<p>I'm trying to install metrics-server and I'm not sure what to do with the <code>--tls-cert-file</code> and <code>--tls-private-key-file</code>.</p>

<p><a href="https://github.com/kubernetes-incubator/metrics-server" rel="nofollow noreferrer">https://github.com/kubernetes-incubator/metrics-server</a></p>

<p>Can I use a certificate and key that is signed by the Cluster CA?  Or is this bad unsafe for production?</p>

markhops
<p>It says in the referenced docs, </p>

<p><code>
--tls-cert-file, --tls-private-key-file: the serving certificate and key files. If not specified, self-signed certificates will be generated, but it's recommended that you use non-self-signed certificates in production.
</code></p>

<p>As a general rule, providing certs of your own CA would be the safest option.</p>
