anchor.diff:    tls:
       termination: passthrough     <1>
   ----
  -
   <1> The `*termination*` field is set to `passthrough`. No other encryption fields are needed.
  -
   ====
   
   The destination pod is responsible for serving certificates for the
  
positive.code:       [...]
        -----END CERTIFICATE-----
  ----
  
  <1> The `*termination*` field is `edge` for edge termination.
  <2> The `*certificate*` field is the contents of the PEM format certificate file.
  <3> The `*key*` field is the contents of the PEM format key file.
  <4> An optional CA certificate may be required to establish a certificate chain for validation.
  
  ====
  
  Because TLS is terminated at the router, connections from the router to
  
negative.code: <2> The `*destinationCaCertificate*` field optionally specifies a CA
  certificate to validate the endpoint certificate, securing the connection
  from the router to the destination.
  ====
  