Marvin

> Generally, we do not need to add flags manually to configure the certificate required by mertrics-server to access kubelet. as @serathius discussed, `Proper K8s setup, certificates served by Kubelet...

@serathius We are working on this issue, and error occurs since I try to access it by this way: ``` # curl --cacert /etc/kubernetes/certs/ca.crt --cert /etc/kubernetes/certs/kubecfg.crt --key /etc/kubernetes/certs/kubecfg.key https://IP:PORT/api/v1/namespaces/kube-system/services/metrics-server:443/proxy/metrics Client...

Thanks，this help a lot.

@mikelo Could you please provide the actual utilization of memory of the stress container?

> Someone please correct me if I'm wrong here, but while CoreDNS has plugins that will sign responses on the fly with DNSSEC keys, CoreDNS does not act as a...

@afbjorklund Thanks for your reply. I created a kubernetes(v1.24) cluster with docker container runtime via cri-dockerd, and docker configured with cgroup-driver=cgoupfs, **kubelet's cgroup-driver=systemd, cgroupPerQos default to true**. The cluster works...