apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

resources:
  - upstream.yml

patches:
  - target:
      kind: Deployment
      namespace: kube-system
      name: metrics-server
    patch: |-
      - op: add
        path: /spec/template/spec/containers/0/args/-
        value: '--kubelet-insecure-tls'