--- apiVersion: v1 items: - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: |- Expose the Alertmanager web server within the cluster on the following ports: * Port 9094 provides access to all the Alertmanager endpoints. Granting access requires binding a user to the `monitoring-alertmanager-view` role (for read-only operations) or `monitoring-alertmanager-edit` role in the `openshift-monitoring` project. * Port 9092 provides access to the Alertmanager endpoints restricted to a given project. Granting access requires binding a user to the `monitoring-rules-edit` cluster role or `monitoring-edit` cluster role in the project. * Port 9097 provides access to the `/metrics` endpoint only. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: 236083daff5b39e8c94a6eb195fe034ddc416caa0f118c8cd0c643badab6f780 service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 service.beta.openshift.io/serving-cert-secret-name: alertmanager-main-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 creationTimestamp: "2026-10-29T21:42:43Z" labels: app.kubernetes.io/component: alert-router app.kubernetes.io/instance: main app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: alertmanager app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 0.31.1 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/instance: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9092,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9094,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9097,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:sessionAffinityConfig: .: {} f:clientIP: .: {} f:timeoutSeconds: {} f:type: {} manager: operator operation: Update time: "2026-10-29T21:42:43Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-29T21:42:43Z" name: alertmanager-main namespace: openshift-monitoring resourceVersion: "7981" uid: a9d69394-c343-4dd8-ae3a-10a1c626b0df spec: clusterIP: 172.31.100.105 clusterIPs: - 172.31.100.105 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: web port: 9094 protocol: TCP targetPort: web - name: tenancy port: 9092 protocol: TCP targetPort: tenancy - name: metrics port: 9097 protocol: TCP targetPort: metrics selector: app.kubernetes.io/component: alert-router app.kubernetes.io/instance: main app.kubernetes.io/name: alertmanager app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: ClientIP sessionAffinityConfig: clientIP: timeoutSeconds: 10800 type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: creationTimestamp: "2026-10-29T21:42:43Z" labels: app.kubernetes.io/managed-by: prometheus-operator managed-by: prometheus-operator operated-alertmanager: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: .: {} f:app.kubernetes.io/managed-by: {} f:managed-by: {} f:operated-alertmanager: {} f:ownerReferences: .: {} k:{"uid":"4eb83a02-fc59-41f1-9928-0147ac3ece3e"}: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9093,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9094,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9094,"protocol":"UDP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:publishNotReadyAddresses: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: PrometheusOperator operation: Update time: "2026-10-29T21:42:43Z" name: alertmanager-operated namespace: openshift-monitoring ownerReferences: - apiVersion: monitoring.coreos.com/v1 kind: Alertmanager name: main uid: 4eb83a02-fc59-41f1-9928-0147ac3ece3e resourceVersion: "7992" uid: 7fe9099d-4ee4-4ac1-b675-b4a2f488e8f5 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: web port: 9093 protocol: TCP targetPort: web - name: tcp-mesh port: 9094 protocol: TCP targetPort: mesh-tcp - name: udp-mesh port: 9094 protocol: UDP targetPort: mesh-udp publishNotReadyAddresses: true selector: app.kubernetes.io/name: alertmanager sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: include.release.openshift.io/hypershift: "true" include.release.openshift.io/ibm-cloud-managed: "true" include.release.openshift.io/self-managed-high-availability: "true" include.release.openshift.io/single-node-developer: "true" openshift.io/description: Expose the `/metrics` and `/validate-webhook` endpoints on port 8443. This port is for internal use, and no other usage is guaranteed. service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 service.beta.openshift.io/serving-cert-secret-name: cluster-monitoring-operator-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 creationTimestamp: "2026-10-29T21:30:29Z" labels: app.kubernetes.io/name: cluster-monitoring-operator managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:include.release.openshift.io/hypershift: {} f:include.release.openshift.io/ibm-cloud-managed: {} f:include.release.openshift.io/self-managed-high-availability: {} f:include.release.openshift.io/single-node-developer: {} f:openshift.io/description: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/name: {} f:ownerReferences: .: {} k:{"uid":"6d8d3268-a0fe-48d1-a0a0-7883caeb2fbf"}: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":8443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: cluster-version-operator operation: Update time: "2026-10-29T21:30:29Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-29T21:42:19Z" name: cluster-monitoring-operator namespace: openshift-monitoring ownerReferences: - apiVersion: config.openshift.io/v1 controller: true kind: ClusterVersion name: version uid: 6d8d3268-a0fe-48d1-a0a0-7883caeb2fbf resourceVersion: "6986" uid: 8251a955-1cbb-4cc8-b206-5bdadeec45a0 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 8443 protocol: TCP targetPort: https selector: app.kubernetes.io/name: cluster-monitoring-operator sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: |- Expose kube-state-metrics `/metrics` endpoints within the cluster on the following ports: * Port 8443 provides access to the Kubernetes resource metrics. This port is for internal use, and no other usage is guaranteed. * Port 9443 provides access to the internal kube-state-metrics metrics. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: ae4d3a8c8617e769f0387af404f8c2f31a3fd8315550a41bfd348657753fbf17 service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 service.beta.openshift.io/serving-cert-secret-name: kube-state-metrics-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 creationTimestamp: "2026-10-29T21:42:41Z" labels: app.kubernetes.io/component: exporter app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: kube-state-metrics app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 2.18.0 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":8443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-10-29T21:42:41Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-29T21:42:42Z" name: kube-state-metrics namespace: openshift-monitoring resourceVersion: "7863" uid: 301b897d-887e-4147-9399-a04321f56279 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https-main port: 8443 protocol: TCP targetPort: https-main - name: https-self port: 9443 protocol: TCP targetPort: https-self selector: app.kubernetes.io/component: exporter app.kubernetes.io/name: kube-state-metrics app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: Expose the metrics-server web server on port 443. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: 738651c6b539cf0e168548ae2065ba02470057f6ebccccd8918c23affb82eb40 service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 service.beta.openshift.io/serving-cert-secret-name: metrics-server-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 creationTimestamp: "2026-10-29T21:42:42Z" labels: app.kubernetes.io/component: metrics-server app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: metrics-server app.kubernetes.io/part-of: openshift-monitoring managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:spec: f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-10-29T21:42:42Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-29T21:42:42Z" name: metrics-server namespace: openshift-monitoring resourceVersion: "7912" uid: 4685947c-fba1-4ba3-beb4-6c4f811f7686 spec: clusterIP: 172.31.25.196 clusterIPs: - 172.31.25.196 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 443 protocol: TCP targetPort: https selector: app.kubernetes.io/name: metrics-server app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: Expose the monitoring plugin service on port 9443. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: abb49bcfbfdaa8818707515b726271b3a8772fa06b93c8b76e98024ecc64627d service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 service.beta.openshift.io/serving-cert-secret-name: monitoring-plugin-cert service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 creationTimestamp: "2026-10-29T21:42:46Z" labels: app.kubernetes.io/component: monitoring-plugin app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: monitoring-plugin app.kubernetes.io/part-of: openshift-monitoring managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:spec: f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-10-29T21:42:46Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-29T21:42:46Z" name: monitoring-plugin namespace: openshift-monitoring resourceVersion: "8247" uid: 2b88608c-6bb5-4527-ae57-5ca04597d8cd spec: clusterIP: 172.31.234.67 clusterIPs: - 172.31.234.67 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 9443 protocol: TCP targetPort: https selector: app.kubernetes.io/component: monitoring-plugin app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: monitoring-plugin app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: Expose the `/metrics` endpoint on port 9100. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: d11298abf286515ec549cbce71460830e83368171e5bb6247b210c8624d8d024 service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 service.beta.openshift.io/serving-cert-secret-name: node-exporter-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 creationTimestamp: "2026-10-29T21:42:41Z" labels: app.kubernetes.io/component: exporter app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: node-exporter app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 1.10.2 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9100,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-10-29T21:42:41Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-29T21:42:42Z" name: node-exporter namespace: openshift-monitoring resourceVersion: "7827" uid: b8705c4f-e803-4f68-b9eb-dae60a079f63 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 9100 protocol: TCP targetPort: https selector: app.kubernetes.io/component: exporter app.kubernetes.io/name: node-exporter app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: |- Expose openshift-state-metrics `/metrics` endpoints within the cluster on the following ports: * Port 8443 provides access to the OpenShift resource metrics. This port is for internal use, and no other usage is guaranteed. * Port 9443 provides access to the internal `openshift-state-metrics` metrics. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: 700eac9efd8a924fdb3738d2a7935c5f8c8de046a1c3806df1ca3c92076a4ecc service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 service.beta.openshift.io/serving-cert-secret-name: openshift-state-metrics-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 creationTimestamp: "2026-10-29T21:42:41Z" labels: app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/part-of: openshift-monitoring k8s-app: openshift-state-metrics managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/part-of: {} f:k8s-app: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":8443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-10-29T21:42:41Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-29T21:42:42Z" name: openshift-state-metrics namespace: openshift-monitoring resourceVersion: "7884" uid: f7ff92d2-7d4b-41a5-9185-337df521f725 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https-main port: 8443 protocol: TCP targetPort: https-main - name: https-self port: 9443 protocol: TCP targetPort: https-self selector: app.kubernetes.io/component: exporter app.kubernetes.io/name: openshift-state-metrics sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: |- Expose the Prometheus web server within the cluster on the following ports: * Port 9091 provides access to all the Prometheus endpoints. Granting access requires binding a user to the `cluster-monitoring-view` cluster role or `cluster-monitoring-metrics-api` cluster role in the `openshift-monitoring` project. * Port 9092 provides access to the `/metrics` and `/federate` endpoints only. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: 44db31cd73c886ad771ecc7e4731887da474737fa746e940e1abe3283798b76f service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 service.beta.openshift.io/serving-cert-secret-name: prometheus-k8s-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 creationTimestamp: "2026-10-29T21:42:45Z" labels: app.kubernetes.io/component: prometheus app.kubernetes.io/instance: k8s app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: prometheus app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 3.9.1 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/instance: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9091,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9092,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:sessionAffinityConfig: .: {} f:clientIP: .: {} f:timeoutSeconds: {} f:type: {} manager: operator operation: Update time: "2026-10-29T21:42:45Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-29T21:42:45Z" name: prometheus-k8s namespace: openshift-monitoring resourceVersion: "8168" uid: 777ccfda-5b03-44d8-8c10-fff2ac8218b1 spec: clusterIP: 172.31.78.85 clusterIPs: - 172.31.78.85 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: web port: 9091 protocol: TCP targetPort: web - name: metrics port: 9092 protocol: TCP targetPort: metrics selector: app.kubernetes.io/component: prometheus app.kubernetes.io/instance: k8s app.kubernetes.io/name: prometheus app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: ClientIP sessionAffinityConfig: clientIP: timeoutSeconds: 10800 type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: operator.openshift.io/spec-hash: af5d784dec099b84794ed97fe5e2c58ad0d83f1677b676689144d8678d5dbddf service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 service.beta.openshift.io/serving-cert-secret-name: prometheus-k8s-thanos-sidecar-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 creationTimestamp: "2026-10-29T21:42:45Z" labels: app.kubernetes.io/component: thanos-sidecar app.kubernetes.io/instance: k8s app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: prometheus app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 3.9.1 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/instance: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":10902,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-10-29T21:42:45Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-29T21:42:45Z" name: prometheus-k8s-thanos-sidecar namespace: openshift-monitoring resourceVersion: "8175" uid: 79ffe933-8cb7-4822-a6a3-bb60fc61fa5d spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: thanos-proxy port: 10902 protocol: TCP targetPort: thanos-proxy selector: app.kubernetes.io/component: prometheus app.kubernetes.io/instance: k8s app.kubernetes.io/name: prometheus app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: creationTimestamp: "2026-10-29T21:42:49Z" labels: app.kubernetes.io/managed-by: prometheus-operator managed-by: prometheus-operator operated-prometheus: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: .: {} f:app.kubernetes.io/managed-by: {} f:managed-by: {} f:operated-prometheus: {} f:ownerReferences: .: {} k:{"uid":"23a74238-95ca-4168-a94b-088a6f316a16"}: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9090,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":10901,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: PrometheusOperator operation: Update time: "2026-10-29T21:42:49Z" name: prometheus-operated namespace: openshift-monitoring ownerReferences: - apiVersion: monitoring.coreos.com/v1 kind: Prometheus name: k8s uid: 23a74238-95ca-4168-a94b-088a6f316a16 resourceVersion: "8313" uid: ef6a9032-0fcf-4464-8948-3121fb11bf39 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: web port: 9090 protocol: TCP targetPort: web - name: grpc port: 10901 protocol: TCP targetPort: grpc selector: app.kubernetes.io/name: prometheus sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: Expose the `/metrics` endpoint on port 8443. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: eea169d57280f4b263a7e5bde66e0f7f4c8f87869ef0128d57e3628e6e3388eb service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 service.beta.openshift.io/serving-cert-secret-name: prometheus-operator-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 creationTimestamp: "2026-10-29T21:42:36Z" labels: app.kubernetes.io/component: controller app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: prometheus-operator app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 0.90.1 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":8443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-10-29T21:42:36Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-29T21:42:36Z" name: prometheus-operator namespace: openshift-monitoring resourceVersion: "7657" uid: 4a15fdb4-62e1-4d3a-ac02-23cea6ec28b6 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 8443 protocol: TCP targetPort: https selector: app.kubernetes.io/component: controller app.kubernetes.io/name: prometheus-operator app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: Expose the admission webhook service which validates `PrometheusRules` and `AlertmanagerConfig` custom resources on port 8443. operator.openshift.io/spec-hash: 097457c83cbcaea7eec544b71a7fef08bd2e6997ede8206892c845fcae7b6cbc service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 service.beta.openshift.io/serving-cert-secret-name: prometheus-operator-admission-webhook-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 creationTimestamp: "2026-10-29T21:42:22Z" labels: app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: prometheus-operator-admission-webhook app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 0.90.1 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":8443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-10-29T21:42:22Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-29T21:42:27Z" name: prometheus-operator-admission-webhook namespace: openshift-monitoring resourceVersion: "7336" uid: 2337dccd-7acb-4b98-87bd-be959b83f3b6 spec: clusterIP: 172.31.228.174 clusterIPs: - 172.31.228.174 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 8443 protocol: TCP targetPort: https selector: app.kubernetes.io/name: prometheus-operator-admission-webhook app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: Expose the `/metrics` endpoint on port 8443. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: 429ffbc222b67dbecaac37743f4dd367ba8b08b309886ac4c0c42ad1f929e1be service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 service.beta.openshift.io/serving-cert-secret-name: telemeter-client-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 creationTimestamp: "2026-10-29T21:43:52Z" labels: app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/part-of: openshift-monitoring k8s-app: telemeter-client managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/part-of: {} f:k8s-app: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":8443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-10-29T21:43:52Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-29T21:43:52Z" name: telemeter-client namespace: openshift-monitoring resourceVersion: "9384" uid: 70eda82c-0b3c-48e6-b993-92e0cb75da8d spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 8443 protocol: TCP targetPort: https selector: app.kubernetes.io/component: telemetry-metrics-collector app.kubernetes.io/name: telemeter-client sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: |- Expose the Thanos Querier web server within the cluster on the following ports: * Port 9091 provides access to all the Thanos Querier endpoints. Granting access requires binding a user to the `cluster-monitoring-view` cluster role or `cluster-monitoring-metrics-api` cluster role in the `openshift-monitoring` project. * Port 9092 provides access to the `/api/v1/query`, `/api/v1/query_range/`, `/api/v1/labels`, `/api/v1/label/*/values`, and `/api/v1/series` endpoints restricted to a given project. Granting access requires binding a user to the `view` cluster role in the project. * Port 9093 provides access to the `/api/v1/alerts`, and `/api/v1/rules` endpoints restricted to a given project. Granting access requires binding a user to the `monitoring-rules-edit` cluster role or `monitoring-edit` cluster role or `monitoring-rules-view` cluster role in the project. * Port 9094 provides access to the `/metrics` endpoint only. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: 0c29478f63d34bf0dd2a114c15b5518c2e967a61c11e61f2676c05a268c8b7f8 service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 service.beta.openshift.io/serving-cert-secret-name: thanos-querier-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1793310131 creationTimestamp: "2026-10-29T21:42:41Z" labels: app.kubernetes.io/component: query-layer app.kubernetes.io/instance: thanos-querier app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: thanos-query app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 0.41.0 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/instance: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9091,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9092,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9093,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9094,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-10-29T21:42:41Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-10-29T21:42:41Z" name: thanos-querier namespace: openshift-monitoring resourceVersion: "7778" uid: 72a2e0b9-5b1a-46d2-9601-fcfe97790ea8 spec: clusterIP: 172.31.98.39 clusterIPs: - 172.31.98.39 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: web port: 9091 protocol: TCP targetPort: web - name: tenancy port: 9092 protocol: TCP targetPort: tenancy - name: tenancy-rules port: 9093 protocol: TCP targetPort: tenancy-rules - name: metrics port: 9094 protocol: TCP targetPort: metrics selector: app.kubernetes.io/component: query-layer app.kubernetes.io/instance: thanos-querier app.kubernetes.io/name: thanos-query app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} kind: ServiceList metadata: resourceVersion: "177095"