A default installation, with no custom configuration, Prometheus gets:

As seen, it is trying to access the metrics endpoint via https while KSM is exposing an http endpoint.