Monitoring on Kyverno

Policies and Rules Count

Mon, 01 Jan 0001 00:00:00 +0000

Metric Name(s)

kyverno_policy_rule_info_total

Metric Value

Gauge - 1 for rules currently actively present in the cluster.

Policy and Rule Execution

Mon, 01 Jan 0001 00:00:00 +0000

Metric Name(s)

kyverno_policy_results

Metric Value

Counter - An only-increasing integer representing the number of results/executions associated with the rule corresponding to a metric sample.

HTTP Requests Latency

Mon, 01 Jan 0001 00:00:00 +0000

Metric Name(s)

kyverno_http_requests_duration_seconds_count
kyverno_http_requests_duration_seconds_sum
kyverno_http_requests_duration_seconds_bucket

Metric Value

Histogram - A float value representing the latency of the HTTP request processing in seconds.

Policy Rule Execution Latency

Mon, 01 Jan 0001 00:00:00 +0000

Metric Name(s)

kyverno_policy_execution_duration_seconds_count
kyverno_policy_execution_duration_seconds_sum
kyverno_policy_execution_duration_seconds_bucket

Metric Value

Histogram - A float value representing the latency of the rule’s execution in seconds.

Admission Review Latency

Mon, 01 Jan 0001 00:00:00 +0000

Metric Name(s)

kyverno_admission_review_duration_seconds_count
kyverno_admission_review_duration_seconds_sum
kyverno_admission_review_duration_seconds_bucket

Metric Value

Histogram - A float value representing the latency of the admission review in seconds.

Admission Requests Count

Mon, 01 Jan 0001 00:00:00 +0000

Metric Name(s)

kyverno_admission_requests_total

Metric Value

Counter - An only-increasing integer representing the count of admission requests associated with a sample.

Cleanup Controller Deleted Objects

Mon, 01 Jan 0001 00:00:00 +0000

Metric Name(s)

kyverno_cleanup_controller_deletedobjects_total

Metric Value

Counter - An only-increasing integer representing the number of objects deleted by the cleanup controller.

Cleanup Controller Errors Count

Mon, 01 Jan 0001 00:00:00 +0000

Metric Name(s)

kyverno_cleanup_controller_errors_total

Metric Value

Counter - An only-increasing integer representing the number of errors encountered by the cleanup controller while trying to delete objects.

Cleanup TTL Controller Deleted Objects

Mon, 01 Jan 0001 00:00:00 +0000

Metric Name(s)

kyverno_ttl_controller_deletedobjects

Metric Value

Counter - An only-increasing integer representing the number of objects deleted by the cleanup TTL controller.

Cleanup TTL Controller Errors Count

Mon, 01 Jan 0001 00:00:00 +0000

Metric Name(s)

kyverno_ttl_controller_errors

Metric Value

Counter - An only-increasing integer representing the number of errors encountered by the cleanup TTL controller while trying to delete objects.

Controller Drops Count

Mon, 01 Jan 0001 00:00:00 +0000

Metric Name(s)

kyverno_controller_drop_total

Metric Value

Counter - An only-increasing integer representing the number of items dropped.

Controller Reconciliations Count

Mon, 01 Jan 0001 00:00:00 +0000

Metric Name(s)

kyverno_controller_reconcile_total

Metric Value

Counter - An only-increasing integer representing the count of reconciliations performed.

Controller Requeues Count

Mon, 01 Jan 0001 00:00:00 +0000

Metric Name(s)

kyverno_controller_requeue_total

Metric Value

Counter - An only-increasing integer representing the number of items requeued.

HTTP Requests Count

Mon, 01 Jan 0001 00:00:00 +0000

Metric Name(s)

kyverno_http_requests_total

Metric Value

Counter - An only-increasing integer representing the count of http requests associated with a sample.

Generating Policy Execution Latency

Mon, 01 Jan 0001 00:00:00 +0000

Metric Name(s)

kyverno_generating_policy_execution_duration_seconds_count
kyverno_generating_policy_execution_duration_seconds_sum
kyverno_generating_policy_execution_duration_seconds_bucket

Metric Value

Histogram - A float value representing the latency of the generating policy’s execution in seconds.

Image Validating Policy Execution Latency

Mon, 01 Jan 0001 00:00:00 +0000

Metric Name(s)

kyverno_image_validating_policy_execution_duration_seconds_count
kyverno_image_validating_policy_execution_duration_seconds_sum
kyverno_image_validating_policy_execution_duration_seconds_bucket

Metric Value

Histogram - A float value representing the latency of the image validating policy’s execution in seconds.

Kyverno Info

Mon, 01 Jan 0001 00:00:00 +0000

Metric Name(s)

kyverno_info

Metric Value

Gauge - A constant value of 1 with labels to include relevant information

Mutating Policy Execution Latency

Mon, 01 Jan 0001 00:00:00 +0000

Metric Name(s)

kyverno_mutating_policy_execution_duration_seconds_count
kyverno_mutating_policy_execution_duration_seconds_sum
kyverno_mutating_policy_execution_duration_seconds_bucket

Metric Value

Histogram - A float value representing the latency of the mutating policy’s execution in seconds.

Policy Changes Count

Mon, 01 Jan 0001 00:00:00 +0000

Metric Name(s)

kyverno_policy_changes_total

Metric Value

Counter - An only-increasing integer representing the total number of policy-level changes associated with a metric sample.

Validating Policy Execution Latency

Mon, 01 Jan 0001 00:00:00 +0000

Metric Name(s)

kyverno_validating_policy_execution_duration_seconds_count
kyverno_validating_policy_execution_duration_seconds_sum
kyverno_validating_policy_execution_duration_seconds_bucket

Metric Value

Histogram - A float value representing the latency of the validating policy’s execution in seconds.

Client Queries

Mon, 01 Jan 0001 00:00:00 +0000

Metric Name(s)

kyverno_client_queries_total

Metric Value

Counter - An only-increasing integer representing the total number of policy-level changes associated with a metric sample.

Grafana Dashboard

Mon, 01 Jan 0001 00:00:00 +0000

Grafana Dashboard

Setup

With Helm Chart

If your Grafana is configured with the discovery sidecar, set grafana.enabled value to true.
If you’re using Grafana Operator, set grafana.enabled to true and grafana.grafanaDashboard.enabled value to true.

See more configuration options here.

OpenTelemetry

Mon, 01 Jan 0001 00:00:00 +0000

OpenTelemetry Setup

Setting up OpenTelemetry requires configuration of a few YAML files. The required configurations are listed below.

Install Cert-Manager

Install Cert-Manager by following the documentation.