This message was deleted.

You can do either one (both is kinda a waste of resources). I have istio doing tls termination and pulsar running unencrypted traffic within the kubernetes cluster)