{"id":17322397,"url":"https://github.com/jenting/secure-metrics-server","last_synced_at":"2025-07-17T23:39:04.491Z","repository":{"id":55961241,"uuid":"245041062","full_name":"jenting/secure-metrics-server","owner":"jenting","description":"Deploy Kubernetes metrics-server in secure","archived":false,"fork":false,"pushed_at":"2020-12-04T07:45:43.000Z","size":11,"stargazers_count":11,"open_issues_count":1,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-04-14T16:17:50.468Z","etag":null,"topics":["kubernetes","metrics-server"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/jenting.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2020-03-05T01:26:30.000Z","updated_at":"2023-03-25T11:47:22.000Z","dependencies_parsed_at":"2022-08-15T10:20:37.356Z","dependency_job_id":null,"html_url":"https://github.com/jenting/secure-metrics-server","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/jenting/secure-metrics-server","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jenting%2Fsecure-metrics-server","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jenting%2Fsecure-metrics-server/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jenting%2Fsecure-metrics-server/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jenting%2Fsecure-metrics-server/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jenting","download_url":"https://codeload.github.com/jenting/secure-metrics-server/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jenting%2Fsecure-metrics-server/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":265679239,"owners_count":23810120,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["kubernetes","metrics-server"],"created_at":"2024-10-15T13:42:00.056Z","updated_at":"2025-07-17T23:39:04.458Z","avatar_url":"https://github.com/jenting.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Secure metrics server\n\nOfficial [metrics-server](https://github.com/kubernetes-sigs/metrics-server) deploys onto [Kubernetes](https://github.com/kubernetes-sigs/metrics-server/blob/master/deploy/kubernetes/metrics-apiservice.yaml) is _insecure_.\n\nThis repo provides a way to generate metrics-server server certificate and key by Kubernetes CA.\nThen, deploys metrics-server _in secure_.\n\n## Prerequisite\n\n- [kubectl](https://kubernetes.io/docs/tasks/tools/install-kubectl/#install-kubectl-on-linux) CLI\n- [kustomize](https://github.com/kubernetes-sigs/kustomize) CLI\n\n## Demo\n\n### KIND\n\n1. Clone upstream metrics-server manifests.\n\n   At here, we clone the current latest metrics-server tag `v0.4.1`, you could switch to your preferred metrics-server release version.\n   ```shell\n   git clone -b v0.4.1 git@github.com:kubernetes-sigs/metrics-server.git\n   cd metrics-server/manifests\n   git clone git@github.com:jenting/secure-metrics-server.git\n   cd secure-metrics-server\n   ```\n\n2. Copy the Kubernetes CA certificate from remote machine to local machine.\n\n   ```shell\n   NODE_NAME=`kind get nodes`\n   CONTAINER_ID=`docker ps --filter \"name=$NODE_NAME\" -q`\n   docker cp $CONTAINER_ID:/etc/kubernetes/pki/ca.crt kubernetes-ca.crt\n   ```\n\n3. Run generate secure metrics-server patch manifests.\n\n   ```shell\n   ./secure-metrics-server.sh\n   ```\n\n4. Apply the _kustomization.yaml_ file\n\n    ```shell\n    cd ../\n    kustomize build secure-metrics-server | kubectl apply -f -\n    ```\n\n5. Check the metrics-server bahavior\n\n    ```shell\n    kubectl top nodes\n    kubectl top pods\n    ```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjenting%2Fsecure-metrics-server","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fjenting%2Fsecure-metrics-server","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjenting%2Fsecure-metrics-server/lists"}