diff --git a/charts/metrics-server/ci/tls-custom-values.yaml b/charts/metrics-server/ci/tls-custom-values.yaml
new file mode 100644
index 000000000..220ae7a81
--- /dev/null
+++ b/charts/metrics-server/ci/tls-custom-values.yaml
@@ -0,0 +1,85 @@
+args:
+  - --kubelet-insecure-tls
+
+apiService:
+  insecureSkipTLSVerify: false
+  # dummy certificate only (generated by cert-manager once)
+  caBundle: |
+    -----BEGIN CERTIFICATE-----
+    MIIDYjCCAkqgAwIBAgIQUK3jdPbBzeYoPwPg0WJZ/DANBgkqhkiG9w0BAQsFADAZ
+    MRcwFQYDVQQDEw5tZXRyaWNzLXNlcnZlcjAeFw0yMzA3MTQxMTA3MjBaFw0yMzEw
+    MTIxMTA3MjBaMBkxFzAVBgNVBAMTDm1ldHJpY3Mtc2VydmVyMIIBIjANBgkqhkiG
+    9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c8M9HJtbRnrKQ60ChYfGguKUw1g2DLbFhvm
+    piivnv9ltRAXt7WQos42alAm2PuR/sDRBcWH0+OD+u3Kf75kARZb95l/eEwH1Ntw
+    2fvIfWnKdzcqd86C3M4ywNiBQ8BbpT24XNiV6Hs12OwHeNHjXkUGx5ObCtxbkFXj
+    rjb8UNOjD/+QvGQthrkAnJtPfnIKaInXc6/NwCtCTCdgcF1ut+FbWjePv9o0EHvG
+    SzI4MWXXGjfnxtFjmykzAXLfqJrXoMFF3ttUAmA7CQXOCJHUSAT6Pog7SnjSgh8O
+    5sCUM8qGFQ5rQO/6tBij7W/qK5/xP8gjjI6Qejh4F2eQhrz0ewIDAQABo4GlMIGi
+    MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMHMG
+    A1UdEQRsMGqCGm1ldHJpY3Mtc2VydmVyLmt1YmUtc3lzdGVtgh5tZXRyaWNzLXNl
+    cnZlci5rdWJlLXN5c3RlbS5zdmOCLG1ldHJpY3Mtc2VydmVyLmt1YmUtc3lzdGVt
+    LnN2Yy5jbHVzdGVyLmxvY2FsMA0GCSqGSIb3DQEBCwUAA4IBAQC1d5rqbyDrlaNq
+    DlgX3W/fx6g4bioQRHOqswuM3KEwDHzIGfIki6K3+S7EGg8pGAQDqH4ckHmS1tbj
+    bcOTljpDqcNdlt5yKiZWt1VSECM0JhEpZ3jrFbJjp6l6YDbOx7KJHGCOirJ/aKCK
+    MMpp1Y5OsM+JJEMIMnFAcyl/eIet5t5+hUSQb+CMjrXnkdKITpaNOFsScRGQ2wBJ
+    RGzQds448r8YdLZPuipKLxkdtpCHLA32gT5QbCZnPe7F88hm2NAlbQN7hY2Ictqp
+    mzVO3OglgG1OS1glOL0niWUErK9PNfDjp7VMvpU3eIBH7lpwBAUvjtGHGlfWU796
+    ObtNgW0o
+    -----END CERTIFICATE-----
+
+tls:
+  type: secret
+  secret:
+    # dummy certificate only (generated by cert-manager once)
+    crt: |
+      -----BEGIN CERTIFICATE-----
+      MIIDYjCCAkqgAwIBAgIQUK3jdPbBzeYoPwPg0WJZ/DANBgkqhkiG9w0BAQsFADAZ
+      MRcwFQYDVQQDEw5tZXRyaWNzLXNlcnZlcjAeFw0yMzA3MTQxMTA3MjBaFw0yMzEw
+      MTIxMTA3MjBaMBkxFzAVBgNVBAMTDm1ldHJpY3Mtc2VydmVyMIIBIjANBgkqhkiG
+      9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c8M9HJtbRnrKQ60ChYfGguKUw1g2DLbFhvm
+      piivnv9ltRAXt7WQos42alAm2PuR/sDRBcWH0+OD+u3Kf75kARZb95l/eEwH1Ntw
+      2fvIfWnKdzcqd86C3M4ywNiBQ8BbpT24XNiV6Hs12OwHeNHjXkUGx5ObCtxbkFXj
+      rjb8UNOjD/+QvGQthrkAnJtPfnIKaInXc6/NwCtCTCdgcF1ut+FbWjePv9o0EHvG
+      SzI4MWXXGjfnxtFjmykzAXLfqJrXoMFF3ttUAmA7CQXOCJHUSAT6Pog7SnjSgh8O
+      5sCUM8qGFQ5rQO/6tBij7W/qK5/xP8gjjI6Qejh4F2eQhrz0ewIDAQABo4GlMIGi
+      MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMHMG
+      A1UdEQRsMGqCGm1ldHJpY3Mtc2VydmVyLmt1YmUtc3lzdGVtgh5tZXRyaWNzLXNl
+      cnZlci5rdWJlLXN5c3RlbS5zdmOCLG1ldHJpY3Mtc2VydmVyLmt1YmUtc3lzdGVt
+      LnN2Yy5jbHVzdGVyLmxvY2FsMA0GCSqGSIb3DQEBCwUAA4IBAQC1d5rqbyDrlaNq
+      DlgX3W/fx6g4bioQRHOqswuM3KEwDHzIGfIki6K3+S7EGg8pGAQDqH4ckHmS1tbj
+      bcOTljpDqcNdlt5yKiZWt1VSECM0JhEpZ3jrFbJjp6l6YDbOx7KJHGCOirJ/aKCK
+      MMpp1Y5OsM+JJEMIMnFAcyl/eIet5t5+hUSQb+CMjrXnkdKITpaNOFsScRGQ2wBJ
+      RGzQds448r8YdLZPuipKLxkdtpCHLA32gT5QbCZnPe7F88hm2NAlbQN7hY2Ictqp
+      mzVO3OglgG1OS1glOL0niWUErK9PNfDjp7VMvpU3eIBH7lpwBAUvjtGHGlfWU796
+      ObtNgW0o
+      -----END CERTIFICATE-----
+
+    # dummy certificate only (generated by cert-manager once)
+    key: |
+      -----BEGIN RSA PRIVATE KEY-----
+      MIIEpAIBAAKCAQEA2c8M9HJtbRnrKQ60ChYfGguKUw1g2DLbFhvmpiivnv9ltRAX
+      t7WQos42alAm2PuR/sDRBcWH0+OD+u3Kf75kARZb95l/eEwH1Ntw2fvIfWnKdzcq
+      d86C3M4ywNiBQ8BbpT24XNiV6Hs12OwHeNHjXkUGx5ObCtxbkFXjrjb8UNOjD/+Q
+      vGQthrkAnJtPfnIKaInXc6/NwCtCTCdgcF1ut+FbWjePv9o0EHvGSzI4MWXXGjfn
+      xtFjmykzAXLfqJrXoMFF3ttUAmA7CQXOCJHUSAT6Pog7SnjSgh8O5sCUM8qGFQ5r
+      QO/6tBij7W/qK5/xP8gjjI6Qejh4F2eQhrz0ewIDAQABAoIBAQC1DgZI1S3dOWRf
+      1tcWY1krP1iWvVI5pdy0vjC3Aq8qTkdvgZcVoRpAG4bkTQhd6pFr4UBfudm06zV0
+      y2I/WjarKLj+U1zA1QLVkCx5J3F7vwsMmpD00ne5sLZD1DVv6mDENVAh7fB/NpyG
+      W33Ck0abwGloUWzaVF7Q1nTTBuYrEJmnLhgvWaUSv8KhcPko6uWLeuFCUaVarjaf
+      ghP1i1nA4ILXdHKWCZXSBxCH+EvWu68/avlfh4bptx7XmmPowayJQXvS1PK7WDg5
+      QbT9RYG6Hy2l+okqdk/ikfQb3Bh0TR0W2XImxzuq3zRnT4mHSVzd1Xy6rMgrFZaq
+      Iy76eHnRAoGBAO9+ZQllDK1GHKdIJu0mamMraP8HovKU5jasNPPw1A/t3nTie8nw
+      xHqyDk69sdrxKqvnv76oS8gSGQRcnjFhf0u2BizuNnF8hKq1T5yPY6IiH317Pa8b
+      stGfcaZYy0uTKv3WCT/Jbhkl2j0MtAENz8GsYR9G5L9n4NuUkTOzVO11AoGBAOjS
+      DIOc18uH5JF9Cc4C3MHfK+6Rdeb/+7RVtOLmTP1T6UNXfcWgyb++IrhDtik1LlSt
+      D0M5rcFF6YsQMOiR6RmQRbBdH/nuwcR7Bmp4KcFVLMsSx/P2nJo0exifecBI2sXC
+      FhKWp/rKICSNPWpDjXUPpWjG04qHWiGcZsMXGGwvAoGBAKV6nQ9vveGf9z5ysUrd
+      Z1cccJD+0s1wqt0OAgyn068p+bKjp0ryTKBGlXI8yj5wsr5TA/8VxD76mkSURk3y
+      gwVqQTwcYIvrsLNPUjHoNbyafU2zsPxkVBtZYyrAYb/XcTYxBPUJFkTUDcZvF5U+
+      2NWGaRk2X+oNOaYfMnEZsU3dAoGAMjJnhFDirf1EqKGe5Y30btBhNnSiSQXUDROV
+      hn5FBzF6T4yjj2KVXQPvlG707XmL3bHaYpIjBlK+gb8h7GLZMSvL+rR5WnfBy00D
+      Gx2BUy+8EqSf+9el+BFsoOhxZaXPlWe9PpDA8u91cqwJG8ooy55t+WM05N897ZU9
+      Cr8GAv0CgYBX/P0Ijw4x32Xb3y8uP3IaL9fHHBJZwuz0wVQlteNeV06gdlmp2NMs
+      9dbs8jMztJLTQ6SGnVxiDZg+ZFPWFD5wmyRQG5dz/norpzp8QFuZVIkK3VfSVHgl
+      kFQUZ8+mby4FJDLcPIUccPd9xSOvF55zfSfsktLjMa232sPzrZqcLA==
+      -----END RSA PRIVATE KEY-----
diff --git a/charts/metrics-server/ci/tls-existing-values.yaml b/charts/metrics-server/ci/tls-existing-values.yaml
new file mode 100644
index 000000000..50536079c
--- /dev/null
+++ b/charts/metrics-server/ci/tls-existing-values.yaml
@@ -0,0 +1,93 @@
+args:
+  - --kubelet-insecure-tls
+
+apiService:
+  insecureSkipTLSVerify: false
+  # same dummy certificate as we are using in tls-custom-values.yaml
+  caBundle: |
+    -----BEGIN CERTIFICATE-----
+    MIIDYjCCAkqgAwIBAgIQUK3jdPbBzeYoPwPg0WJZ/DANBgkqhkiG9w0BAQsFADAZ
+    MRcwFQYDVQQDEw5tZXRyaWNzLXNlcnZlcjAeFw0yMzA3MTQxMTA3MjBaFw0yMzEw
+    MTIxMTA3MjBaMBkxFzAVBgNVBAMTDm1ldHJpY3Mtc2VydmVyMIIBIjANBgkqhkiG
+    9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c8M9HJtbRnrKQ60ChYfGguKUw1g2DLbFhvm
+    piivnv9ltRAXt7WQos42alAm2PuR/sDRBcWH0+OD+u3Kf75kARZb95l/eEwH1Ntw
+    2fvIfWnKdzcqd86C3M4ywNiBQ8BbpT24XNiV6Hs12OwHeNHjXkUGx5ObCtxbkFXj
+    rjb8UNOjD/+QvGQthrkAnJtPfnIKaInXc6/NwCtCTCdgcF1ut+FbWjePv9o0EHvG
+    SzI4MWXXGjfnxtFjmykzAXLfqJrXoMFF3ttUAmA7CQXOCJHUSAT6Pog7SnjSgh8O
+    5sCUM8qGFQ5rQO/6tBij7W/qK5/xP8gjjI6Qejh4F2eQhrz0ewIDAQABo4GlMIGi
+    MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMHMG
+    A1UdEQRsMGqCGm1ldHJpY3Mtc2VydmVyLmt1YmUtc3lzdGVtgh5tZXRyaWNzLXNl
+    cnZlci5rdWJlLXN5c3RlbS5zdmOCLG1ldHJpY3Mtc2VydmVyLmt1YmUtc3lzdGVt
+    LnN2Yy5jbHVzdGVyLmxvY2FsMA0GCSqGSIb3DQEBCwUAA4IBAQC1d5rqbyDrlaNq
+    DlgX3W/fx6g4bioQRHOqswuM3KEwDHzIGfIki6K3+S7EGg8pGAQDqH4ckHmS1tbj
+    bcOTljpDqcNdlt5yKiZWt1VSECM0JhEpZ3jrFbJjp6l6YDbOx7KJHGCOirJ/aKCK
+    MMpp1Y5OsM+JJEMIMnFAcyl/eIet5t5+hUSQb+CMjrXnkdKITpaNOFsScRGQ2wBJ
+    RGzQds448r8YdLZPuipKLxkdtpCHLA32gT5QbCZnPe7F88hm2NAlbQN7hY2Ictqp
+    mzVO3OglgG1OS1glOL0niWUErK9PNfDjp7VMvpU3eIBH7lpwBAUvjtGHGlfWU796
+    ObtNgW0o
+    -----END CERTIFICATE-----
+
+tls:
+  type: existingSecret
+  existingSecret:
+    name: metrics-server-existing
+
+extraObjects:
+  # same dummy certificate as we are using in tls-custom-values.yaml
+  - apiVersion: v1
+    kind: Secret
+    metadata:
+      name: metrics-server-existing
+      namespace: '{{ .Release.Namespace }}'
+    type: Opaque
+    stringData:
+      tls.crt: |
+        -----BEGIN CERTIFICATE-----
+        MIIDYjCCAkqgAwIBAgIQUK3jdPbBzeYoPwPg0WJZ/DANBgkqhkiG9w0BAQsFADAZ
+        MRcwFQYDVQQDEw5tZXRyaWNzLXNlcnZlcjAeFw0yMzA3MTQxMTA3MjBaFw0yMzEw
+        MTIxMTA3MjBaMBkxFzAVBgNVBAMTDm1ldHJpY3Mtc2VydmVyMIIBIjANBgkqhkiG
+        9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c8M9HJtbRnrKQ60ChYfGguKUw1g2DLbFhvm
+        piivnv9ltRAXt7WQos42alAm2PuR/sDRBcWH0+OD+u3Kf75kARZb95l/eEwH1Ntw
+        2fvIfWnKdzcqd86C3M4ywNiBQ8BbpT24XNiV6Hs12OwHeNHjXkUGx5ObCtxbkFXj
+        rjb8UNOjD/+QvGQthrkAnJtPfnIKaInXc6/NwCtCTCdgcF1ut+FbWjePv9o0EHvG
+        SzI4MWXXGjfnxtFjmykzAXLfqJrXoMFF3ttUAmA7CQXOCJHUSAT6Pog7SnjSgh8O
+        5sCUM8qGFQ5rQO/6tBij7W/qK5/xP8gjjI6Qejh4F2eQhrz0ewIDAQABo4GlMIGi
+        MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMHMG
+        A1UdEQRsMGqCGm1ldHJpY3Mtc2VydmVyLmt1YmUtc3lzdGVtgh5tZXRyaWNzLXNl
+        cnZlci5rdWJlLXN5c3RlbS5zdmOCLG1ldHJpY3Mtc2VydmVyLmt1YmUtc3lzdGVt
+        LnN2Yy5jbHVzdGVyLmxvY2FsMA0GCSqGSIb3DQEBCwUAA4IBAQC1d5rqbyDrlaNq
+        DlgX3W/fx6g4bioQRHOqswuM3KEwDHzIGfIki6K3+S7EGg8pGAQDqH4ckHmS1tbj
+        bcOTljpDqcNdlt5yKiZWt1VSECM0JhEpZ3jrFbJjp6l6YDbOx7KJHGCOirJ/aKCK
+        MMpp1Y5OsM+JJEMIMnFAcyl/eIet5t5+hUSQb+CMjrXnkdKITpaNOFsScRGQ2wBJ
+        RGzQds448r8YdLZPuipKLxkdtpCHLA32gT5QbCZnPe7F88hm2NAlbQN7hY2Ictqp
+        mzVO3OglgG1OS1glOL0niWUErK9PNfDjp7VMvpU3eIBH7lpwBAUvjtGHGlfWU796
+        ObtNgW0o
+        -----END CERTIFICATE-----
+      tls.key: |
+        -----BEGIN RSA PRIVATE KEY-----
+        MIIEpAIBAAKCAQEA2c8M9HJtbRnrKQ60ChYfGguKUw1g2DLbFhvmpiivnv9ltRAX
+        t7WQos42alAm2PuR/sDRBcWH0+OD+u3Kf75kARZb95l/eEwH1Ntw2fvIfWnKdzcq
+        d86C3M4ywNiBQ8BbpT24XNiV6Hs12OwHeNHjXkUGx5ObCtxbkFXjrjb8UNOjD/+Q
+        vGQthrkAnJtPfnIKaInXc6/NwCtCTCdgcF1ut+FbWjePv9o0EHvGSzI4MWXXGjfn
+        xtFjmykzAXLfqJrXoMFF3ttUAmA7CQXOCJHUSAT6Pog7SnjSgh8O5sCUM8qGFQ5r
+        QO/6tBij7W/qK5/xP8gjjI6Qejh4F2eQhrz0ewIDAQABAoIBAQC1DgZI1S3dOWRf
+        1tcWY1krP1iWvVI5pdy0vjC3Aq8qTkdvgZcVoRpAG4bkTQhd6pFr4UBfudm06zV0
+        y2I/WjarKLj+U1zA1QLVkCx5J3F7vwsMmpD00ne5sLZD1DVv6mDENVAh7fB/NpyG
+        W33Ck0abwGloUWzaVF7Q1nTTBuYrEJmnLhgvWaUSv8KhcPko6uWLeuFCUaVarjaf
+        ghP1i1nA4ILXdHKWCZXSBxCH+EvWu68/avlfh4bptx7XmmPowayJQXvS1PK7WDg5
+        QbT9RYG6Hy2l+okqdk/ikfQb3Bh0TR0W2XImxzuq3zRnT4mHSVzd1Xy6rMgrFZaq
+        Iy76eHnRAoGBAO9+ZQllDK1GHKdIJu0mamMraP8HovKU5jasNPPw1A/t3nTie8nw
+        xHqyDk69sdrxKqvnv76oS8gSGQRcnjFhf0u2BizuNnF8hKq1T5yPY6IiH317Pa8b
+        stGfcaZYy0uTKv3WCT/Jbhkl2j0MtAENz8GsYR9G5L9n4NuUkTOzVO11AoGBAOjS
+        DIOc18uH5JF9Cc4C3MHfK+6Rdeb/+7RVtOLmTP1T6UNXfcWgyb++IrhDtik1LlSt
+        D0M5rcFF6YsQMOiR6RmQRbBdH/nuwcR7Bmp4KcFVLMsSx/P2nJo0exifecBI2sXC
+        FhKWp/rKICSNPWpDjXUPpWjG04qHWiGcZsMXGGwvAoGBAKV6nQ9vveGf9z5ysUrd
+        Z1cccJD+0s1wqt0OAgyn068p+bKjp0ryTKBGlXI8yj5wsr5TA/8VxD76mkSURk3y
+        gwVqQTwcYIvrsLNPUjHoNbyafU2zsPxkVBtZYyrAYb/XcTYxBPUJFkTUDcZvF5U+
+        2NWGaRk2X+oNOaYfMnEZsU3dAoGAMjJnhFDirf1EqKGe5Y30btBhNnSiSQXUDROV
+        hn5FBzF6T4yjj2KVXQPvlG707XmL3bHaYpIjBlK+gb8h7GLZMSvL+rR5WnfBy00D
+        Gx2BUy+8EqSf+9el+BFsoOhxZaXPlWe9PpDA8u91cqwJG8ooy55t+WM05N897ZU9
+        Cr8GAv0CgYBX/P0Ijw4x32Xb3y8uP3IaL9fHHBJZwuz0wVQlteNeV06gdlmp2NMs
+        9dbs8jMztJLTQ6SGnVxiDZg+ZFPWFD5wmyRQG5dz/norpzp8QFuZVIkK3VfSVHgl
+        kFQUZ8+mby4FJDLcPIUccPd9xSOvF55zfSfsktLjMa232sPzrZqcLA==
+        -----END RSA PRIVATE KEY-----