[feat] Update metrics server to v0.6.3 (#10026)

roles/kubernetes-apps/metrics_server/defaults/main.yml

@@ -1,5 +1,5 @@
 ---
-metrics_server_container_port: 4443
+metrics_server_container_port: 10250
 metrics_server_kubelet_insecure_tls: true
 metrics_server_kubelet_preferred_address_types: "InternalIP,ExternalIP,Hostname"
 metrics_server_metric_resolution: 15s

roles/kubernetes-apps/metrics_server/templates/metrics-server-deployment.yaml.j2

@@ -23,8 +23,6 @@ spec:
       labels:
         app.kubernetes.io/name: metrics-server
         version: {{ metrics_server_version }}
-      annotations:
-        seccomp.security.alpha.kubernetes.io/pod: 'runtime/default'
     spec:
       priorityClassName: system-cluster-critical
       serviceAccountName: metrics-server
@@ -70,10 +68,14 @@ spec:
           initialDelaySeconds: 40
         securityContext:
           readOnlyRootFilesystem: true
-          runAsGroup: 10001
           runAsNonRoot: true
-          runAsUser: 10001
+          runAsUser: 1000
           allowPrivilegeEscalation: false
+          seccompProfile:
+            type: RuntimeDefault
+          capabilities:
+            drop:
+              - ALL
         resources:
           limits:
             cpu: {{ metrics_server_limits_cpu }}

roles/kubernetes-apps/metrics_server/templates/resource-reader.yaml.j2

@@ -5,13 +5,18 @@ metadata:
   labels:
     addonmanager.kubernetes.io/mode: Reconcile
 rules:
-  - apiGroups:
-      - ""
-    resources:
-      - pods
-      - nodes
-      - nodes/metrics
-    verbs:
-      - get
-      - list
-      - watch
+- apiGroups:
+  - ""
+  resources:
+  - nodes/metrics
+  verbs:
+  - get
+- apiGroups:
+  - ""
+  resources:
+  - pods
+  - nodes
+  verbs:
+  - get
+  - list
+  - watch