A retail company runs Kubernetes clusters in its own on-premises data center and has recently deployed additional clusters on Google Cloud. The platform team is struggling to enforce identical security policies and get a unified view of workloads across both environments. They want a single Google Cloud solution that lets them manage configuration and policy consistently across the on-premises and cloud clusters without rewriting their applications. Which offering best meets this need?