shuting

@sivasathyaseeelan @vishal-chdhry - there are a bunch of conflicts, how should we proceed?

Also note that there are significant changes for generate in 1.10 with synchronization on: https://kyverno.io/blog/2023/05/30/kyverno-1.10-released/#generate-rule-refactoring

> @realshuting Is the performance hit an expected behaviour from the [generate-rule-refactoring](https://kyverno.io/blog/2023/05/30/kyverno-1.10-released/#generate-rule-refactoring) in v1.10.x onwards? As the background controller performs all tasks post-admission requests, it's expected to have some "delays"...

I tested with 1.12.5 default memory/cpu settings for the background controller, the max latency between the namespace and networkpolicy creation is around 75s: ``` sc-gen-test-1|||2024-07-31T11:32:44Z|||zk-kafka-address|||2024-07-31T11:32:44Z ... sc-gen-test-500|||2024-07-31T11:33:06Z|||zk-kafka-address|||2024-07-31T11:34:21Z ``` It doesn't...

I tested with 1.9.4 and the max latency is 29s which is less than 75s with 1.12.5: ``` sc-gen-test-500|||2024-08-02T14:32:05Z|||zk-kafka-address|||2024-08-02T14:32:34Z ``` Note that Kyverno 1.9 runs a single controller whereas 1.12...

@vishal-chdhry - can we close the issue?

/cherry-pick release-1.12

Per the discussion of 6/11/2024 maintainers meeting, it would be good to find out why Kyverno controllers need these permissions, specifically for the reporting controller.

Thanks for the contribution @faelis ! Can you fix the DCO check https://github.com/kyverno/kyverno/pull/9991/checks?check_run_id=23400220147?

The [code-gen test](https://github.com/kyverno/kyverno/actions/runs/8541280357/job/23918893837?pr=9991) needs to be fixed.