An operations team wants to leverage the advanced features of Container Engine for Kubernetes (OKE) and requires granular control over cluster add-ons, workload identity, and improved worker node management. They also prioritize strong security measures and require a financially-backed service level agreement (SLA) for Kubernetes API server uptime.

Which type of cluster should they choose to meet their requirements?