From 1a9c37c910b5d6ea8b293aecb5f3410afad72ef8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jean-Fran=C3=A7ois=20Roy?= Date: Wed, 27 Mar 2024 09:56:43 -0700 Subject: [PATCH] fix(metrics-server): Remove --kubelet-insecure-tls (#1389) * fix(metrics-server): Remove --kubelet-insecure-tls According to https://www.talos.dev/v1.6/kubernetes-guides/configuration/deploy-metrics-server, this flag is not necessary when enabling certificate rotation and an auto CSR approver. * Update helmrelease.yaml.j2 --------- Co-authored-by: Devin Buhl --- .../apps/kube-system/metrics-server/app/helmrelease.yaml.j2 | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/bootstrap/templates/kubernetes/apps/kube-system/metrics-server/app/helmrelease.yaml.j2 b/bootstrap/templates/kubernetes/apps/kube-system/metrics-server/app/helmrelease.yaml.j2 index 2ea3acf2..1afb44f3 100644 --- a/bootstrap/templates/kubernetes/apps/kube-system/metrics-server/app/helmrelease.yaml.j2 +++ b/bootstrap/templates/kubernetes/apps/kube-system/metrics-server/app/helmrelease.yaml.j2 @@ -22,10 +22,12 @@ spec: retries: 3 values: args: - - --kubelet-insecure-tls - --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname - --kubelet-use-node-status-port - --metric-resolution=15s + #% if bootstrap_distribution in ["k3s"] %# + - --kubelet-insecure-tls + #% endif %# metrics: enabled: true serviceMonitor: