Helm and Operator deployments both expose endpoints on ports 11222 AND 11223.

It should be clarified that in clusters deployed by the Operator and Helm, users should access data exclusively via port 11222.

In the Operator an endpoint is exposed on port 11223 in order to allow to perform admin operations on the cluster, as well as to allow Prometheus metric scraping via BASIC auth.
Helm clusters also expose an endpoint on port 11223 in order to allow Prometheus metric scraping.

This endpoint has a different security-realm to the user endpoint and hence different users configured. This is to decouple internal access from user endpoints (see JDG-4376)