Upgrade: metrics server version bump from v0.5.0 to v0.5.2

Kubernetes Metrics Server version upgrade with the following changes: Remove elevated permissions cap_net_bind_service from metrics-server Fix bad architecture metadata Fix reporting inconsistent number of nodes, caused by using invalid Kubelet node start time metric Fix reporting partial container metrics for pod Signed-off-by: Farukh Khan <farukhkhan21@gmail.com>

Upgrade: metrics server version bump from v0.5.0 to v0.5.2
f856aa94 · Farukh Khan · Brad Davidson · 900e5ff5 · f856aa94 · f856aa94
Commit f856aa94 authored Jan 05, 2022 by Farukh Khan Committed by Brad Davidson Jan 18, 2022
3 changed files
--- a/manifests/metrics-server/metrics-server-deployment.yaml
+++ b/manifests/metrics-server/metrics-server-deployment.yaml
@@ -39,8 +39,46 @@ spec:
        emptyDir: {}
      containers:
      - name: metrics-server
-        image: %{SYSTEM_DEFAULT_REGISTRY}%rancher/metrics-server:v0.3.6
+        image: %{SYSTEM_DEFAULT_REGISTRY}%rancher/mirrored-metrics-server:v0.5.2
+        args:
+        - --cert-dir=/tmp
+        - --secure-port=4443
+        - --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname
+        - --kubelet-use-node-status-port
+        - --metric-resolution=15s
+        resources:
+          requests:
+            cpu: 100m
+            memory: 70Mi
+        ports:
+        - name: https
+          containerPort: 4443
+          protocol: TCP
+        readinessProbe:
+          httpGet:
+            path: /readyz
+            port: https
+            scheme: HTTPS
+          initialDelaySeconds: 0
+          periodSeconds: 2
+          timeoutSeconds: 1
+          successThreshold: 1
+          failureThreshold: 3
+        livenessProbe:
+          httpGet:
+            path: /livez
+            port: https
+            scheme: HTTPS
+          initialDelaySeconds: 60
+          periodSeconds: 10
+          timeoutSeconds: 1
+          successThreshold: 1
+          failureThreshold: 3
+        securityContext:
+          readOnlyRootFilesystem: true
+          runAsNonRoot: true
+          runAsUser: 1000
+          allowPrivilegeEscalation: false
        volumeMounts:
        - name: tmp-dir
          mountPath: /tmp
--- a/manifests/metrics-server/metrics-server-service.yaml
+++ b/manifests/metrics-server/metrics-server-service.yaml
@@ -12,5 +12,6 @@ spec:
    k8s-app: metrics-server
  ports:
  - port: 443
+    name: https
    protocol: TCP
-    targetPort: 443
+    targetPort: https
--- a/scripts/airgap/image-list.txt
+++ b/scripts/airgap/image-list.txt
@@ -4,5 +4,6 @@ docker.io/rancher/klipper-lb:v0.3.4
 docker.io/rancher/library-busybox:1.32.1
 docker.io/rancher/library-traefik:2.4.8
 docker.io/rancher/local-path-provisioner:v0.0.19
-docker.io/rancher/metrics-server:v0.3.6
+docker.io/rancher/mirrored-metrics-server:v0.5.2
 docker.io/rancher/pause:3.1