Repository files navigation

Officialmetrics-server deploys ontoKubernetes isinsecure.

This repo provides a way to generate metrics-server server certificate and key by Kubernetes CA.Then, deploys metrics-serverin secure.

• kubectl CLI
• kustomize CLI

1. Clone upstream metrics-server manifests.

   At here, we clone the current latest metrics-server tagv0.4.1, you could switch to your preferred metrics-server release version.

   git clone -b v0.4.1 git@github.com:kubernetes-sigs/metrics-server.gitcd metrics-server/manifestsgit clone git@github.com:jenting/secure-metrics-server.gitcd secure-metrics-server

2. Copy the Kubernetes CA certificate from remote machine to local machine.

   NODE_NAME=`kind get nodes`CONTAINER_ID=`docker ps --filter"name=$NODE_NAME" -q`docker cp$CONTAINER_ID:/etc/kubernetes/pki/ca.crt kubernetes-ca.crt

3. Run generate secure metrics-server patch manifests.

   ./secure-metrics-server.sh

4. Apply thekustomization.yaml file

   cd ../kustomize build secure-metrics-server| kubectl apply -f -

5. Check the metrics-server bahavior

   kubectl top nodeskubectl top pods