使用集群 CA 签署度量服务器证书和密钥是否安全?

Is it safe to sign the metrics-server certificate and key with the Cluster CA?

我正在尝试安装 metrics-server,但我不确定如何处理 --tls-cert-file--tls-private-key-file

https://github.com/kubernetes-incubator/metrics-server

我可以使用由集群 CA 签名的证书和密钥吗?还是这对生产不安全?

它在参考文档中说,

--tls-cert-file, --tls-private-key-file: the serving certificate and key files. If not specified, self-signed certificates will be generated, but it's recommended that you use non-self-signed certificates in production.

一般来说,提供您自己的 CA 证书是最安全的选择。