From 31b5178ec8eff6e00c02420296bfc4cff4b0e28d Mon Sep 17 00:00:00 2001
From: Sheogorath <sheogorath@shivering-isles.com>
Date: Sat, 29 Jan 2022 15:55:43 +0100
Subject: [PATCH] fix(kube-system): Instruct metrics-server to use certificate
 validation

---
 infrastructure/kube-system/metrics-server.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/infrastructure/kube-system/metrics-server.yaml b/infrastructure/kube-system/metrics-server.yaml
index c407f0102..567342943 100644
--- a/infrastructure/kube-system/metrics-server.yaml
+++ b/infrastructure/kube-system/metrics-server.yaml
@@ -27,9 +27,10 @@ spec:
   values:
     replicas: 2
     defaultArgs:
-      - --cert-dir=/ca
+      - --cert-dir=/tmp
       - --kubelet-use-node-status-port
       - --metric-resolution=15s
+      - --kubelet-certificate-authority=/ca/ca.crt
     rbac:
       pspEnabled: true
     podDisruptionBudget:
-- 
GitLab