update metrics-server:v0.6.3

docs/guide/metrics-server.md

@@ -9,6 +9,7 @@
 - 2.需要在集群中运行deployment处理请求
 
 从kubeasz 0.1.0 开始，metrics-server已经默认集成安装，请查看`/etc/kubeasz/clusters/xxxx/config.yml`中的设置
+- 参考：https://github.com/kubernetes-sigs/metrics-server
 
 ## 前提
 

ezdown

@@ -27,7 +27,7 @@ dnsNodeCacheVer=1.22.13
 corednsVer=1.9.3
 dashboardVer=v2.7.0
 dashboardMetricsScraperVer=v1.0.8
-metricsVer=v0.5.2
+metricsVer=v0.6.3
 pauseVer=3.9
 
 # images not downloaded by default(only download  with '-X')

roles/cluster-addon/templates/metrics-server/components.yaml.j2

@@ -33,14 +33,17 @@ metadata:
     k8s-app: metrics-server
   name: system:metrics-server
 rules:
+- apiGroups:
+  - ""
+  resources:
+  - nodes/metrics
+  verbs:
+  - get
 - apiGroups:
   - ""
   resources:
   - pods
   - nodes
-  - nodes/stats
-  - namespaces
-  - configmaps
   verbs:
   - get
   - list
@@ -131,11 +134,11 @@ spec:
       - args:
         - --cert-dir=/tmp
         - --secure-port=4443
-        - --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname
         - --kubelet-insecure-tls
+        - --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname
         - --kubelet-use-node-status-port
         - --metric-resolution=15s
-        #image: k8s.gcr.io/metrics-server/metrics-server:v0.5.0
+        #image: registry.k8s.io/metrics-server/metrics-server:v0.6.3
         image: easzlab.io.local:5000/easzlab/metrics-server:{{ metricsVer }}
         imagePullPolicy: IfNotPresent
         livenessProbe:
@@ -163,6 +166,7 @@ spec:
             cpu: 100m
             memory: 200Mi
         securityContext:
+          allowPrivilegeEscalation: false
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000