Introduce Autopilot compatibility checks

[danielmarzini]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment.

Description

Introduce additional set of rules for checking if a given GKE Standard cluster, and workloads running on it, are compatible with GKE Autopilot mode.

• [ ] Introduce ./gke-policy check compatibility CLI command that will enable required inputs and process REGO rules from gke.compatibility package
• [ ] Add compatibility rules

References

• Compare GKE Autopilot and Standard
• GKE Autopilot security capabilities
• Resource requests in Autopilot

[mikouaj]

References:

• Compare GKE Autopilot and Standard
• GKE Autopilot security capabilities
• Resource requests in Autopilot

[mikouaj]

This feature most likely duplicates the already existing API capabilities and existing gcloud command: gcloud container clusters check-autopilot-compatibility

We need to verify what checks are supported by the API provides however.