Why we still need to specify --requestheader-client-ca-file flag for metrics-server

[fuxiaoting]

Hello,
Is this known issue still valid?

metrics-server/KNOWN_ISSUES.md

Line 251 in a6a0ea3

To fix this problem you need to provide kube-apiserver proxy-client CA to Metrics Server under `--requestheader-client-ca-file` flag. You can read more about this flag in [Authenticating Proxy](https://kubernetes.io/docs/reference/access-authn-authz/authentication/#authenticating-proxy)

We have set this flag in kube-apiserver k8s-args, and there is a configmap extension-apiserver-authentication created under namespace kube-system.
Why metrics-server apiservice could not get this setting from configmap extension-apiserver-authentication ?

[dashpole]

/assign @yangjunmyfm192085
/triage accepted

[yangjunmyfm192085]

yeah, metrics-server apiservice could get this setting from configmap extension-apiserver-authentication.
I'm not sure about the scene at that time /cc @QianChenglong

[yangjunmyfm192085]

from here
#533