use k8s ca cert

metrics-server/values.yaml

@@ -97,6 +97,7 @@ defaultArgs:
   - --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname
   - --kubelet-use-node-status-port
   - --metric-resolution=15s
+  - --kubelet-certificate-authority=/etc/certs/ca.crt
 
 args: []
 
@@ -178,9 +179,17 @@ resources:
     #   cpu:
     #   memory:
 
-extraVolumeMounts: []
+extraVolumeMounts:
+- name: ca-crt-vol
+  mountPath: /etc/certs
 
-extraVolumes: []
+extraVolumes:
+- name: ca-crt-vol
+  configMap:
+    name: kubernetes-root-ca.crt
+    items:
+    - key: ca.crt
+      path: ca.crt
 
 nodeSelector: {}