Looking at logs today from my autopilot cluster, I see that in the middle of the night the konnectivity-agent Deployment was installed. I'm assuming this was GKE Autopilot doing some routine maintenance and adding desired services. The audit log says that the authentication details were from system:addon-manager.
I just want to confirm that this was GKE Autopilot and it wasn't something else. If it was Autopilot, how would I have I found this out?
Disregard - this can be found in https://cloud.google.com/kubernetes-engine/docs/release-notes#May_03_2023