Flink applications are not 'http services', so they don't need any tls certs or Service listeners defined. Our current mesh module will always use the mesh.public_port to set up a k8s Service and other resources.
We should make a new version of mesh templates that don't deploy Service etc. if mesh.public_port is not defined.