The ingress controller trusts X-Forwarded-Proto from the external load balancer, but an internal hop rewrites it and secure redirects begin looping

TLS is terminated correctly, yet downstream protocol awareness is now inconsistent across hops.