Admission Reports Overloaded

Symptom: Admission reports keep accumulating in the cluster, taking more and more etcd space and slowing down requests.

Diagnose: Please follow the troubleshooting docs to determine if you are affected by this issue.

Solution: Admission reports can accumulate if the reports controller is not working properly so the first thing to check is if the reports controller is running and does not continuously restarts. If the controller works as expected, another potential cause is that it fails to aggregate admission reports fast enough. This usually happens when the controller is throttled. You can fix this by increasing QPS and burst rates for the controller by setting --clientRateLimitQPS=500 and --clientRateLimitBurst=500. Note that starting with Kyverno 1.10, two cron jobs are responsible for deleting admission reports automatically if they accumulate over a certain threshold.