In https://gerrit.wikimedia.org/r/c/operations/software/tools-webservice/+/697096 webservices in the grid will be created as Kubernetes services and ingresses, with the eventual goal of removing dynamicproxy entirely. Once that is live and all webservices have been restarted to create Kubernetes objects we need to modify [[ https://gerrit.wikimedia.org/r/plugins/gitiles/operations/software/tools-manifest/+/refs/heads/master/tools/manifest/webservicemonitor.py | webservicemonitor.py ]] to read the list of running web services from Kubernetes.
This can be done with creating a prometheus-style external kubernetes certificate for the web proxies or by having a special tool with extra privs query that and expose the information via HTTP, I prefer the latter as that will have its certificates renewed automatically.