21.29.0 (2026-10-07) Features Add opt-in aws:SourceArn condition to Karpenter controller IAM role trust policy (#3743) (87db059)