At NetCore Labs, your team is preparing to deploy a newly developed application on Google Kubernetes Engine (GKE) . This application needs to interact with external third-party services over the internet. However, your organization's security policy prohibits assigning public IP addresses to any Compute Engine instances in your environment. What deployment strategy should you use to meet these requirements while aligning with best practices?