"Sizing should be 125% of the maximum harvest. So for a 20 amp harvest--the controller needs to be 25 amps. The reason for this is partly "cloud" effect. Essentially the clouds may act as a lens and temporarily increase solar irradiance"
This applies to PWM controllers, which will heat up and eventually fry when doing more than their rated amps for extended times. Brief cloud effect overages should be harmless though.
MPPT controllers can be over-panelled somewhat, as recommended by Morningstar for greater daily AH haul --see their blurb on that. That is because unlike PWMs, MPPTs "clip their amps" to their amp ratings.