fix: allow metrics-server to work on insecure tls

ansible/roles/kubernetes_control_plane/tasks/main.yaml

@@ -49,6 +49,9 @@
   args:
     creates: $HOME/.kube/config
 
+- name: Untaint control planes
+  ansible.builtin.import_tasks: untaint.yaml
+
 - name: Install Kubernetes CLI
   ansible.builtin.apt:
     pkg:

ansible/roles/kubernetes_control_plane/tasks/untaint.yaml

@@ -0,0 +1,7 @@
+- name: Remove control plane NoSchedule taint from all nodes
+  kubernetes.core.k8s_taint:
+    state: absent
+    name: "{{ inventory_hostname_short }}"
+    taints:
+      - key: node-role.kubernetes.io/control-plane
+        effect: NoSchedule

ansible/roles/kubernetes_metric_server/tasks/main.yaml

@@ -9,4 +9,7 @@
     release_namespace: kube-system
     chart_ref: metrics-server/metrics-server
     chart_version: 3.13.1
+    values:
+      args:
+        - --kubelet-insecure-tls
   run_once: true