# Serves the Metrics API (metrics.k8s.io) behind `kubectl top` and HPA.
# Not the same as kube-state-metrics (kube-prometheus-stack) — that one only
# exports object state to Prometheus, it doesn't register the Metrics API.
args:
  # Kubelets were bootstrapped by kubeadm without serverTLSBootstrap, so
  # their serving certs are self-signed (not issued by the cluster CA) —
  # metrics-server can't verify them. Drop this flag only after enabling
  # serverTLSBootstrap on every kubelet + approving the serving CSRs.
  - --kubelet-insecure-tls
  # Nodes have no DNS-resolvable hostnames from inside the cluster; scrape
  # kubelets by InternalIP (192.168.1.3x) instead.
  - --kubelet-preferred-address-types=InternalIP