As of today, installing metrics-server requires tweaking the configuration since the default is to reach out to nodes by DNS and use TLS. A fair number of users have asked to support the default setup including TLS, which is a highly reasonable request.
The issue has originally been discussed in digitalocean/digitalocean-cloud-controller-manager#150. Several comments describe how to run metrics-server in TLS-less mode as a workaround for now.