Zero trust workload security with GKE, Traffic Director, and CA Service