upstream k8s_tls {
    server 127.0.0.1:443;
}