--- apiVersion: v1 items: - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: |- Expose the Alertmanager web server within the cluster on the following ports: * Port 9094 provides access to all the Alertmanager endpoints. Granting access requires binding a user to the `monitoring-alertmanager-view` role (for read-only operations) or `monitoring-alertmanager-edit` role in the `openshift-monitoring` project. * Port 9092 provides access to the Alertmanager endpoints restricted to a given project. Granting access requires binding a user to the `monitoring-rules-edit` cluster role or `monitoring-edit` cluster role in the project. * Port 9097 provides access to the `/metrics` endpoint only. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: 236083daff5b39e8c94a6eb195fe034ddc416caa0f118c8cd0c643badab6f780 service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 service.beta.openshift.io/serving-cert-secret-name: alertmanager-main-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 creationTimestamp: "2026-07-10T18:01:19Z" labels: app.kubernetes.io/component: alert-router app.kubernetes.io/instance: main app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: alertmanager app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 0.29.0 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/instance: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9092,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9094,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9097,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:sessionAffinityConfig: .: {} f:clientIP: .: {} f:timeoutSeconds: {} f:type: {} manager: operator operation: Update time: "2026-07-10T18:01:19Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-07-10T18:01:19Z" name: alertmanager-main namespace: openshift-monitoring resourceVersion: "9021" uid: 00e3335e-18a6-4e7f-8145-80e4b6c9d5b0 spec: clusterIP: 172.31.93.101 clusterIPs: - 172.31.93.101 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: web port: 9094 protocol: TCP targetPort: web - name: tenancy port: 9092 protocol: TCP targetPort: tenancy - name: metrics port: 9097 protocol: TCP targetPort: metrics selector: app.kubernetes.io/component: alert-router app.kubernetes.io/instance: main app.kubernetes.io/name: alertmanager app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: ClientIP sessionAffinityConfig: clientIP: timeoutSeconds: 10800 type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: creationTimestamp: "2026-07-10T18:01:19Z" labels: app.kubernetes.io/managed-by: prometheus-operator managed-by: prometheus-operator operated-alertmanager: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: .: {} f:app.kubernetes.io/managed-by: {} f:managed-by: {} f:operated-alertmanager: {} f:ownerReferences: .: {} k:{"uid":"e539842b-4b52-407a-8570-656f90bd627f"}: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9093,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9094,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9094,"protocol":"UDP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:publishNotReadyAddresses: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: PrometheusOperator operation: Update time: "2026-07-10T18:01:19Z" name: alertmanager-operated namespace: openshift-monitoring ownerReferences: - apiVersion: monitoring.coreos.com/v1 kind: Alertmanager name: main uid: e539842b-4b52-407a-8570-656f90bd627f resourceVersion: "8990" uid: 82d6a08d-fb50-4bb4-84fb-8703c9728c5e spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: web port: 9093 protocol: TCP targetPort: web - name: tcp-mesh port: 9094 protocol: TCP targetPort: mesh-tcp - name: udp-mesh port: 9094 protocol: UDP targetPort: mesh-udp publishNotReadyAddresses: true selector: app.kubernetes.io/name: alertmanager sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: include.release.openshift.io/hypershift: "true" include.release.openshift.io/ibm-cloud-managed: "true" include.release.openshift.io/self-managed-high-availability: "true" include.release.openshift.io/single-node-developer: "true" openshift.io/description: Expose the `/metrics` and `/validate-webhook` endpoints on port 8443. This port is for internal use, and no other usage is guaranteed. service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 service.beta.openshift.io/serving-cert-secret-name: cluster-monitoring-operator-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 creationTimestamp: "2026-07-10T17:53:43Z" labels: app.kubernetes.io/name: cluster-monitoring-operator managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:include.release.openshift.io/hypershift: {} f:include.release.openshift.io/ibm-cloud-managed: {} f:include.release.openshift.io/self-managed-high-availability: {} f:include.release.openshift.io/single-node-developer: {} f:openshift.io/description: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/name: {} f:ownerReferences: .: {} k:{"uid":"484ae516-a902-4d56-8bb2-396d9302babe"}: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":8443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: cluster-version-operator operation: Update time: "2026-07-10T17:53:43Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-07-10T18:00:57Z" name: cluster-monitoring-operator namespace: openshift-monitoring ownerReferences: - apiVersion: config.openshift.io/v1 controller: true kind: ClusterVersion name: version uid: 484ae516-a902-4d56-8bb2-396d9302babe resourceVersion: "8077" uid: 39d05885-a36f-454d-af57-ded12ba18398 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 8443 protocol: TCP targetPort: https selector: app.kubernetes.io/name: cluster-monitoring-operator sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: |- Expose kube-state-metrics `/metrics` endpoints within the cluster on the following ports: * Port 8443 provides access to the Kubernetes resource metrics. This port is for internal use, and no other usage is guaranteed. * Port 9443 provides access to the internal kube-state-metrics metrics. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: ae4d3a8c8617e769f0387af404f8c2f31a3fd8315550a41bfd348657753fbf17 service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 service.beta.openshift.io/serving-cert-secret-name: kube-state-metrics-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 creationTimestamp: "2026-07-10T18:01:18Z" labels: app.kubernetes.io/component: exporter app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: kube-state-metrics app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 2.17.0 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":8443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-07-10T18:01:18Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-07-10T18:01:18Z" name: kube-state-metrics namespace: openshift-monitoring resourceVersion: "8921" uid: badf3e78-9d1c-4ab9-ba97-7b1b927d4d2b spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https-main port: 8443 protocol: TCP targetPort: https-main - name: https-self port: 9443 protocol: TCP targetPort: https-self selector: app.kubernetes.io/component: exporter app.kubernetes.io/name: kube-state-metrics app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: Expose the metrics-server web server on port 443. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: 738651c6b539cf0e168548ae2065ba02470057f6ebccccd8918c23affb82eb40 service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 service.beta.openshift.io/serving-cert-secret-name: metrics-server-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 creationTimestamp: "2026-07-10T18:01:18Z" labels: app.kubernetes.io/component: metrics-server app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: metrics-server app.kubernetes.io/part-of: openshift-monitoring managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:spec: f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-07-10T18:01:18Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-07-10T18:01:19Z" name: metrics-server namespace: openshift-monitoring resourceVersion: "9013" uid: 77d20914-f247-48e8-8d50-d248feaf44ba spec: clusterIP: 172.31.129.50 clusterIPs: - 172.31.129.50 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 443 protocol: TCP targetPort: https selector: app.kubernetes.io/name: metrics-server app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: Expose the monitoring plugin service on port 9443. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: abb49bcfbfdaa8818707515b726271b3a8772fa06b93c8b76e98024ecc64627d service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 service.beta.openshift.io/serving-cert-secret-name: monitoring-plugin-cert service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 creationTimestamp: "2026-07-10T18:01:22Z" labels: app.kubernetes.io/component: monitoring-plugin app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: monitoring-plugin app.kubernetes.io/part-of: openshift-monitoring managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:spec: f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-07-10T18:01:22Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-07-10T18:01:22Z" name: monitoring-plugin namespace: openshift-monitoring resourceVersion: "9244" uid: 4e651918-01ba-4829-bbb9-aaf6bc1eb631 spec: clusterIP: 172.31.219.96 clusterIPs: - 172.31.219.96 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 9443 protocol: TCP targetPort: https selector: app.kubernetes.io/component: monitoring-plugin app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: monitoring-plugin app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: Expose the `/metrics` endpoint on port 9100. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: d11298abf286515ec549cbce71460830e83368171e5bb6247b210c8624d8d024 service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 service.beta.openshift.io/serving-cert-secret-name: node-exporter-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 creationTimestamp: "2026-07-10T18:01:18Z" labels: app.kubernetes.io/component: exporter app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: node-exporter app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 1.10.2 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9100,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-07-10T18:01:18Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-07-10T18:01:18Z" name: node-exporter namespace: openshift-monitoring resourceVersion: "8903" uid: 5bf9e37b-b5dd-4d23-800b-c6c23c4ade00 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 9100 protocol: TCP targetPort: https selector: app.kubernetes.io/component: exporter app.kubernetes.io/name: node-exporter app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: |- Expose openshift-state-metrics `/metrics` endpoints within the cluster on the following ports: * Port 8443 provides access to the OpenShift resource metrics. This port is for internal use, and no other usage is guaranteed. * Port 9443 provides access to the internal `openshift-state-metrics` metrics. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: 700eac9efd8a924fdb3738d2a7935c5f8c8de046a1c3806df1ca3c92076a4ecc service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 service.beta.openshift.io/serving-cert-secret-name: openshift-state-metrics-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 creationTimestamp: "2026-07-10T18:01:18Z" labels: app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/part-of: openshift-monitoring k8s-app: openshift-state-metrics managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/part-of: {} f:k8s-app: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":8443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-07-10T18:01:18Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-07-10T18:01:18Z" name: openshift-state-metrics namespace: openshift-monitoring resourceVersion: "8901" uid: abeffae2-2061-4def-b8fc-8db34e5e9e34 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https-main port: 8443 protocol: TCP targetPort: https-main - name: https-self port: 9443 protocol: TCP targetPort: https-self selector: app.kubernetes.io/component: exporter app.kubernetes.io/name: openshift-state-metrics sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: |- Expose the Prometheus web server within the cluster on the following ports: * Port 9091 provides access to all the Prometheus endpoints. Granting access requires binding a user to the `cluster-monitoring-view` cluster role or `cluster-monitoring-metrics-api` cluster role in the `openshift-monitoring` project. * Port 9092 provides access to the `/metrics` and `/federate` endpoints only. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: 44db31cd73c886ad771ecc7e4731887da474737fa746e940e1abe3283798b76f service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 service.beta.openshift.io/serving-cert-secret-name: prometheus-k8s-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 creationTimestamp: "2026-07-10T18:01:20Z" labels: app.kubernetes.io/component: prometheus app.kubernetes.io/instance: k8s app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: prometheus app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 3.7.3 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/instance: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9091,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9092,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:sessionAffinityConfig: .: {} f:clientIP: .: {} f:timeoutSeconds: {} f:type: {} manager: operator operation: Update time: "2026-07-10T18:01:20Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-07-10T18:01:21Z" name: prometheus-k8s namespace: openshift-monitoring resourceVersion: "9152" uid: 0485978a-b539-4be2-becb-9a2042958533 spec: clusterIP: 172.31.192.136 clusterIPs: - 172.31.192.136 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: web port: 9091 protocol: TCP targetPort: web - name: metrics port: 9092 protocol: TCP targetPort: metrics selector: app.kubernetes.io/component: prometheus app.kubernetes.io/instance: k8s app.kubernetes.io/name: prometheus app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: ClientIP sessionAffinityConfig: clientIP: timeoutSeconds: 10800 type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: operator.openshift.io/spec-hash: af5d784dec099b84794ed97fe5e2c58ad0d83f1677b676689144d8678d5dbddf service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 service.beta.openshift.io/serving-cert-secret-name: prometheus-k8s-thanos-sidecar-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 creationTimestamp: "2026-07-10T18:01:20Z" labels: app.kubernetes.io/component: thanos-sidecar app.kubernetes.io/instance: k8s app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: prometheus app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 3.7.3 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/instance: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":10902,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-07-10T18:01:20Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-07-10T18:01:21Z" name: prometheus-k8s-thanos-sidecar namespace: openshift-monitoring resourceVersion: "9178" uid: 668f77be-7602-41fc-baa9-39258318b3e6 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: thanos-proxy port: 10902 protocol: TCP targetPort: thanos-proxy selector: app.kubernetes.io/component: prometheus app.kubernetes.io/instance: k8s app.kubernetes.io/name: prometheus app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: creationTimestamp: "2026-07-10T18:01:24Z" labels: app.kubernetes.io/managed-by: prometheus-operator managed-by: prometheus-operator operated-prometheus: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: .: {} f:app.kubernetes.io/managed-by: {} f:managed-by: {} f:operated-prometheus: {} f:ownerReferences: .: {} k:{"uid":"ea971b1f-bd45-4a69-9ffe-7bc2a59701e3"}: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9090,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":10901,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: PrometheusOperator operation: Update time: "2026-07-10T18:01:24Z" name: prometheus-operated namespace: openshift-monitoring ownerReferences: - apiVersion: monitoring.coreos.com/v1 kind: Prometheus name: k8s uid: ea971b1f-bd45-4a69-9ffe-7bc2a59701e3 resourceVersion: "9333" uid: 33cbab56-f7dc-490f-b426-c0cc9a193e14 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: web port: 9090 protocol: TCP targetPort: web - name: grpc port: 10901 protocol: TCP targetPort: grpc selector: app.kubernetes.io/name: prometheus sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: Expose the `/metrics` endpoint on port 8443. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: eea169d57280f4b263a7e5bde66e0f7f4c8f87869ef0128d57e3628e6e3388eb service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 service.beta.openshift.io/serving-cert-secret-name: prometheus-operator-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 creationTimestamp: "2026-07-10T18:01:11Z" labels: app.kubernetes.io/component: controller app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: prometheus-operator app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 0.87.0 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":8443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-07-10T18:01:11Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-07-10T18:01:12Z" name: prometheus-operator namespace: openshift-monitoring resourceVersion: "8649" uid: ae89ecb3-e552-4531-a855-2ccf2b7ea6e6 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 8443 protocol: TCP targetPort: https selector: app.kubernetes.io/component: controller app.kubernetes.io/name: prometheus-operator app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: Expose the admission webhook service which validates `PrometheusRules` and `AlertmanagerConfig` custom resources on port 8443. operator.openshift.io/spec-hash: 097457c83cbcaea7eec544b71a7fef08bd2e6997ede8206892c845fcae7b6cbc service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 service.beta.openshift.io/serving-cert-secret-name: prometheus-operator-admission-webhook-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 creationTimestamp: "2026-07-10T18:01:08Z" labels: app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: prometheus-operator-admission-webhook app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 0.87.0 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":8443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-07-10T18:01:08Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-07-10T18:01:08Z" name: prometheus-operator-admission-webhook namespace: openshift-monitoring resourceVersion: "8508" uid: 543eeaef-7304-4b08-87ae-617b8202d8be spec: clusterIP: 172.31.148.45 clusterIPs: - 172.31.148.45 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 8443 protocol: TCP targetPort: https selector: app.kubernetes.io/name: prometheus-operator-admission-webhook app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: Expose the `/metrics` endpoint on port 8443. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: 429ffbc222b67dbecaac37743f4dd367ba8b08b309886ac4c0c42ad1f929e1be service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 service.beta.openshift.io/serving-cert-secret-name: telemeter-client-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 creationTimestamp: "2026-07-10T18:02:37Z" labels: app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/part-of: openshift-monitoring k8s-app: telemeter-client managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/part-of: {} f:k8s-app: {} f:spec: f:clusterIP: {} f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":8443,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-07-10T18:02:37Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-07-10T18:02:37Z" name: telemeter-client namespace: openshift-monitoring resourceVersion: "10719" uid: 237f9970-b908-471d-89d8-544335151330 spec: clusterIP: None clusterIPs: - None internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: https port: 8443 protocol: TCP targetPort: https selector: app.kubernetes.io/component: telemetry-metrics-collector app.kubernetes.io/name: telemeter-client sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: openshift.io/description: |- Expose the Thanos Querier web server within the cluster on the following ports: * Port 9091 provides access to all the Thanos Querier endpoints. Granting access requires binding a user to the `cluster-monitoring-view` cluster role or `cluster-monitoring-metrics-api` cluster role in the `openshift-monitoring` project. * Port 9092 provides access to the `/api/v1/query`, `/api/v1/query_range/`, `/api/v1/labels`, `/api/v1/label/*/values`, and `/api/v1/series` endpoints restricted to a given project. Granting access requires binding a user to the `view` cluster role in the project. * Port 9093 provides access to the `/api/v1/alerts`, and `/api/v1/rules` endpoints restricted to a given project. Granting access requires binding a user to the `monitoring-rules-edit` cluster role or `monitoring-edit` cluster role or `monitoring-rules-view` cluster role in the project. * Port 9094 provides access to the `/metrics` endpoint only. This port is for internal use, and no other usage is guaranteed. operator.openshift.io/spec-hash: 0c29478f63d34bf0dd2a114c15b5518c2e967a61c11e61f2676c05a268c8b7f8 service.alpha.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 service.beta.openshift.io/serving-cert-secret-name: thanos-querier-tls service.beta.openshift.io/serving-cert-signed-by: openshift-service-serving-signer@1783706441 creationTimestamp: "2026-07-10T18:01:17Z" labels: app.kubernetes.io/component: query-layer app.kubernetes.io/instance: thanos-querier app.kubernetes.io/managed-by: cluster-monitoring-operator app.kubernetes.io/name: thanos-query app.kubernetes.io/part-of: openshift-monitoring app.kubernetes.io/version: 0.39.2 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:operator.openshift.io/spec-hash: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/instance: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:spec: f:internalTrafficPolicy: {} f:ports: .: {} k:{"port":9091,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9092,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9093,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} k:{"port":9094,"protocol":"TCP"}: .: {} f:name: {} f:port: {} f:protocol: {} f:targetPort: {} f:selector: {} f:sessionAffinity: {} f:type: {} manager: operator operation: Update time: "2026-07-10T18:01:17Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:service.alpha.openshift.io/serving-cert-signed-by: {} f:service.beta.openshift.io/serving-cert-signed-by: {} manager: service-ca-operator operation: Update time: "2026-07-10T18:01:18Z" name: thanos-querier namespace: openshift-monitoring resourceVersion: "8891" uid: d6f42bad-38ea-4400-8a23-ba2f6c6a8af3 spec: clusterIP: 172.31.216.148 clusterIPs: - 172.31.216.148 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: web port: 9091 protocol: TCP targetPort: web - name: tenancy port: 9092 protocol: TCP targetPort: tenancy - name: tenancy-rules port: 9093 protocol: TCP targetPort: tenancy-rules - name: metrics port: 9094 protocol: TCP targetPort: metrics selector: app.kubernetes.io/component: query-layer app.kubernetes.io/instance: thanos-querier app.kubernetes.io/name: thanos-query app.kubernetes.io/part-of: openshift-monitoring sessionAffinity: None type: ClusterIP status: loadBalancer: {} kind: ServiceList metadata: resourceVersion: "58150"