diff --git a/k8s/monitoring/prometheus-operator.secret.yml b/k8s/monitoring/prometheus-operator.secret.yml
index 9c6187e..1240260 100644
--- a/k8s/monitoring/prometheus-operator.secret.yml
+++ b/k8s/monitoring/prometheus-operator.secret.yml
@@ -1,5 +1,21 @@
 # status: implemented
 
+# https://github.com/prometheus-operator/kube-prometheus/issues/913#issuecomment-670784017
+kubeControllerManager:
+  service:
+    targetPort: 10257
+  serviceMonitor:
+    https: true
+    insecureSkipVerify: true
+# proxy not working, svc not exposed by port
+kubeProxy:
+  service:
+    targetPort: 10249
+  serviceMonitor:
+    https: true
+    insecureSkipVerify: true
+##################
+
 prometheus:
   prometheusSpec:
     shards: null