From b2346cdaec9899bd472a28b6c3a4e68fb999eba3 Mon Sep 17 00:00:00 2001
From: Mohamed Zaian <mohamedzaian@gmail.com>
Date: Mon, 6 Jun 2022 16:34:37 +0200
Subject: [PATCH] [feat] Upgrade metrics server to v0.6.1 (#8909)

* Metrics Server now requires access to nodes/metrics RBAC resource instead of nodes/stats. See: https://github.com/kubernetes-sigs/metrics-server/releases/tag/v0.6.0
* Minimize rbac permissions.
---
 roles/download/defaults/main.yml                              | 2 +-
 .../metrics_server/templates/resource-reader.yaml.j2          | 4 +---
 2 files changed, 2 insertions(+), 4 deletions(-)

diff --git a/roles/download/defaults/main.yml b/roles/download/defaults/main.yml
index f011a949c..f9b68664d 100644
--- a/roles/download/defaults/main.yml
+++ b/roles/download/defaults/main.yml
@@ -1012,7 +1012,7 @@ dnsautoscaler_image_tag: "{{ dnsautoscaler_version }}"
 
 registry_image_repo: "{{ docker_image_repo }}/library/registry"
 registry_image_tag: "2.7.1"
-metrics_server_version: "v0.5.2"
+metrics_server_version: "v0.6.1"
 metrics_server_image_repo: "{{ kube_image_repo }}/metrics-server/metrics-server"
 metrics_server_image_tag: "{{ metrics_server_version }}"
 local_volume_provisioner_image_repo: "{{ kube_image_repo }}/sig-storage/local-volume-provisioner"
diff --git a/roles/kubernetes-apps/metrics_server/templates/resource-reader.yaml.j2 b/roles/kubernetes-apps/metrics_server/templates/resource-reader.yaml.j2
index c3e085c72..3d9ea8118 100644
--- a/roles/kubernetes-apps/metrics_server/templates/resource-reader.yaml.j2
+++ b/roles/kubernetes-apps/metrics_server/templates/resource-reader.yaml.j2
@@ -10,9 +10,7 @@ rules:
     resources:
       - pods
       - nodes
-      - nodes/stats
-      - namespaces
-      - configmaps
+      - nodes/metrics
     verbs:
       - get
       - list