As a member of the DevOps team at an expanding analytics company, you're tasked with migrating docker applications from on-premises Virtual Machines to Google Kubernetes Engine (GKE). The company operates across three environments: development, staging, and production. A critical requirement is the separation of these environments to facilitate access restriction via IAM policies. According to Google Cloud Platform (GCP) best practices, which of the following approaches would best meet this requirement?