metrics-server
Helm chart
Request a free trial
Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.
Tag:
Compare:
1
# Default values for metrics-server.
2
# This is a YAML-formatted file.
3
# Declare variables to be passed into your templates.
4
5
image:
6
repository: cgr.dev/chainguard-private/metrics-server
7
# Overrides the image tag whose default is v{{ .Chart.AppVersion }}
8
tag: 0.9.0@sha256:40841c86bf5f2891d3bb3f357341505200ca4ac7e7209be6704fbafaf1f6c85a
9
pullPolicy: IfNotPresent
10
imagePullSecrets: []
11
# - name: registrySecretName
12
13
nameOverride: ""
14
fullnameOverride: ""
15
namespaceOverride: ""
16
serviceAccount:
17
# Specifies whether a service account should be created
18
create: true
19
# Annotations to add to the service account
20
annotations: {}
21
# The name of the service account to use.
22
# If not set and create is true, a name is generated using the fullname template
23
name: ""
24
# The list of secrets mountable by this service account.
25
# See https://kubernetes.io/docs/reference/labels-annotations-taints/#enforce-mountable-secrets
26
secrets: []
27
rbac:
28
# Specifies whether RBAC resources should be created
29
create: true
30
# Note: PodSecurityPolicy will not be created when Kubernetes version is 1.25 or later.
31
pspEnabled: false
32
apiService:
33
# Specifies if the v1beta1.metrics.k8s.io API service should be created.
34
#
35
# You typically want this enabled! If you disable API service creation you have to
36
# manage it outside of this chart for e.g horizontal pod autoscaling to
37
# work with this release.
38
create: true
39
# Annotations to add to the API service
40
annotations: {}
41
# Specifies whether to skip TLS verification
42
insecureSkipTLSVerify: true
43
# The PEM encoded CA bundle for TLS verification
44
caBundle: ""
45
commonLabels: {}
46
podLabels: {}
47
podAnnotations: {}
48
podSecurityContext: {}
49
hostUsers:
50
securityContext:
51
allowPrivilegeEscalation: false
52
readOnlyRootFilesystem: true
53
runAsNonRoot: true
54
runAsUser: 1000
55
seccompProfile:
56
type: RuntimeDefault
57
capabilities:
58
drop:
59
- ALL
60
priorityClassName: system-cluster-critical
61
containerPort: 10250
62
hostNetwork:
63
# Specifies if metrics-server should be started in hostNetwork mode.
64
#
65
# You would require this enabled if you use alternate overlay networking for pods and
66
# API server unable to communicate with metrics-server. As an example, this is required
67
# if you use Weave network on EKS
68
enabled: false
69
replicas: 1
70
revisionHistoryLimit:
71
updateStrategy: {}
72
# type: RollingUpdate
73
# rollingUpdate:
74
# maxSurge: 0
75
# maxUnavailable: 1
76
77
podDisruptionBudget:
78
# https://kubernetes.io/docs/tasks/run-application/configure-pdb/
79
enabled: false
80
minAvailable:
81
maxUnavailable:
82
unhealthyPodEvictionPolicy:
83
defaultArgs:
84
- --cert-dir=/tmp
85
- --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname
86
- --kubelet-use-node-status-port
87
- --metric-resolution=15s
88
args: []
89
livenessProbe:
90
httpGet:
91
path: /livez
92
port: https
93
scheme: HTTPS
94
initialDelaySeconds: 0
95
periodSeconds: 10
96
failureThreshold: 3
97
readinessProbe:
98
httpGet:
99
path: /readyz
100
port: https
101
scheme: HTTPS
102
initialDelaySeconds: 20
103
periodSeconds: 10
104
failureThreshold: 3
105
service:
106
type: ClusterIP
107
port: 443
108
annotations: {}
109
labels: {}
110
# Add these labels to have metrics-server show up in `kubectl cluster-info`
111
# kubernetes.io/cluster-service: "true"
112
# kubernetes.io/name: "Metrics-server"
113
addonResizer:
114
enabled: false
115
image:
116
repository: cgr.dev/chainguard-private/kubernetes-autoscaler-addon-resizer
117
tag: 1.8.24@sha256:47119e416185459875bc744f879a9f0074e4c3f5553baa69991896656c1933a7
118
securityContext:
119
allowPrivilegeEscalation: false
120
readOnlyRootFilesystem: true
121
runAsNonRoot: true
122
runAsUser: 1000
123
seccompProfile:
124
type: RuntimeDefault
125
capabilities:
126
drop:
127
- ALL
128
resources:
129
requests:
130
cpu: 40m
131
memory: 25Mi
132
limits:
133
cpu: 40m
134
memory: 25Mi
135
nanny:
136
cpu: 0m
137
extraCpu: 1m
138
memory: 0Mi
139
extraMemory: 2Mi
140
minClusterSize: 100
141
pollPeriod: 300000
142
threshold: 5
143
metrics:
144
enabled: false
145
serviceMonitor:
146
enabled: false
147
additionalLabels: {}
148
interval: 1m
149
scrapeTimeout: 10s
150
metricRelabelings: []
151
relabelings: []
152
# See https://github.com/kubernetes-sigs/metrics-server#scaling
153
resources:
154
requests:
155
cpu: 100m
156
memory: 200Mi
157
# limits:
158
# cpu:
159
# memory:
160
extraVolumeMounts: []
161
extraVolumes: []
162
nodeSelector: {}
163
tolerations: []
164
affinity: {}
165
topologySpreadConstraints: []
166
dnsConfig: {}
167
# Annotations to add to the deployment
168
deploymentAnnotations: {}
169
schedulerName: ""
170
tmpVolume:
171
emptyDir: {}
172
tls:
173
# Set the TLS method to use. Supported values:
174
# - `metrics-server` : Metrics-server will generate a self-signed certificate
175
# - `helm` : Helm will generate a self-signed certificate
176
# - `cert-manager` : Use cert-manager.io to create and maintain the certificate
177
# - `existingSecret` : Reuse an existing secret. No new secret will be created
178
type: "metrics-server"
179
# Kubernetes cluster domain. Used to configure Subject Alt Names for the certificate
180
clusterDomain: cluster.local
181
certManager:
182
# Automatically add the cert-manager.io/inject-ca-from annotation to the APIService resource.
183
# See https://cert-manager.io/docs/concepts/ca-injector
184
addInjectorAnnotations: true
185
existingIssuer:
186
# Use an existing cert-manager issuer
187
enabled: false
188
# Kind of the existing cert-manager issuer
189
kind: "Issuer"
190
# Name of the existing cert-manager issuer
191
name: "my-issuer"
192
# Set the requested duration (i.e. lifetime) of the Certificate.
193
# See https://cert-manager.io/docs/reference/api-docs/#cert-manager.io/v1.CertificateSpec
194
duration: ""
195
# How long before the currently issued certificate’s expiry cert-manager should renew the certificate.
196
# See https://cert-manager.io/docs/reference/api-docs/#cert-manager.io/v1.CertificateSpec
197
renewBefore: ""
198
# Add extra annotations to the Certificate resource
199
annotations: {}
200
# Add extra labels to the Certificate resource
201
labels: {}
202
helm:
203
# Use helm lookup function to reuse Secret created in previous helm install
204
lookup: true
205
# Cert validity duration in days
206
certDurationDays: 365
207
existingSecret:
208
# Name of the existing Secret to use for TLS
209
name: ""
210
# Use helm lookup function to provision `apiService.caBundle`
211
lookup: true
212
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.