Served from the k3s cluster, over TLS.