--- apiVersion: v1 items: - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: |- Expose the Alertmanager web server within the cluster on the following ports: * Port 9094 provides access to all the Alertmanager endpoints. Granting access requires binding a user to the `monitoring-alertmanager-view` role (for read-only operations) or `monitoring-alertmanager-edit` role in the `openshift-monitoring` project. * Port 9092 provides access to the Alertmanager endpoints restricted to a given project. Granting access requires binding a user to the `monitoring-rules-edit` cluster role or `monitoring-edit` cluster role in the project. * Port 9097 provides access to the `/metrics` endpoint only. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: 236083daff5b39e8c94a6eb195fe034ddc416caa0f118c8cd0c643badab6f780 service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 service.beta.openshift.io/serving-cert-secret-name: alertmanager-main-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 creationTimestamp: "2026-10-30T18:38:55Z" labels: app.kubernetes.io/component: alert-router app.kubernetes.io/instance: main app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: alertmanager app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 0.31.1 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/instance: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9092,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9094,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9097,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:sessionAffinityConfig: .: {} f:clientIP: .: {} f:timeoutSeconds: {} f:type: {} manager: operator operation: Update time: "2026-10-30T18:38:55Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-30T18:38:55Z" name: alertmanager-main namespace: openshift-monitoring resourceVersion: "7373" uid: 170627ea-74f2-4632-b535-0ab537d32629 spec: clusterIP: 172.31.120.201 clusterIPs: - 172.31.120.201 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: web port: 9094 protocol: TCP targetPort: web - name: tenancy port: 9092 protocol: TCP targetPort: tenancy - name: metrics port: 9097 protocol: TCP targetPort: metrics selector: app.kubernetes.io/component: alert-router app.kubernetes.io/instance: main app.kubernetes.io/name: alertmanager app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: ClientIP sessionAffinityConfig: clientIP: timeoutSeconds: 10800 type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: creationTimestamp: "2026-10-30T18:38:56Z" labels: app.kubernetes.io/managed-by: prometheus-operator managed-by: prometheus-operator operated-alertmanager: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: .: {} f:app.kubernetes.io/managed-by: {} f:managed-by: {} f:operated-alertmanager: {} f:ownerReferences: .: {} k:{"uid":"2961bdb1-5275-4ce9-bda5-df89e3fdb9fa"}: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9093,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9094,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9094,"protocol":"UDP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:publishNotReadyAddresses: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: PrometheusOperator operation: Update time: "2026-10-30T18:38:56Z" name: alertmanager-operated namespace: openshift-monitoring ownerReferences: - apiVersion: monitoring.coreos.com/v1 kind: Alertmanager name: main uid: 2961bdb1-5275-4ce9-bda5-df89e3fdb9fa resourceVersion: "7414" uid: bbf1af4e-f183-4886-97e1-54caa3c61b69 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: web port: 9093 protocol: TCP targetPort: web - name: tcp-mesh port: 9094 protocol: TCP targetPort: mesh-tcp - name: udp-mesh port: 9094 protocol: UDP targetPort: mesh-udp publishNotReadyAddresses: true selector: app.kubernetes.io/name: alertmanager sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: include.release.openshift.io/hypershift: "true" include.release.openshift.io/ibm-cloud-managed: "true" include.release.openshift.io/self-managed-high-availability: "true" include.release.openshift.io/single-node-developer: "true" openshift.io/description: Expose the `/metrics` and `/validate-webhook` endpoints on port 8443. This port is for internal use, and no other usage is guaranteed. service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 service.beta.openshift.io/serving-cert-secret-name: cluster-monitoring-operator-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 creationTimestamp: "2026-10-30T18:33:54Z" labels: app.kubernetes.io/name: cluster-monitoring-operator managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:include.release.openshift.io/hypershift: {} f:include.release.openshift.io/ibm-cloud-managed: {} f:include.release.openshift.io/self-managed-high-availability: {} f:include.release.openshift.io/single-node-developer: {} f:openshift.io/description: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/name: {} f:ownerReferences: .: {} k:{"uid":"d1ffda28-1f68-4f04-b454-b065f5c049d4"}: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":8443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: cluster-version-operator operation: Update time: "2026-10-30T18:33:54Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-30T18:38:31Z" name: cluster-monitoring-operator namespace: openshift-monitoring ownerReferences: - apiVersion: config.openshift.io/v1 controller: true kind: ClusterVersion name: version uid: d1ffda28-1f68-4f04-b454-b065f5c049d4 resourceVersion: "6375" uid: c98fc7e5-5d69-4e0b-80d3-062d3c5bba5b spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 8443 protocol: TCP targetPort: https selector: app.kubernetes.io/name: cluster-monitoring-operator sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: |- Expose kube-state-metrics `/metrics` endpoints within the cluster on the following ports: * Port 8443 provides access to the Kubernetes resource metrics. This port is for internal use, and no other usage is guaranteed. * Port 9443 provides access to the internal kube-state-metrics metrics. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: ae4d3a8c8617e769f0387af404f8c2f31a3fd8315550a41bfd348657753fbf17 service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 service.beta.openshift.io/serving-cert-secret-name: kube-state-metrics-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 creationTimestamp: "2026-10-30T18:38:54Z" labels: app.kubernetes.io/component: exporter app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: kube-state-metrics app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 2.18.0 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":8443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-10-30T18:38:54Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-30T18:38:54Z" name: kube-state-metrics namespace: openshift-monitoring resourceVersion: "7245" uid: b847d7d9-5a42-4091-b34b-cc473bb93651 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https-main port: 8443 protocol: TCP targetPort: https-main - name: https-self port: 9443 protocol: TCP targetPort: https-self selector: app.kubernetes.io/component: exporter app.kubernetes.io/name: kube-state-metrics app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: Expose the metrics-server web server on port 443. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: 738651c6b539cf0e168548ae2065ba02470057f6ebccccd8918c23affb82eb40 service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 service.beta.openshift.io/serving-cert-secret-name: metrics-server-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 creationTimestamp: "2026-10-30T18:38:54Z" labels: app.kubernetes.io/component: metrics-server app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: metrics-server app.kubernetes.io/part-of: openshift-monitoring managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:spec: f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-10-30T18:38:54Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-30T18:38:54Z" name: metrics-server namespace: openshift-monitoring resourceVersion: "7304" uid: db947436-11cc-4f45-b1a7-edb2c0f87ddc spec: clusterIP: 172.31.87.1 clusterIPs: - 172.31.87.1 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 443 protocol: TCP targetPort: https selector: app.kubernetes.io/name: metrics-server app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: Expose the monitoring plugin service on port 9443. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: abb49bcfbfdaa8818707515b726271b3a8772fa06b93c8b76e98024ecc64627d service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 service.beta.openshift.io/serving-cert-secret-name: monitoring-plugin-cert service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 creationTimestamp: "2026-10-30T18:38:58Z" labels: app.kubernetes.io/component: monitoring-plugin app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: monitoring-plugin app.kubernetes.io/part-of: openshift-monitoring managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:spec: f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-10-30T18:38:58Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-30T18:38:59Z" name: monitoring-plugin namespace: openshift-monitoring resourceVersion: "7598" uid: f860e011-02d9-4f5b-88f1-b709b7c9425c spec: clusterIP: 172.31.186.95 clusterIPs: - 172.31.186.95 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 9443 protocol: TCP targetPort: https selector: app.kubernetes.io/component: monitoring-plugin app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: monitoring-plugin app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: Expose the `/metrics` endpoint on port 9100. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: d11298abf286515ec549cbce71460830e83368171e5bb6247b210c8624d8d024 service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 service.beta.openshift.io/serving-cert-secret-name: node-exporter-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 creationTimestamp: "2026-10-30T18:38:54Z" labels: app.kubernetes.io/component: exporter app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: node-exporter app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 1.10.2 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9100,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-10-30T18:38:54Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-30T18:38:54Z" name: node-exporter namespace: openshift-monitoring resourceVersion: "7219" uid: f7a5c513-4c5c-48e9-b1c9-8ace41bd981e spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 9100 protocol: TCP targetPort: https selector: app.kubernetes.io/component: exporter app.kubernetes.io/name: node-exporter app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: |- Expose openshift-state-metrics `/metrics` endpoints within the cluster on the following ports: * Port 8443 provides access to the OpenShift resource metrics. This port is for internal use, and no other usage is guaranteed. * Port 9443 provides access to the internal `openshift-state-metrics` metrics. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: 700eac9efd8a924fdb3738d2a7935c5f8c8de046a1c3806df1ca3c92076a4ecc service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 service.beta.openshift.io/serving-cert-secret-name: openshift-state-metrics-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 creationTimestamp: "2026-10-30T18:38:53Z" labels: app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/part-of: openshift-monitoring k8s-app: openshift-state-metrics managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/part-of: {} f:k8s-app: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":8443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-10-30T18:38:53Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-30T18:38:54Z" name: openshift-state-metrics namespace: openshift-monitoring resourceVersion: "7204" uid: b1fae03c-4475-46bf-a367-de1883e341ff spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https-main port: 8443 protocol: TCP targetPort: https-main - name: https-self port: 9443 protocol: TCP targetPort: https-self selector: app.kubernetes.io/component: exporter app.kubernetes.io/name: openshift-state-metrics sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: |- Expose the Prometheus web server within the cluster on the following ports: * Port 9091 provides access to all the Prometheus endpoints. Granting access requires binding a user to the `cluster-monitoring-view` cluster role or `cluster-monitoring-metrics-api` cluster role in the `openshift-monitoring` project. * Port 9092 provides access to the `/metrics` and `/federate` endpoints only. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: 44db31cd73c886ad771ecc7e4731887da474737fa746e940e1abe3283798b76f service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 service.beta.openshift.io/serving-cert-secret-name: prometheus-k8s-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 creationTimestamp: "2026-10-30T18:38:58Z" labels: app.kubernetes.io/component: prometheus app.kubernetes.io/instance: k8s app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: prometheus app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 3.9.1 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/instance: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9091,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9092,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:sessionAffinityConfig: .: {} f:clientIP: .: {} f:timeoutSeconds: {} f:type: {} manager: operator operation: Update time: "2026-10-30T18:38:58Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-30T18:38:58Z" name: prometheus-k8s namespace: openshift-monitoring resourceVersion: "7566" uid: bd1b96e4-ef22-4883-bba4-ae412a699789 spec: clusterIP: 172.31.229.138 clusterIPs: - 172.31.229.138 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: web port: 9091 protocol: TCP targetPort: web - name: metrics port: 9092 protocol: TCP targetPort: metrics selector: app.kubernetes.io/component: prometheus app.kubernetes.io/instance: k8s app.kubernetes.io/name: prometheus app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: ClientIP sessionAffinityConfig: clientIP: timeoutSeconds: 10800 type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: operator.openshift.io/spec-hash: af5d784dec099b84794ed97fe5e2c58ad0d83f1677b676689144d8678d5dbddf service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 service.beta.openshift.io/serving-cert-secret-name: prometheus-k8s-thanos-sidecar-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 creationTimestamp: "2026-10-30T18:38:58Z" labels: app.kubernetes.io/component: thanos-sidecar app.kubernetes.io/instance: k8s app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: prometheus app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 3.9.1 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/instance: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":10902,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-10-30T18:38:58Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-30T18:38:58Z" name: prometheus-k8s-thanos-sidecar namespace: openshift-monitoring resourceVersion: "7576" uid: a06ba83d-eb47-4c37-82ce-c0c6ba7c215b spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: thanos-proxy port: 10902 protocol: TCP targetPort: thanos-proxy selector: app.kubernetes.io/component: prometheus app.kubernetes.io/instance: k8s app.kubernetes.io/name: prometheus app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: creationTimestamp: "2026-10-30T18:39:03Z" labels: app.kubernetes.io/managed-by: prometheus-operator managed-by: prometheus-operator operated-prometheus: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: .: {} f:app.kubernetes.io/managed-by: {} f:managed-by: {} f:operated-prometheus: {} f:ownerReferences: .: {} k:{"uid":"e2e0f3aa-af27-49ac-aac5-2ebc8308526f"}: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9090,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":10901,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: PrometheusOperator operation: Update time: "2026-10-30T18:39:03Z" name: prometheus-operated namespace: openshift-monitoring ownerReferences: - apiVersion: monitoring.coreos.com/v1 kind: Prometheus name: k8s uid: e2e0f3aa-af27-49ac-aac5-2ebc8308526f resourceVersion: "7841" uid: 5190c4d5-5c38-4d00-a254-3880cd419d37 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: web port: 9090 protocol: TCP targetPort: web - name: grpc port: 10901 protocol: TCP targetPort: grpc selector: app.kubernetes.io/name: prometheus sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: Expose the `/metrics` endpoint on port 8443. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: eea169d57280f4b263a7e5bde66e0f7f4c8f87869ef0128d57e3628e6e3388eb service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 service.beta.openshift.io/serving-cert-secret-name: prometheus-operator-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 creationTimestamp: "2026-10-30T18:38:47Z" labels: app.kubernetes.io/component: controller app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: prometheus-operator app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 0.90.1 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":8443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-10-30T18:38:47Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-30T18:38:47Z" name: prometheus-operator namespace: openshift-monitoring resourceVersion: "7017" uid: 238be6e6-4ee5-4c8f-b52d-fab692bee1b0 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 8443 protocol: TCP targetPort: https selector: app.kubernetes.io/component: controller app.kubernetes.io/name: prometheus-operator app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: Expose the admission webhook service which validates `PrometheusRules` and `AlertmanagerConfig` custom resources on port 8443. operator.openshift.io/spec-hash: 097457c83cbcaea7eec544b71a7fef08bd2e6997ede8206892c845fcae7b6cbc service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 service.beta.openshift.io/serving-cert-secret-name: prometheus-operator-admission-webhook-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 creationTimestamp: "2026-10-30T18:38:38Z" labels: app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: prometheus-operator-admission-webhook app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 0.90.1 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":8443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-10-30T18:38:38Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-30T18:38:42Z" name: prometheus-operator-admission-webhook namespace: openshift-monitoring resourceVersion: "6867" uid: 40816c49-d4f8-4756-ae4e-92c69380c56c spec: clusterIP: 172.31.91.24 clusterIPs: - 172.31.91.24 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 8443 protocol: TCP targetPort: https selector: app.kubernetes.io/name: prometheus-operator-admission-webhook app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: Expose the `/metrics` endpoint on port 8443. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: 429ffbc222b67dbecaac37743f4dd367ba8b08b309886ac4c0c42ad1f929e1be service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 service.beta.openshift.io/serving-cert-secret-name: telemeter-client-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 creationTimestamp: "2026-10-30T18:38:54Z" labels: app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/part-of: openshift-monitoring k8s-app: telemeter-client managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/part-of: {} f:k8s-app: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":8443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-10-30T18:38:54Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-30T18:38:54Z" name: telemeter-client namespace: openshift-monitoring resourceVersion: "7242" uid: 579148f8-05e0-4f0e-b564-e42cd23415c9 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 8443 protocol: TCP targetPort: https selector: app.kubernetes.io/component: telemetry-metrics-collector app.kubernetes.io/name: telemeter-client sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: |- Expose the Thanos Querier web server within the cluster on the following ports: * Port 9091 provides access to all the Thanos Querier endpoints. Granting access requires binding a user to the `cluster-monitoring-view` cluster role or `cluster-monitoring-metrics-api` cluster role in the `openshift-monitoring` project. * Port 9092 provides access to the `/api/v1/query`, `/api/v1/query_range/`, `/api/v1/labels`, `/api/v1/label/*/values`, and `/api/v1/series` endpoints restricted to a given project. Granting access requires binding a user to the `view` cluster role in the project. * Port 9093 provides access to the `/api/v1/alerts`, and `/api/v1/rules` endpoints restricted to a given project. Granting access requires binding a user to the `monitoring-rules-edit` cluster role or `monitoring-edit` cluster role or `monitoring-rules-view` cluster role in the project. * Port 9094 provides access to the `/metrics` endpoint only. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: 0c29478f63d34bf0dd2a114c15b5518c2e967a61c11e61f2676c05a268c8b7f8 service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 service.beta.openshift.io/serving-cert-secret-name: thanos-querier-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793385502 creationTimestamp: "2026-10-30T18:38:53Z" labels: app.kubernetes.io/component: query-layer app.kubernetes.io/instance: thanos-querier app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: thanos-query app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 0.41.0 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/instance: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9091,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9092,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9093,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9094,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-10-30T18:38:53Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-30T18:38:53Z" name: thanos-querier namespace: openshift-monitoring resourceVersion: "7164" uid: 8258d184-b464-4c7c-a432-ae806f74024c spec: clusterIP: 172.31.141.9 clusterIPs: - 172.31.141.9 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: web port: 9091 protocol: TCP targetPort: web - name: tenancy port: 9092 protocol: TCP targetPort: tenancy - name: tenancy-rules port: 9093 protocol: TCP targetPort: tenancy-rules - name: metrics port: 9094 protocol: TCP targetPort: metrics selector: app.kubernetes.io/component: query-layer app.kubernetes.io/instance: thanos-querier app.kubernetes.io/name: thanos-query app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} kind: ServiceList metadata: resourceVersion: "36645"