Enable HTTPS ingress on KAS

The following discussion from !8857 (merged) should be addressed:

• @WarheadsSE started a discussion: (+4 comments)

  @ashvins @ash2k Proceeding.

  We will want to polish up a few rough edges around this configuration. We should consider updating the recipes behaviors, so that we can explicitly test in the Ruby code, rather than doing this via the ERB handling.