You are tasked with deploying a containerized database application in your Kubernetes cluster that requires persistent storage. The database should be accessible from other services within the cluster but should not be exposed externally. What are the two most appropriate methods to accomplish this? (Select two)