Kyverno OoM issues in 2.6.0

Bug

Description

I encountered a problem when deploying Kyverno on 2.6.0 with only one replica. With the default limits, the Kyverno pod would restart due to OoM errors. I increased the memory limit until this stopped.

The pod would remain running, however many of the kyverno webhook calls would time out. I increased the CPU limit until this stopped.

Here are the resulting values:

kyverno:
  values:
    replicaCount: 1
    resources:
      limits:
        cpu: 1
        memory: 1Gi

BigBang Version

2.6.0