Currently the TLS Client Certificate Validation policy explains that APicast needs to be configured to terminate TLS as a requirement. The steps are detailed in the sub-chapter "4.1.26.1.1. Setting up APIcast to work with the policy" using a secret and mounting the secret in APIcast. This will enable TLS termination globally (for all Products).

The request is to explain that there are 2 ways to configure the TLS termination:
a) Globally (as currently described in the chapter 4.1.26.1.1. Setting up APIcast to work with the policy)
b) Per Product with the already built-in TLS Termination policy. This second option is the only way to confiture TLS termination when deploying APIcast self managed with the Operator since it is not possible to mount volumes in APIcast deployed with the Operator.