With #6864, we mention how to set up the TLS in the helm chart. There are some missing parts: 1. How to configure the cert manager 2. The alternative way to use providers like Cloudflare to turn on certification with DNS + proxied.