correct the nuances of the note, I misremembered / misread my own previous comments

- using the configurable add-on is not necessary per se, can remove
  `--kubelet-insecure-tls` from _any_ installation of `metrics-server`,
  including one via its Helm chart
This commit is contained in:
Anton Gilgur 2023-04-16 16:22:31 -04:00
parent d0068ca383
commit 9ab5c4e092
1 changed files with 1 additions and 1 deletions

View File

@ -72,7 +72,7 @@ has been updated by a newer version of kOps unless it is given the `--allow-kops
### Addons
* Metrics Server is now available as a configurable addon. Add `spec.metricsServer.enabled: true` to the cluster spec to enable.
* This new addon is **more secure** than installing directly via the `metrics-server` Helm chart as kOps automatically provisions and sets TLS certs, avoiding the need to use the `--kubelet-insecure-tls` flag. See [#6879](https://github.com/kubernetes/kops/issues/6879) for more details.
* With this change, one no longer has to set the `--kubelet-insecure-tls` flag, making any `metrics-server` installation **more secure**. See [#6879](https://github.com/kubernetes/kops/issues/6879) for more details.
* Cluster Autoscaler is now availalble as a configurable addon. Add `spec.clusterAutoscaler.enabled: true` to the cluster spec to enable.