX_PORT
          value: 
        - name: LOG4J_LOG_LEVEL
          value: INFO
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          privileged: false
          readOnlyRootFilesystem: true
          runAsNonRoot: true
      topicOperatorContainer:
        env:
        - name: METRICS_JMX_ENABLED
          value: "true"
        - name: METRICS_JMX_PORT
          value: 
        - name: LOG4J_LOG_LEVEL
          value: INFO
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          privileged: false
          readOnlyRootFilesystem: true
          runAsNonRoot: true
      userOperatorContainer:
        env:
        - name: METRICS_JMX_ENABLED
          value: "true"
        - name: METRICS_JMX_PORT
          value: 
        - name: LOG4J_LOG_LEVEL
          value: INFO
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          privileged: false
          readOnlyRootFilesystem: true
          runAsNonRoot: true
    topicOperator:
      additionalVolumes:
      - mountPath: /opt/kafka/certificates/cert
        name: cert
        targetContainers:
        - topic-operator
        volumeSource:
          secret:
            items:
            - key: 
              path: 
            secretName: cert
          type: secret
      logging:
        loggers:
          appender.console.layout.pattern: '{"version": "1.2.0", "timestamp": "%d{yyyy-MM-dd''T''HH:mm:ss,nnnnn}",
            "severity": "%p{WARN=warning, DEBUG=debug, ERROR=error, FATAL=critical,
            TRACE=debug, INFO=info}", "service_id": "messagebus", "message":
            "%enc{%m}{JSON}%enc{%ex{separator(|)}}{JSON}", "metadata": {"container_name":
            "topic-operator", "pod_name": "$${env:HOSTNAME}"}, "extra_data": {"file":
            "%file", "line": "%line", "mbkf_cluster_name": "message-bus"}}%n'
          appender.console.layout.type: PatternLayout
          appender.console.name: consoleLogger
          appender.console.target: SYSTEM_OUT
          appender.console.type: Console
          rootLogger.additivity: "false"
          rootLogger.appenderRef.console.ref: consoleLogger
        type: inline
      resources:
        limits:
          cpu: "2"
          memory: 1Gi
        requests:
          cpu: "1"
          memory: 512Mi
    userOperator:
      additionalVolumes:
      - mountPath: 
        name: 
        targetContainers:
        - user-operator
        volumeSource:
          secret:
            items:
            - key: 
              path:
            secretName: 
          type: secret
      logging:
        loggers:
          appender.console.layout.pattern: '{"version": "1.2.0", "timestamp": "%d{yyyy-MM-dd''T''HH:mm:ss,nnnnn}",
            "severity": "%p{WARN=warning, DEBUG=debug, ERROR=error, FATAL=critical,
            TRACE=debug, INFO=info}", "service_id": "messagebus", "message":
            "%enc{%m}{JSON}%enc{%ex{separator(|)}}{JSON}", "metadata": {"container_name":
            "user-operator", "pod_name": "$${env:HOSTNAME}"}, "extra_data": {"file":
            "%file", "line": "%line", "mbkf_cluster_name": message-bus"}}%n'
          appender.console.layout.type: PatternLayout
          appender.console.name: consoleLogger
          appender.console.target: SYSTEM_OUT
          appender.console.type: Console
          rootLogger.additivity: "false"
          rootLogger.appenderRef.console.ref: consoleLogger
        type: inline
      resources:
        limits:
          cpu: "2"
          memory: 1Gi
        requests:
          cpu: "1"
          memory: 512Mi
  kafka:
    additionalVolumes:
    - mountPath:
      name: 
      targetContainers:
      - kafka
      volumeSource:
        secret:
          items:
          - key: 
          secretName: 
        type: secret
    - mountPath: 
      name: 
      targetContainers:
      - kafka
      volumeSource:
        secret:
          items:
          - key: 
            path:
          secretName: 
        type: secret
    - mountPath: 
      name: metrics-server-cert
      targetContainers:
      - kafka
      - zookeeper
      volumeSource:
        secret:
          items:
          - key: 
            path: 
          - key: 
            path: 
          secretName: 
        type: secret
    - mountPath: 
      name: 
      targetContainers:
      - kafka
      - zookeeper
      volumeSource:
        secret:
          items:
          - key: 
            path: 
          secretName: 
        type: secret
    config:
      default.replication.factor: 3
      inter.broker.protocol.version: "3.5"
      min.insync.replicas: 1
    listeners:
    - authentication:
        type: tls
      configuration:
        brokerCertChainAndKey:
          certificate: 
          key: 
          secretName: 
        createBootstrapService: true
      name: siptls
      networkPolicyPeers:
      - podSelector:
          matchLabels:
            
      port: 
      tls: true
      type: internal
    logging:
      loggers:
        appender.console.layout.pattern: '{"version": "1.2.0", "timestamp": "%d{yyyy-MM-dd''T''HH:mm:ss,nnnnn}",
          "severity": "%p{WARN=warning, DEBUG=debug, ERROR=error, FATAL=critical,
          TRACE=debug, INFO=info}", "service_id": "messagebus, "message":
          "%enc{%m}{JSON}%enc{%ex{separator(|)}}{JSON}", "metadata": {"container_name":
          "kafka", "pod_name": "$${env:HOSTNAME}"}, "extra_data": {"file": "%file",
          "line": "%line", "mbkf_cluster_name": "message-bus"}}%n'
        appender.console.layout.type: PatternLayout
        appender.console.name: consoleLogger
        appender.console.target: SYSTEM_OUT
        appender.console.type: Console
        logger.kafka.additivity: "false"
        logger.kafka.appenderRef.console.ref: consoleLogger
        logger.kafka.name: kafka
        logger.kafka.server.DynamicConfigManager.additivity: "false"
        logger.kafka.server.DynamicConfigManager.appenderRef.BufferedSocketAppender.ref: streamLogger
        logger.kafka.server.DynamicConfigManager.appenderRef.console.ref: consoleLogger
        rootLogger.additivity: "false"
        rootLogger.appenderRef.console.ref: consoleLogger
      type: inline
    replicas: 3
    resources:
      limits:
        cpu: "2"
        memory: 1Gi
      requests:
        cpu: "1"
        memory: 512Mi
    storage:
      class: network-block
      size: 15Gi
      type: persistent-claim
    template:
      kafkaContainer:
        env:
        - name: METRICS_COMPONENT
          value: kafka
        - name: METRICS_EXPORTER_ENABLED
          value: "true"
        - name: LOG_LEVEL
          value: info
        - name: ENABLE_TLS_METRIC
          value: "true"
        - name: METRICS_JMX_ENABLED
          value: "true"
        - name: METRICS_JMX_PORT
          value: 
        - name: LOG4J_LOG_LEVEL
          value: INFO
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          privileged: false
          readOnlyRootFilesystem: true
          runAsNonRoot: true
      pod:
        affinity: {}
        imagePullSecrets:
        - name: 
        metadata:
          annotations:
            authorization-enabled: "false"
            kafka-listeners: '{listeners-names=siptls}'
            
          labels:
           
        securityContext:
          fsGroup: 10000
          runAsNonRoot: true
    version: 3.5.1
  zookeeper:
    additionalVolumes:
    - mountPath:
      name: 
      targetContainers:
      - zookeeper
      volumeSource:
        secret:
          items:
          - key: 
            path: 
          secretName: 
        type: secret
    - mountPath: 
      name: 
      targetContainers:
      - kafka
      - zookeeper
      volumeSource:
        secret:
          items:
          - key: 
            path: 
          - key: 
            path: 
          secretName: 
        type: secret
    - mountPath:
      name: 
      targetContainers:
      - kafka
      - zookeeper
      volumeSource:
        secret:
          items:
          - key: 
            path: 
          secretName: 
        type: secret
    logging:
      loggers:
        appender.console.layout.pattern: '{"version": "1.2.0", "timestamp": "%d{yyyy-MM-dd''T''HH:mm:ss,nnnnn}",
          "severity": "%p{WARN=warning, DEBUG=debug, ERROR=error, FATAL=critical,
          TRACE=debug, INFO=info}", "service_id": "messagebus", "message":
          "%enc{%m}{JSON}%enc{%ex{separator(|)}}{JSON}", "metadata": {"container_name":
          "zookeeper", "pod_name": "$${env:HOSTNAME}"}, "extra_data": {"file": "%file",
          "line": "%line", "mbkf_cluster_name": "message-bus"}}%n'
        appender.console.layout.type: PatternLayout
        appender.console.name: consoleLogger
        appender.console.target: SYSTEM_OUT
        appender.console.type: Console
        logger.zookeepertrustmanager.additivity: "false"
        logger.zookeepertrustmanager.level: info
        logger.zookeepertrustmanager.name: org.apache.zookeeper
        rootLogger.additivity: "false"
        rootLogger.appenderRef.console.ref: consoleLogger
      type: inline
    replicas: 1
    resources:
      limits:
        cpu: "2"
        memory: 1Gi
      requests:
        cpu: "1"
        memory: 512Mi
    storage:
      class: network-block
      size: 15Gi
      type: persistent-claim
    template:
      pod:
        affinity: {}
        imagePullSecrets:
        - name: 
        metadata:
          annotations:
            
          labels:
            
        securityContext:
          fsGroup: 10000
          runAsNonRoot: true
        tolerations:
        - effect: NoSchedule
          key: key1
          operator: Equal
          value: value1
        topologySpreadConstraints:
        - labelSelector:
            matchLabels:
              strimzi.io/kind: Kafka
              strimzi.io/name: zookeeper
          maxSkew: 1
          topologyKey: zone
          whenUnsatisfiable: ScheduleAnyway
      zookeeperContainer:
        env:
        - name: METRICS_COMPONENT
          value: zookeeper
        - name: METRICS_EXPORTER_ENABLED
          value: "true"
        - name: LOG_LEVEL
          value: info
        - name: ENABLE_TLS_METRIC
          value: "true"
        - name: LOG4J_LOG_LEVEL
          value: INFO
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          privileged: false
          readOnlyRootFilesystem: true
          runAsNonRoot: true
status:
  clusterId: Sxf7ixfGQ3WmjDiljONykg
  conditions:
  - lastTransitionTime: "2025-06-10T08:32:27.208636947Z"
    status: "True"
    type: Ready
  listeners:
  - addresses:
    - host: kafka-bootstrap.sree.svc
      port: 
    bootstrapServers: kafka-bootstrap.sree.svc:
    certificates:
    name: siptls
    type: siptls
  observedGeneration: 2

[im-konge]

That's a pretty old Strimzi version, why did you started with that one? Also, on which K8s version you are deploying it?
Anyway we don't support that version of Strimzi for quite a long time.

[see-quick]

Hi, @sreelu27. As @im-konge mentioned regarding Strimzi versions, it would be better to use the latest one (or at least a version that we currently support). If the issue persists (with supported ones,) we are happy to help you :).

[scholzj]

A good start would be also to clean the Kafka CR from all the made-up APIs which do not really exist, such as the additionalVolumes 😉

[sreelu27]

Hi @see-quick , @scholzj , @im-konge ,

Do you support 0.39.0 version?

Thanks,
Sree

[ppatierno]

We don't. We usually support just last version (0.46.0 right now) unless there is a big bug / CVE in the previous one. The previous 0.45.0 is still supported because of the KRaft migration.

[sreelu27]

Thank you very much for your support

[sreelu27]

Answer is to use a latest version of strimzi