Cat poni, Whorseman of Apocalypse (npub1vse…v7q2) by user traffic I mean requests handked by the pods, not k8s API stuff.
And apparently it's up to the CNI plugin to do that, for example with aws-vpc-cni you jyst need to:
AWS_VPC_K8S_CNI_CUSTOM_NETWORK_CFG=true
And add some ENIConfig resources