--- apiVersion: v1 items: - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: |- Expose the Alertmanager web server within the cluster on the following ports: * Port 9094 provides access to all the Alertmanager endpoints. Granting access requires binding a user to the `monitoring-alertmanager-view` role (for read-only operations) or `monitoring-alertmanager-edit` role in the `openshift-monitoring` project. * Port 9092 provides access to the Alertmanager endpoints restricted to a given project. Granting access requires binding a user to the `monitoring-rules-edit` cluster role or `monitoring-edit` cluster role in the project. * Port 9097 provides access to the `/metrics` endpoint only. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: 236083daff5b39e8c94a6eb195fe034ddc416caa0f118c8cd0c643badab6f780 service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 service.beta.openshift.io/serving-cert-secret-name: alertmanager-main-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 creationTimestamp: "2026-11-03T22:13:17Z" labels: app.kubernetes.io/component: alert-router app.kubernetes.io/instance: main app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: alertmanager app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 0.31.1 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/instance: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9092,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9094,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9097,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:sessionAffinityConfig: .: {} f:clientIP: .: {} f:timeoutSeconds: {} f:type: {} manager: operator operation: Update time: "2026-11-03T22:13:17Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-11-03T22:13:17Z" name: alertmanager-main namespace: openshift-monitoring resourceVersion: "7659" uid: ff8e6866-798a-4b0a-bb88-12bd4e95f596 spec: clusterIP: 172.31.182.177 clusterIPs: - 172.31.182.177 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: web port: 9094 protocol: TCP targetPort: web - name: tenancy port: 9092 protocol: TCP targetPort: tenancy - name: metrics port: 9097 protocol: TCP targetPort: metrics selector: app.kubernetes.io/component: alert-router app.kubernetes.io/instance: main app.kubernetes.io/name: alertmanager app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: ClientIP sessionAffinityConfig: clientIP: timeoutSeconds: 10800 type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: creationTimestamp: "2026-11-03T22:13:17Z" labels: app.kubernetes.io/managed-by: prometheus-operator managed-by: prometheus-operator operated-alertmanager: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: .: {} f:app.kubernetes.io/managed-by: {} f:managed-by: {} f:operated-alertmanager: {} f:ownerReferences: .: {} k:{"uid":"2de8f931-3405-4c7b-bc49-fc5fb68d0c02"}: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9093,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9094,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9094,"protocol":"UDP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:publishNotReadyAddresses: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: PrometheusOperator operation: Update time: "2026-11-03T22:13:17Z" name: alertmanager-operated namespace: openshift-monitoring ownerReferences: - apiVersion: monitoring.coreos.com/v1 kind: Alertmanager name: main uid: 2de8f931-3405-4c7b-bc49-fc5fb68d0c02 resourceVersion: "7662" uid: 1237d1aa-2ed5-47d3-be8d-e44e12c676d8 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: web port: 9093 protocol: TCP targetPort: web - name: tcp-mesh port: 9094 protocol: TCP targetPort: mesh-tcp - name: udp-mesh port: 9094 protocol: UDP targetPort: mesh-udp publishNotReadyAddresses: true selector: app.kubernetes.io/name: alertmanager sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: include.release.openshift.io/hypershift: "true" include.release.openshift.io/ibm-cloud-managed: "true" include.release.openshift.io/self-managed-high-availability: "true" include.release.openshift.io/single-node-developer: "true" openshift.io/description: Expose the `/metrics` and `/validate-webhook` endpoints on port 8443. This port is for internal use, and no other usage is guaranteed. service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 service.beta.openshift.io/serving-cert-secret-name: cluster-monitoring-operator-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 creationTimestamp: "2026-11-03T22:05:55Z" labels: app.kubernetes.io/name: cluster-monitoring-operator managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:include.release.openshift.io/hypershift: {} f:include.release.openshift.io/ibm-cloud-managed: {} f:include.release.openshift.io/self-managed-high-availability: {} f:include.release.openshift.io/single-node-developer: {} f:openshift.io/description: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/name: {} f:ownerReferences: .: {} k:{"uid":"4e2b92bc-2555-43aa-a3e1-d3fb3bfff2da"}: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":8443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: cluster-version-operator operation: Update time: "2026-11-03T22:05:55Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-11-03T22:12:56Z" name: cluster-monitoring-operator namespace: openshift-monitoring ownerReferences: - apiVersion: config.openshift.io/v1 controller: true kind: ClusterVersion name: version uid: 4e2b92bc-2555-43aa-a3e1-d3fb3bfff2da resourceVersion: "6602" uid: f48abc33-628a-42e1-a8ac-e73bdedd364b spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 8443 protocol: TCP targetPort: https selector: app.kubernetes.io/name: cluster-monitoring-operator sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: |- Expose kube-state-metrics `/metrics` endpoints within the cluster on the following ports: * Port 8443 provides access to the Kubernetes resource metrics. This port is for internal use, and no other usage is guaranteed. * Port 9443 provides access to the internal kube-state-metrics metrics. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: ae4d3a8c8617e769f0387af404f8c2f31a3fd8315550a41bfd348657753fbf17 service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 service.beta.openshift.io/serving-cert-secret-name: kube-state-metrics-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 creationTimestamp: "2026-11-03T22:13:16Z" labels: app.kubernetes.io/component: exporter app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: kube-state-metrics app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 2.18.0 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":8443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-11-03T22:13:16Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-11-03T22:13:16Z" name: kube-state-metrics namespace: openshift-monitoring resourceVersion: "7510" uid: ed03fb77-ded3-4344-9c05-be342ae23c37 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https-main port: 8443 protocol: TCP targetPort: https-main - name: https-self port: 9443 protocol: TCP targetPort: https-self selector: app.kubernetes.io/component: exporter app.kubernetes.io/name: kube-state-metrics app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: Expose the metrics-server web server on port 443. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: 738651c6b539cf0e168548ae2065ba02470057f6ebccccd8918c23affb82eb40 service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 service.beta.openshift.io/serving-cert-secret-name: metrics-server-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 creationTimestamp: "2026-11-03T22:13:16Z" labels: app.kubernetes.io/component: metrics-server app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: metrics-server app.kubernetes.io/part-of: openshift-monitoring managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:spec: f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-11-03T22:13:16Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-11-03T22:13:16Z" name: metrics-server namespace: openshift-monitoring resourceVersion: "7578" uid: a347ad5a-d845-48f7-b1b4-ed73fd6d4d94 spec: clusterIP: 172.31.63.242 clusterIPs: - 172.31.63.242 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 443 protocol: TCP targetPort: https selector: app.kubernetes.io/name: metrics-server app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: Expose the monitoring plugin service on port 9443. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: abb49bcfbfdaa8818707515b726271b3a8772fa06b93c8b76e98024ecc64627d service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 service.beta.openshift.io/serving-cert-secret-name: monitoring-plugin-cert service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 creationTimestamp: "2026-11-03T22:13:21Z" labels: app.kubernetes.io/component: monitoring-plugin app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: monitoring-plugin app.kubernetes.io/part-of: openshift-monitoring managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:spec: f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-11-03T22:13:21Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-11-03T22:13:21Z" name: monitoring-plugin namespace: openshift-monitoring resourceVersion: "7909" uid: d495bf54-b66e-4f04-be39-1fb718ed96fb spec: clusterIP: 172.31.12.104 clusterIPs: - 172.31.12.104 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 9443 protocol: TCP targetPort: https selector: app.kubernetes.io/component: monitoring-plugin app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: monitoring-plugin app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: Expose the `/metrics` endpoint on port 9100. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: d11298abf286515ec549cbce71460830e83368171e5bb6247b210c8624d8d024 service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 service.beta.openshift.io/serving-cert-secret-name: node-exporter-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 creationTimestamp: "2026-11-03T22:13:16Z" labels: app.kubernetes.io/component: exporter app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: node-exporter app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 1.10.2 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9100,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-11-03T22:13:16Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-11-03T22:13:16Z" name: node-exporter namespace: openshift-monitoring resourceVersion: "7484" uid: 0b4b793f-19ab-4c80-9fec-fb630ff1974b spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 9100 protocol: TCP targetPort: https selector: app.kubernetes.io/component: exporter app.kubernetes.io/name: node-exporter app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: |- Expose openshift-state-metrics `/metrics` endpoints within the cluster on the following ports: * Port 8443 provides access to the OpenShift resource metrics. This port is for internal use, and no other usage is guaranteed. * Port 9443 provides access to the internal `openshift-state-metrics` metrics. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: 700eac9efd8a924fdb3738d2a7935c5f8c8de046a1c3806df1ca3c92076a4ecc service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 service.beta.openshift.io/serving-cert-secret-name: openshift-state-metrics-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 creationTimestamp: "2026-11-03T22:13:16Z" labels: app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/part-of: openshift-monitoring k8s-app: openshift-state-metrics managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/part-of: {} f:k8s-app: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":8443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-11-03T22:13:16Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-11-03T22:13:16Z" name: openshift-state-metrics namespace: openshift-monitoring resourceVersion: "7471" uid: ed852ca5-68d3-4fde-9dd3-3c5bc36efe21 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https-main port: 8443 protocol: TCP targetPort: https-main - name: https-self port: 9443 protocol: TCP targetPort: https-self selector: app.kubernetes.io/component: exporter app.kubernetes.io/name: openshift-state-metrics sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: |- Expose the Prometheus web server within the cluster on the following ports: * Port 9091 provides access to all the Prometheus endpoints. Granting access requires binding a user to the `cluster-monitoring-view` cluster role or `cluster-monitoring-metrics-api` cluster role in the `openshift-monitoring` project. * Port 9092 provides access to the `/metrics` and `/federate` endpoints only. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: 44db31cd73c886ad771ecc7e4731887da474737fa746e940e1abe3283798b76f service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 service.beta.openshift.io/serving-cert-secret-name: prometheus-k8s-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 creationTimestamp: "2026-11-03T22:13:19Z" labels: app.kubernetes.io/component: prometheus app.kubernetes.io/instance: k8s app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: prometheus app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 3.9.1 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/instance: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9091,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9092,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:sessionAffinityConfig: .: {} f:clientIP: .: {} f:timeoutSeconds: {} f:type: {} manager: operator operation: Update time: "2026-11-03T22:13:19Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-11-03T22:13:19Z" name: prometheus-k8s namespace: openshift-monitoring resourceVersion: "7813" uid: eed29744-b190-4b25-836f-0ce3a90b8709 spec: clusterIP: 172.31.121.208 clusterIPs: - 172.31.121.208 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: web port: 9091 protocol: TCP targetPort: web - name: metrics port: 9092 protocol: TCP targetPort: metrics selector: app.kubernetes.io/component: prometheus app.kubernetes.io/instance: k8s app.kubernetes.io/name: prometheus app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: ClientIP sessionAffinityConfig: clientIP: timeoutSeconds: 10800 type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: operator.openshift.io/spec-hash: af5d784dec099b84794ed97fe5e2c58ad0d83f1677b676689144d8678d5dbddf service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 service.beta.openshift.io/serving-cert-secret-name: prometheus-k8s-thanos-sidecar-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 creationTimestamp: "2026-11-03T22:13:19Z" labels: app.kubernetes.io/component: thanos-sidecar app.kubernetes.io/instance: k8s app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: prometheus app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 3.9.1 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/instance: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":10902,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-11-03T22:13:19Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-11-03T22:13:19Z" name: prometheus-k8s-thanos-sidecar namespace: openshift-monitoring resourceVersion: "7817" uid: f0f21a29-9330-4eb5-ba7a-372fc61c47af spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: thanos-proxy port: 10902 protocol: TCP targetPort: thanos-proxy selector: app.kubernetes.io/component: prometheus app.kubernetes.io/instance: k8s app.kubernetes.io/name: prometheus app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: creationTimestamp: "2026-11-03T22:13:23Z" labels: app.kubernetes.io/managed-by: prometheus-operator managed-by: prometheus-operator operated-prometheus: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: .: {} f:app.kubernetes.io/managed-by: {} f:managed-by: {} f:operated-prometheus: {} f:ownerReferences: .: {} k:{"uid":"9fb846a1-012f-4af4-8ea0-bb27ef5a2b9a"}: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9090,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":10901,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: PrometheusOperator operation: Update time: "2026-11-03T22:13:23Z" name: prometheus-operated namespace: openshift-monitoring ownerReferences: - apiVersion: monitoring.coreos.com/v1 kind: Prometheus name: k8s uid: 9fb846a1-012f-4af4-8ea0-bb27ef5a2b9a resourceVersion: "7993" uid: 44cb2c8b-7290-4360-8a15-091ebab99dc6 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: web port: 9090 protocol: TCP targetPort: web - name: grpc port: 10901 protocol: TCP targetPort: grpc selector: app.kubernetes.io/name: prometheus sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: Expose the `/metrics` endpoint on port 8443. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: eea169d57280f4b263a7e5bde66e0f7f4c8f87869ef0128d57e3628e6e3388eb service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 service.beta.openshift.io/serving-cert-secret-name: prometheus-operator-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 creationTimestamp: "2026-11-03T22:13:11Z" labels: app.kubernetes.io/component: controller app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: prometheus-operator app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 0.90.1 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":8443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-11-03T22:13:11Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-11-03T22:13:11Z" name: prometheus-operator namespace: openshift-monitoring resourceVersion: "7297" uid: dd6b13e3-acc7-493d-aeac-a62570d02fa7 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 8443 protocol: TCP targetPort: https selector: app.kubernetes.io/component: controller app.kubernetes.io/name: prometheus-operator app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: Expose the admission webhook service which validates `PrometheusRules` and `AlertmanagerConfig` custom resources on port 8443. operator.openshift.io/spec-hash: 097457c83cbcaea7eec544b71a7fef08bd2e6997ede8206892c845fcae7b6cbc service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 service.beta.openshift.io/serving-cert-secret-name: prometheus-operator-admission-webhook-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 creationTimestamp: "2026-11-03T22:12:59Z" labels: app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: prometheus-operator-admission-webhook app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 0.90.1 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":8443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-11-03T22:12:59Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-11-03T22:13:05Z" name: prometheus-operator-admission-webhook namespace: openshift-monitoring resourceVersion: "6976" uid: fddc983f-bad3-4d7a-ac56-c9aaed5b329c spec: clusterIP: 172.31.35.43 clusterIPs: - 172.31.35.43 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 8443 protocol: TCP targetPort: https selector: app.kubernetes.io/name: prometheus-operator-admission-webhook app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: Expose the `/metrics` endpoint on port 8443. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: 429ffbc222b67dbecaac37743f4dd367ba8b08b309886ac4c0c42ad1f929e1be service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 service.beta.openshift.io/serving-cert-secret-name: telemeter-client-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 creationTimestamp: "2026-11-03T22:13:16Z" labels: app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/part-of: openshift-monitoring k8s-app: telemeter-client managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/part-of: {} f:k8s-app: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":8443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-11-03T22:13:16Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-11-03T22:13:16Z" name: telemeter-client namespace: openshift-monitoring resourceVersion: "7534" uid: 167acb02-2e28-4313-89f3-16f9598627a4 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 8443 protocol: TCP targetPort: https selector: app.kubernetes.io/component: telemetry-metrics-collector app.kubernetes.io/name: telemeter-client sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: |- Expose the Thanos Querier web server within the cluster on the following ports: * Port 9091 provides access to all the Thanos Querier endpoints. Granting access requires binding a user to the `cluster-monitoring-view` cluster role or `cluster-monitoring-metrics-api` cluster role in the `openshift-monitoring` project. * Port 9092 provides access to the `/api/v1/query`, `/api/v1/query_range/`, `/api/v1/labels`, `/api/v1/label/*/values`, and `/api/v1/series` endpoints restricted to a given project. Granting access requires binding a user to the `view` cluster role in the project. * Port 9093 provides access to the `/api/v1/alerts`, and `/api/v1/rules` endpoints restricted to a given project. Granting access requires binding a user to the `monitoring-rules-edit` cluster role or `monitoring-edit` cluster role or `monitoring-rules-view` cluster role in the project. * Port 9094 provides access to the `/metrics` endpoint only. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: 0c29478f63d34bf0dd2a114c15b5518c2e967a61c11e61f2676c05a268c8b7f8 service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 service.beta.openshift.io/serving-cert-secret-name: thanos-querier-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793743969 creationTimestamp: "2026-11-03T22:13:15Z" labels: app.kubernetes.io/component: query-layer app.kubernetes.io/instance: thanos-querier app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: thanos-query app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 0.41.0 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/instance: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9091,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9092,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9093,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9094,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-11-03T22:13:15Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-11-03T22:13:16Z" name: thanos-querier namespace: openshift-monitoring resourceVersion: "7428" uid: 7834ff1e-4df1-423f-abe2-e3b538becf0f spec: clusterIP: 172.31.227.111 clusterIPs: - 172.31.227.111 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: web port: 9091 protocol: TCP targetPort: web - name: tenancy port: 9092 protocol: TCP targetPort: tenancy - name: tenancy-rules port: 9093 protocol: TCP targetPort: tenancy-rules - name: metrics port: 9094 protocol: TCP targetPort: metrics selector: app.kubernetes.io/component: query-layer app.kubernetes.io/instance: thanos-querier app.kubernetes.io/name: thanos-query app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} kind: ServiceList metadata: resourceVersion: "166361"