add metrics-server to MDE

[bit-herder]

Background:

• we can't run like kubectl top pods or kubectl top nodes without metrics-server

A/C:

• we have added metrics-server template to MDE

[bit-herder]

we need to do a bit of work internally to output the correct cert to use here before we get this merged up. Kubadm apparently does not use the same cert.

see issue here : kubernetes/kubeadm#1223

and here: https://github.com/kubernetes-sigs/metrics-server/blob/master/FAQ.md#how-to-run-metrics-server-securely

[jwietelmann]

Starting to think that, given how few people set this up securely or even have their kubelets configred such that a secure install is possible, including this in MDE would add prerequisite steps that are unrealistic for the vast majority of users. Maybe if revelry really wants this, we should just drop our own HelmRelease into our own flux repos instead of having MDE do it.

[iamjoshfrank]

Based on what I've been told, and following the convo re: possible solutions, I agree. We can/should drop this from MDE and let it be a manual install if needed until the security issue(s) are resolved.

Let's assign @bit-herder to close this out or make an argument for including it, but with some changes.

[bit-herder]

Thats fine for now. Closing.