diff --git a/kubernetes/infrastructure/controllers/metrics-server/release.yaml b/kubernetes/infrastructure/controllers/metrics-server/release.yaml
new file mode 100644
index 0000000..77478eb
--- /dev/null
+++ b/kubernetes/infrastructure/controllers/metrics-server/release.yaml
@@ -0,0 +1,28 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: metrics-server
+  namespace: flux-system
+spec:
+  chart:
+    spec:
+      chart: metrics-server
+      version: 3.13.0
+      reconcileStrategy: ChartVersion
+      sourceRef:
+        kind: HelmRepository
+        name: metrics-server
+        namespace: flux-system
+  targetNamespace: kube-system
+  interval: 1m0s
+  values:
+    args:
+      # Talos Linux uses self-signed kubelet serving certs by default
+      - --kubelet-insecure-tls
+    resources:
+      requests:
+        cpu: 100m
+        memory: 200Mi
+      limits:
+        memory: 256Mi
diff --git a/kubernetes/infrastructure/controllers/metrics-server/repository.yaml b/kubernetes/infrastructure/controllers/metrics-server/repository.yaml
new file mode 100644
index 0000000..db25c1e
--- /dev/null
+++ b/kubernetes/infrastructure/controllers/metrics-server/repository.yaml
@@ -0,0 +1,9 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: metrics-server
+  namespace: flux-system
+spec:
+  interval: 1h
+  url: https://kubernetes-sigs.github.io/metrics-server/