Secure deployments of on-prem artifacts to cloud
Both Azure and AWS will have any container images built off their network pushed to their repositories using https which will encrypt the transfer (e.g. AWS ECR encryption).  Both of these providers offer ways to encrypt the transfer of data into their non-container storage solutions (often via https) and then offer ways to encrypt the data at rest.  Once it is on the cloud provider deploying to k8s can all be done securely within their servers.