Add an HAProxy Sidecar to Serve an MQTT Broker over TLS
An MQTT broker only accepts plain connections on localhost, but every client must connect over TLS on port 8883. Update the broker's Deployment manifest so that HAProxy runs in the broker Pod and terminates TLS for it.