---
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
  name: metrics-server
  namespace: metrics-server-system
  labels:
    k8s-app: metrics-server
spec:
  selector:
    matchLabels:
      k8s-app: metrics-server
  endpoints:
  - port: https
    interval: 30s
    path: /metrics
    scheme: https
    tlsConfig:
      # Use the cluster's CA to verify the metrics server certificate
      caFile: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
      serverName: metrics-server.metrics-server-system.svc.cluster.local
      insecureSkipVerify: false
    bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
  namespaceSelector:
    matchNames:
    - metrics-server-system