How would you answer an interview scenario involving TLS termination in Ingress?

A compliance rule requires encryption all the way to application pods. Explain how you would adapt the ingress design.