It works

Static site served from a three node kubeadm cluster on AWS.

Deployed by a least privilege user. TLS issued by cert-manager and Let's Encrypt.