This page is served through Cilium Envoy with a publicly trusted Let's Encrypt certificate.
This separate Pod serves HTTP on port 8080 inside Kubernetes; TLS ends at the Gateway.