With AUTH-20 we created the framework to use clients certs to scrape metrics from core components. While some components are already covered (mostly in monitoring) we still have to modify service monitors for the following core components:

• cluster-kube-apiserver-operator
• kube-apiserver
• cluster-openshift-apiserver-operator
• openshift-apiserver
• cluster-kube-controller-manager-operator
• cluster-authentication-operator
• oauth-apiserver
• oauth-server
• service-ca-operator
• cluster-etcd-operator (Note: etcd is already covered with client certs https://github.com/openshift/cluster-monitoring-operator/blob/1a178fcf7df910baf9b8[]…cff09b1fdb477e5d/assets/control-plane/service-monitor-etcd.yaml)