Currently API Server api's are exposed through http. For production deployment, it needs to be behind https.