What is a common mistake with TLS termination in Ingress?

Terminating TLS but sending sensitive traffic unencrypted across an untrusted internal network can violate security requirements. In practice, the value of this concept comes from understanding where it belongs in the architecture, what problem it solves, and what constraints or tradeoffs it introduces.