Palo Alto Networks VM-Series Firewall: Securing the GKE Perimeter