new GKE autopilot KCC cluster has new admission webhook warnings as of 20230928 - update: new cluster ok

## Triage
https://cloud.google.com/kubernetes-engine/docs/troubleshooting/troubleshoot-upgrades

## details

See no issues with the cluster in #445
New issues since 20230927 in #534

KCC cluster up via
https://github.com/ssc-spc-ccoe-cei/gcp-tools/blob/main/scripts/bootstrap/setup-kcc.sh
- proceeding to 3 package LZ deploy via kpt

TODO: check webhook visibility fix
This is new since my last cluster was up 6 weeks ago in #445

This cluster has an admission webhook installed that is intercepting system critical requests in the last 24 hours. Intercepting these requests can impact availability of the GKE Control Plane. Learn more

https://cloud.google.com/kubernetes-engine/docs/how-to/optimize-webhooks?&_ga=2.215054544.-699491976.1695837480#unsafe-webhooks

gatekeeper-validating-webhook-configuration | Intercepting cluster-scoped system resources |  
-- | -- | --
gatekeeper-validating-webhook-configuration | Intercepting resources in the kube-node-lease namespace |  
gatekeeper-validating-webhook-configuration | Intercepting resources in the kube-system namespace

[gatekeeper-validating-webhook-configuration](https://console.cloud.google.com/kubernetes/object/admissionregistration.k8s.io/validatingwebhookconfigurations/northamerica-northeast1/krmapihost-kcc-oi/gatekeeper-validating-webhook-configuration?apiVersion=v1&project=kcc-oi-cluster) Intercepting cluster-scoped system resources
[gatekeeper-validating-webhook-configuration](https://console.cloud.google.com/kubernetes/object/admissionregistration.k8s.io/validatingwebhookconfigurations/northamerica-northeast1/krmapihost-kcc-oi/gatekeeper-validating-webhook-configuration?apiVersion=v1&project=kcc-oi-cluster) Intercepting resources in the kube-node-lease namespace
[gatekeeper-validating-webhook-configuration](https://console.cloud.google.com/kubernetes/object/admissionregistration.k8s.io/validatingwebhookconfigurations/northamerica-northeast1/krmapihost-kcc-oi/gatekeeper-validating-webhook-configuration?apiVersion=v1&project=kcc-oi-cluster) Intercepting resources in the kube-system namespace

https://cloud.google.com/kubernetes-engine/docs/how-to/optimize-webhooks?&_ga=2.254246863.-699491976.1695837480#no-available-endpoints

workloads up