=== 1) Kong PROXY (datapath usuarios) en 129.212.199.126:443 ===
subject=C=US, ST=California, L=San Francisco, O=Kong, OU=IT Department, CN=localhost
issuer=C=US, ST=California, L=San Francisco, O=Kong, OU=IT Department, CN=localhost
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Protocol: TLSv1.3
Verify return code: 18 (self-signed certificate)

=== 2) Kong proxy puerto 80 (debe redirigir a HTTPS o fallar) ===
HTTP/1.1 404 Not Found
Date: Wed, 27 May 2026 14:24:25 GMT
Content-Type: application/json; charset=utf-8
Connection: keep-alive
Content-Length: 103

=== 3) Microservicios PCI internos (ClusterIP) - puertos del firewall cde-fw ===
default       auth-service           ClusterIP      10.117.26.176   <none>            3700/TCP                        111d
default       card-vault-service     ClusterIP      10.117.5.94     <none>            3510/TCP                        111d
default       payments-api           ClusterIP      10.117.19.248   <none>            3000/TCP                        111d
default       tokenization-service   ClusterIP      10.117.13.253   <none>            3600/TCP                        111d

=== 4) Verificar mTLS entre pods (Cilium policies / service mesh) ===
