kubernetes-sigs / metrics-server

Scalable and efficient source of container resource metrics for Kubernetes built-in autoscaling pipelines.
https://kubernetes.io/docs/tasks/debug-application-cluster/resource-metrics-pipeline/
Apache License 2.0
5.73k stars 1.86k forks source link

Why we still need to specify --requestheader-client-ca-file flag for metrics-server #1432

Open fuxiaoting opened 6 months ago

fuxiaoting commented 6 months ago

Hello, Is this known issue still valid? https://github.com/kubernetes-sigs/metrics-server/blob/a6a0ea3f8d7b36f1d4d9bc0b131d9d99e7a7879a/KNOWN_ISSUES.md?plain=1#L251

We have set this flag in kube-apiserver k8s-args, and there is a configmap extension-apiserver-authentication created under namespace kube-system. Why metrics-server apiservice could not get this setting from configmap extension-apiserver-authentication ?

dashpole commented 6 months ago

/assign @yangjunmyfm192085 /triage accepted

yangjunmyfm192085 commented 6 months ago

yeah, metrics-server apiservice could get this setting from configmap extension-apiserver-authentication. I'm not sure about the scene at that time /cc @QianChenglong

yangjunmyfm192085 commented 6 months ago

from here https://github.com/kubernetes-sigs/metrics-server/pull/533