How to monitor K8s out-of-cluster services with Prometheus Operator?

Three scenarios for monitoring Kubernetes cluster certificate expiration times