Admission Review Latency
Metric Name(s)
- kyverno_admission_review_duration_seconds_count
- kyverno_admission_review_duration_seconds_sum
- kyverno_admission_review_duration_seconds_bucket
Metric Value
Histogram - A float value representing the latency of the admission review in seconds.
See Prometheus docs for a detailed explanation of how histograms work.
Metric Labels
| Label | Allowed Values | Description | 
|---|---|---|
| request_allowed | “true”, “false” | If the admission review was accepeted or rejected. | 
| request_webhook | “ValidatingWebhookConfiguration”, “MutatingWebhookConfiguration” | Type of webhook processing the admission review. | 
| resource_kind | “Pod”, “Deployment”, “StatefulSet”, “ReplicaSet”, etc. | Kind of this resource | 
| resource_namespace | Namespace in which this resource lives | |
| resource_request_operation | “create”, “update”, “delete” | If the requested resource is being created, updated, or deleted. | 
Use cases
- The cluster admin wants to know how fast/slow have the admission reviews been for incoming requests around “Deployment” creations in the default namespace.
- The cluster admin wants to be alerted as soon as the p95 latency of admission reviews associated with the incoming “Pod” creation requests breach a certain threshold.
Useful Queries
- Average latency associated with the admission reviews triggered by incoming resource requests, grouped by the resource: - avg(kyverno_admission_review_duration_seconds{}) by (resource_type)
- Maximum latency associated with the admission reviews triggered by incoming pod requests over last 24 hours: - max(kyverno_admission_review_duration_seconds{resource_type="Pod"}[24h])
- Listing the admission request which consumed maximum amount of latency in the last 60 minutes: - max(kyverno_admission_review_duration_seconds{}[60m])
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.