A financial services company runs a microservices application across multiple nodes in a Kubernetes cluster. A recent audit found that traffic between internal services travels unencrypted over the pod network, violating a regulatory requirement that all data in transit be encrypted regardless of network location. The security team needs to enforce encryption for all service-to-service communication with minimal changes to application code. Which solution best meets this requirement?