Looks like we set the service’s port to 8501 when TLS is enabled in the helm chart: https://github.com/hashicorp/consul-helm/blob/master/templates/ui-service.yaml#L23-L32.
For now you’ll need to manually create another service with the right port. I’ll open up an issue to track: https://github.com/hashicorp/consul-helm/issues/489