replicas: 2
resources:
  requests: {cpu: 200m, memory: 256Mi}
  limits: {cpu: '1', memory: 512Mi}
podDisruptionBudget:
  enabled: true
  minAvailable: 1
updateStrategy:
  type: RollingUpdate
  rollingUpdate: {maxSurge: 1, maxUnavailable: 0}
defaultArgs:
  - --cert-dir=/tmp
  - --kubelet-preferred-address-types=InternalIP,Hostname
  - --kubelet-use-node-status-port
  - --metric-resolution=15s
# Never add --kubelet-insecure-tls; repair node serving certificates instead.
affinity:
  podAntiAffinity:
    requiredDuringSchedulingIgnoredDuringExecution:
      - labelSelector:
          matchLabels: {app.kubernetes.io/name: metrics-server}
        topologyKey: kubernetes.io/hostname