Charles-Edouard Brétéché

Thanks @aslafy-z ! I will take a look shortly, no promise though.

@githubcdr your log lines seem to be truncated.

> Kyverno is taking 100% cpu. Is it using 100% cpu all the time or just after upgrading ? What is the cluster size ? From what I see in...

[deprecated-api cpol](https://kyverno.io/policies/best-practices/check_deprecated_apis/check_deprecated_apis/) is the offending one this case. Removing it should fix the logs issue. The 100% cpu looks wrong though, it should consume cpu to perform background scans but...

IMHO the policy does not support background scan (resources don't support watch/list). Audit is fine but I don't think background scan can work.

What does `kubectl get bgscanr -A -w` says ? Is there some background activity ?

Did it help with cpu consumption ?

> After removing the deprecated-api cpol things settled indeed. Will this be fixed in Kyverno 1.8.1? Yes

Sorry for that @monotek ! check-deprecated-apis has issues can you set background to false and see if it helps ? 5 gigs of mem is huge. How large is your...

@monotek you can disable background scans entirely by passing `--backgroundScans=false` if necessary. Still check-deprecated-apis has multiple issues that will be fixed in 1.8.1: - it tries to apply background scans...