From 3ccd953f60b209012762f41efc0266153b08caf3 Mon Sep 17 00:00:00 2001 From: Shir Moran Date: Wed, 29 Oct 2025 11:35:27 +0200 Subject: [PATCH] OCPBUGS-50492: Add kube_rbac_proxy service This PR adds a service to port 9637. As for now since it does not have a service, an endpointslice is not created and it is not included in the communication matrix. Adding a service should solve this issue. --- .../0000_80_machine-config_00_service.yaml | 22 ++++++++++++++++++- 1 file changed, 21 insertions(+), 1 deletion(-) diff --git a/install/0000_80_machine-config_00_service.yaml b/install/0000_80_machine-config_00_service.yaml index 7eeb0ab416..29fe6c80fc 100644 --- a/install/0000_80_machine-config_00_service.yaml +++ b/install/0000_80_machine-config_00_service.yaml @@ -88,4 +88,24 @@ spec: port: 22624 targetPort: 22624 protocol: TCP - +--- +apiVersion: v1 +kind: Service +metadata: + name: kube-rbac-proxy + namespace: openshift-machine-config-operator + labels: + k8s-app: kube-rbac-proxy + annotations: + include.release.openshift.io/ibm-cloud-managed: "true" + include.release.openshift.io/self-managed-high-availability: "true" + include.release.openshift.io/single-node-developer: "true" + service.beta.openshift.io/serving-cert-secret-name: proxy-tls +spec: + type: ClusterIP + selector: + k8s-app: kube-rbac-proxy + ports: + - name: secure-listen + port: 9637 + protocol: TCP