You have a Kubernetes cluster with critical applications. Your task is to update these applications while ensuring zero downtime and that old and new versions of the application can co-exist temporarily. You also want to limit network access to these applications during the transition. What should you use? (Select two)