Merge branch 'master' into docs-rel-4-7-c

Author: addetz

.github/workflows/url-checks.yaml

@@ -30,6 +30,9 @@ jobs:
         with:
           node-version: "20"
 
+      - name: Install Dependencies
+        run: npm ci
+
       - name: URL Checker
         run: make verify-url-links-ci
 

_partials/permissions/_aws-deployment-policy.mdx

@@ -24,12 +24,14 @@ partial_name: aws-deployment-policy
         "iam:AttachGroupPolicy",
         "iam:CreatePolicy",
         "iam:CreatePolicyVersion",
+        "iam:CreateRole",
         "iam:DeletePolicy",
         "iam:DeletePolicyVersion",
         "iam:DetachGroupPolicy",
         "iam:GetGroup",
         "iam:GetInstanceProfile",
         "iam:GetPolicy",
+        "iam:GetRole",
         "iam:GetUser",
         "iam:ListPolicies",
         "iam:ListPolicyVersions",

_partials/permissions/_aws-dynamic-permissions.mdx

@@ -105,6 +105,7 @@ partial_name: aws-dynamic-permissions
         "iam:CreateInstanceProfile",
         "iam:CreatePolicy",
         "iam:CreatePolicyVersion",
+        "iam:CreateRole",
         "iam:CreateUser",
         "iam:DeleteGroup",
         "iam:DeleteInstanceProfile",
@@ -114,6 +115,7 @@ partial_name: aws-dynamic-permissions
         "iam:GetGroup",
         "iam:GetInstanceProfile",
         "iam:GetPolicy",
+        "iam:GetRole",
         "iam:GetUser",
         "iam:ListPolicies",
         "iam:ListPolicyVersions",

_partials/permissions/_aws-nodes-policy.mdx

@@ -47,6 +47,11 @@ partial_name: aws-nodes-policy
       ],
       "Resource": ["*"],
       "Effect": "Allow"
+    },
+    {
+      "Action": ["ec2:GetInstanceMetadataDefaults"],
+      "Resource": ["*"],
+      "Effect": "Allow"
     }
   ]
 }

_partials/permissions/_aws-static-permissions.mdx

@@ -79,6 +79,7 @@ partial_name: aws-static-permissions
         "iam:CreateInstanceProfile",
         "iam:CreatePolicy",
         "iam:CreatePolicyVersion",
+        "iam:CreateRole",
         "iam:CreateUser",
         "iam:DeleteGroup",
         "iam:DeleteInstanceProfile",
@@ -88,6 +89,7 @@ partial_name: aws-static-permissions
         "iam:GetGroup",
         "iam:GetInstanceProfile",
         "iam:GetPolicy",
+        "iam:GetRole",
         "iam:GetUser",
         "iam:ListPolicies",
         "iam:ListPolicyVersions",

_partials/self-hosted/_airgap-additional-ovas.mdx

@@ -5,13 +5,14 @@ partial_name: airgap-additional-ovas
 
 | **Kubernetes Version** | **OVA Name**                  | **Download URL**                                                                 |
 | ---------------------- | ----------------------------- | -------------------------------------------------------------------------------- |
+| Kubernetes 1.33.5      | `u-2204-0-k-1335-0.ova`       | `https://vmwaregoldenimage-console.s3.amazonaws.com/u-2204-0-k-1335-0.ova`       |
 | Kubernetes 1.33.4      | `u-2204-0-k-1334-0.ova`       | `https://vmwaregoldenimage-console.s3.amazonaws.com/u-2204-0-k-1334-0.ova`       |
 | Kubernetes 1.32.8      | `u-2204-0-k-1328-0.ova`       | `https://vmwaregoldenimage-console.s3.amazonaws.com/u-2204-0-k-1328-0.ova`       |
 | Kubernetes 1.32.4      | `u-2204-0-k-1324-0.ova`       | `https://vmwaregoldenimage-console.s3.amazonaws.com/u-2204-0-k-1324-0.ova`       |
 | Kubernetes 1.32.3      | `u-2204-0-k-1323-0.ova`       | `https://vmwaregoldenimage-console.s3.amazonaws.com/u-2204-0-k-1323-0.ova`       |
 | Kubernetes 1.32.2      | `u-2204-0-k-1322-0.ova`       | `https://vmwaregoldenimage-console.s3.amazonaws.com/u-2204-0-k-1322-0.ova`       |
 | Kubernetes 1.32.1      | `u-2204-0-k-1321-0.ova`       | `https://vmwaregoldenimage-console.s3.amazonaws.com/u-2204-0-k-1321-0.ova`       |
-| Kubernetes 1.31.12     | `u-2204-0-k-13112-0.ova`      | `https://vmwaregoldenimage-console.s3.amazonaws.com/u-2204-0-k-13112-0.ova`       |
+| Kubernetes 1.31.12     | `u-2204-0-k-13112-0.ova`      | `https://vmwaregoldenimage-console.s3.amazonaws.com/u-2204-0-k-13112-0.ova`      |
 | Kubernetes 1.31.8      | `u-2204-0-k-1318-0.ova`       | `https://vmwaregoldenimage-console.s3.amazonaws.com/u-2204-0-k-1318-0.ova`       |
 | Kubernetes 1.31.7      | `u-2204-0-k-1317-0.ova`       | `https://vmwaregoldenimage-console.s3.amazonaws.com/u-2204-0-k-1317-0.ova`       |
 | Kubernetes 1.31.6      | `u-2204-0-k-1316-0.ova`       | `https://vmwaregoldenimage-console.s3.amazonaws.com/u-2204-0-k-1316-0.ova`       |

_partials/vertex/_airgap-additional-ovas.mdx

@@ -5,6 +5,7 @@ partial_name: airgap-additional-ovas
 
 | **Kubernetes Version** | **OVA Name**                     | **Download URL**                                                                    |
 | ---------------------- | -------------------------------- | ----------------------------------------------------------------------------------- |
+| Kubernetes 1.33.5      | `u-2004-0-k-1335-fips.ova`       | `https://vmwaregoldenimage-console.s3.amazonaws.com/u-2004-0-k-1335-fips.ova`       |
 | Kubernetes 1.33.4      | `u-2004-0-k-1334-fips.ova`       | `https://vmwaregoldenimage-console.s3.amazonaws.com/u-2004-0-k-1334-fips.ova`       |
 | Kubernetes 1.32.8      | `u-2004-0-k-1328-fips.ova`       | `https://vmwaregoldenimage-console.s3.amazonaws.com/u-2004-0-k-1328-fips.ova`       |
 | Kubernetes 1.32.4      | `u-2004-0-k-1324-fips.ova`       | `https://vmwaregoldenimage-console.s3.amazonaws.com/u-2004-0-k-1324-fips.ova`       |

docs/docs-content/clusters/public-cloud/aws/architecture.md

@@ -71,9 +71,13 @@ managedControlPlane:
 
 Nodes provisioned through [Karpenter](https://karpenter.sh/docs/) are visible in Palette and supported for read-only
 operations, such as billing and monitoring. However, [Day-2 operations](../../cluster-management/cluster-management.md)
-are not supported.
+are not supported. Refer to the [Configure Karpenter for EKS Clusters](./configure-karpenter-eks-clusters.md) guide to
+learn how to install Karpenter on an existing EKS cluster.
 
-The **Managed by Karpenter** banner is displayed for any node pools that are provisioned using Karpenter.
+#### Visibility in Palette
+
+In Palette, node pools provisioned by Karpenter display the **Managed by Karpenter** banner in the cluster’s **Nodes**
+tab.
 
 ![Karpenter node in Palette](/public-cloud_aws_architecture_managed-by-karpenter.webp)