diff --git a/Cargo.lock b/Cargo.lock
index 76c1ad8fd50..49f2b9adbf6 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -191,6 +191,24 @@ dependencies = [
  "settings-plugins",
 ]
 
+[[package]]
+name = "aws-k8s-1_31"
+version = "0.1.0"
+dependencies = [
+ "settings-defaults",
+ "settings-migrations",
+ "settings-plugins",
+]
+
+[[package]]
+name = "aws-k8s-1_31-nvidia"
+version = "0.1.0"
+dependencies = [
+ "settings-defaults",
+ "settings-migrations",
+ "settings-plugins",
+]
+
 [[package]]
 name = "metal-dev"
 version = "0.1.0"
@@ -265,3 +283,12 @@ dependencies = [
  "settings-migrations",
  "settings-plugins",
 ]
+
+[[package]]
+name = "vmware-k8s-1_31"
+version = "0.1.0"
+dependencies = [
+ "settings-defaults",
+ "settings-migrations",
+ "settings-plugins",
+]
diff --git a/Cargo.toml b/Cargo.toml
index 7a4d0fad8f9..a388a64c655 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -21,10 +21,12 @@ members = [
     "variants/aws-k8s-1.28",
     "variants/aws-k8s-1.29",
     "variants/aws-k8s-1.30",
+    "variants/aws-k8s-1.31",
     "variants/aws-k8s-1.27-nvidia",
     "variants/aws-k8s-1.28-nvidia",
     "variants/aws-k8s-1.29-nvidia",
     "variants/aws-k8s-1.30-nvidia",
+    "variants/aws-k8s-1.31-nvidia",
     "variants/metal-dev",
     "variants/metal-k8s-1.28",
     "variants/metal-k8s-1.29",
@@ -32,6 +34,7 @@ members = [
     "variants/vmware-k8s-1.28",
     "variants/vmware-k8s-1.29",
     "variants/vmware-k8s-1.30",
+    "variants/vmware-k8s-1.31",
 ]
 
 [profile.dev]
diff --git a/README.md b/README.md
index aed4b33d472..c73641d7d78 100644
--- a/README.md
+++ b/README.md
@@ -69,6 +69,7 @@ The following variants support EKS, as described above:
 * `aws-k8s-1.28`
 * `aws-k8s-1.29`
 * `aws-k8s-1.30`
+* `aws-k8s-1.31`
 * `aws-k8s-1.23-nvidia`
 * `aws-k8s-1.24-nvidia`
 * `aws-k8s-1.25-nvidia`
@@ -77,6 +78,7 @@ The following variants support EKS, as described above:
 * `aws-k8s-1.28-nvidia`
 * `aws-k8s-1.29-nvidia`
 * `aws-k8s-1.30-nvidia`
+* `aws-k8s-1.31-nvidia`
 
 The following variants support ECS:
 
@@ -90,6 +92,7 @@ We also have variants that are designed to be Kubernetes worker nodes in VMware:
 * `vmware-k8s-1.28`
 * `vmware-k8s-1.29`
 * `vmware-k8s-1.30`
+* `vmware-k8s-1.31`
 
 The following variants are designed to be Kubernetes worker nodes on bare metal:
 
diff --git a/packages/settings-defaults/settings-defaults.spec b/packages/settings-defaults/settings-defaults.spec
index 9b9d3774814..5f7d1d6cebf 100644
--- a/packages/settings-defaults/settings-defaults.spec
+++ b/packages/settings-defaults/settings-defaults.spec
@@ -129,40 +129,44 @@ Conflicts: %{_cross_os}settings-defaults(any)
 %description aws-k8s-1.26-nvidia
 %{summary}.
 
-%package aws-k8s-1.30
+%package aws-k8s-1.31
 Summary: Settings defaults for the aws-k8s 1.27 through 1.30 variants
 Requires: (%{shrink:
            %{_cross_os}variant(aws-k8s-1.27) or
            %{_cross_os}variant(aws-k8s-1.28) or
            %{_cross_os}variant(aws-k8s-1.29) or
-           %{_cross_os}variant(aws-k8s-1.30)
+           %{_cross_os}variant(aws-k8s-1.30) or
+           %{_cross_os}variant(aws-k8s-1.31)
            %{nil}})
 Provides: %{_cross_os}settings-defaults(any)
 Provides: %{_cross_os}settings-defaults(aws-k8s-1.27)
 Provides: %{_cross_os}settings-defaults(aws-k8s-1.28)
 Provides: %{_cross_os}settings-defaults(aws-k8s-1.29)
 Provides: %{_cross_os}settings-defaults(aws-k8s-1.30)
+Provides: %{_cross_os}settings-defaults(aws-k8s-1.31)
 Conflicts: %{_cross_os}settings-defaults(any)
 
-%description aws-k8s-1.30
+%description aws-k8s-1.31
 %{summary}.
 
-%package aws-k8s-1.30-nvidia
+%package aws-k8s-1.31-nvidia
 Summary: Settings defaults for the aws-k8s 1.27 through 1.30 nvidia variants
 Requires: (%{shrink:
            %{_cross_os}variant(aws-k8s-1.27-nvidia) or
            %{_cross_os}variant(aws-k8s-1.28-nvidia) or
            %{_cross_os}variant(aws-k8s-1.29-nvidia) or
-           %{_cross_os}variant(aws-k8s-1.30-nvidia)
+           %{_cross_os}variant(aws-k8s-1.30-nvidia) or
+           %{_cross_os}variant(aws-k8s-1.31-nvidia)
            %{nil}})
 Provides: %{_cross_os}settings-defaults(any)
 Provides: %{_cross_os}settings-defaults(aws-k8s-1.27-nvidia)
 Provides: %{_cross_os}settings-defaults(aws-k8s-1.28-nvidia)
 Provides: %{_cross_os}settings-defaults(aws-k8s-1.29-nvidia)
 Provides: %{_cross_os}settings-defaults(aws-k8s-1.30-nvidia)
+Provides: %{_cross_os}settings-defaults(aws-k8s-1.31-nvidia)
 Conflicts: %{_cross_os}settings-defaults(any)
 
-%description aws-k8s-1.30-nvidia
+%description aws-k8s-1.31-nvidia
 %{summary}.
 
 %package metal-dev
@@ -203,22 +207,24 @@ Conflicts: %{_cross_os}settings-defaults(any)
 %description vmware-dev
 %{summary}.
 
-%package vmware-k8s-1.30
+%package vmware-k8s-1.31
 Summary: Settings defaults for the vmware-k8s 1.27 through 1.30 variants
 Requires: (%{shrink:
            %{_cross_os}variant(vmware-k8s-1.27) or
            %{_cross_os}variant(vmware-k8s-1.28) or
            %{_cross_os}variant(vmware-k8s-1.29) or
-           %{_cross_os}variant(vmware-k8s-1.30)
+           %{_cross_os}variant(vmware-k8s-1.30) or
+           %{_cross_os}variant(vmware-k8s-1.31)
            %{nil}})
 Provides: %{_cross_os}settings-defaults(any)
 Provides: %{_cross_os}settings-defaults(vmware-k8s-1.27)
 Provides: %{_cross_os}settings-defaults(vmware-k8s-1.28)
 Provides: %{_cross_os}settings-defaults(vmware-k8s-1.29)
 Provides: %{_cross_os}settings-defaults(vmware-k8s-1.30)
+Provides: %{_cross_os}settings-defaults(vmware-k8s-1.31)
 Conflicts: %{_cross_os}settings-defaults(any)
 
-%description vmware-k8s-1.30
+%description vmware-k8s-1.31
 %{summary}.
 
 %prep
@@ -239,12 +245,12 @@ for defaults in \
   aws-k8s-1.25-nvidia \
   aws-k8s-1.26 \
   aws-k8s-1.26-nvidia \
-  aws-k8s-1.30 \
-  aws-k8s-1.30-nvidia \
+  aws-k8s-1.31 \
+  aws-k8s-1.31-nvidia \
   metal-dev \
   metal-k8s-1.30 \
   vmware-dev \
-  vmware-k8s-1.30 \
+  vmware-k8s-1.31 \
   ;
 do
   projects+=( "-p" "settings-defaults-$(echo "${defaults}" | sed -e 's,\.,_,g')" )
@@ -276,12 +282,12 @@ for defaults in \
   aws-k8s-1.25-nvidia \
   aws-k8s-1.26 \
   aws-k8s-1.26-nvidia \
-  aws-k8s-1.30 \
-  aws-k8s-1.30-nvidia \
+  aws-k8s-1.31 \
+  aws-k8s-1.31-nvidia \
   metal-dev \
   metal-k8s-1.30 \
   vmware-dev \
-  vmware-k8s-1.30 \
+  vmware-k8s-1.31 \
   ;
 do
   crate="$(echo "${defaults}" | sed -e 's,\.,_,g')"
@@ -340,13 +346,13 @@ done
 %{_cross_defaultsdir}/aws-k8s-1.26-nvidia.toml
 %{_cross_tmpfilesdir}/storewolf-defaults-aws-k8s-1.26-nvidia.conf
 
-%files aws-k8s-1.30
-%{_cross_defaultsdir}/aws-k8s-1.30.toml
-%{_cross_tmpfilesdir}/storewolf-defaults-aws-k8s-1.30.conf
+%files aws-k8s-1.31
+%{_cross_defaultsdir}/aws-k8s-1.31.toml
+%{_cross_tmpfilesdir}/storewolf-defaults-aws-k8s-1.31.conf
 
-%files aws-k8s-1.30-nvidia
-%{_cross_defaultsdir}/aws-k8s-1.30-nvidia.toml
-%{_cross_tmpfilesdir}/storewolf-defaults-aws-k8s-1.30-nvidia.conf
+%files aws-k8s-1.31-nvidia
+%{_cross_defaultsdir}/aws-k8s-1.31-nvidia.toml
+%{_cross_tmpfilesdir}/storewolf-defaults-aws-k8s-1.31-nvidia.conf
 
 %files metal-dev
 %{_cross_defaultsdir}/metal-dev.toml
@@ -360,6 +366,6 @@ done
 %{_cross_defaultsdir}/vmware-dev.toml
 %{_cross_tmpfilesdir}/storewolf-defaults-vmware-dev.conf
 
-%files vmware-k8s-1.30
-%{_cross_defaultsdir}/vmware-k8s-1.30.toml
-%{_cross_tmpfilesdir}/storewolf-defaults-vmware-k8s-1.30.conf
+%files vmware-k8s-1.31
+%{_cross_defaultsdir}/vmware-k8s-1.31.toml
+%{_cross_tmpfilesdir}/storewolf-defaults-vmware-k8s-1.31.conf
diff --git a/packages/settings-plugins/settings-plugins.spec b/packages/settings-plugins/settings-plugins.spec
index e459d6945d0..a8bfcd85a9d 100644
--- a/packages/settings-plugins/settings-plugins.spec
+++ b/packages/settings-plugins/settings-plugins.spec
@@ -72,6 +72,8 @@ Provides: %{_cross_os}settings-plugin(aws-k8s-1.29)
 Provides: %{_cross_os}settings-plugin(aws-k8s-1.29-nvidia)
 Provides: %{_cross_os}settings-plugin(aws-k8s-1.30)
 Provides: %{_cross_os}settings-plugin(aws-k8s-1.30-nvidia)
+Provides: %{_cross_os}settings-plugin(aws-k8s-1.31)
+Provides: %{_cross_os}settings-plugin(aws-k8s-1.31-nvidia)
 Conflicts: %{_cross_os}settings-plugin(any)
 
 %description aws-k8s
@@ -118,6 +120,7 @@ Provides: %{_cross_os}settings-plugin(vmware-k8s-1.27)
 Provides: %{_cross_os}settings-plugin(vmware-k8s-1.28)
 Provides: %{_cross_os}settings-plugin(vmware-k8s-1.29)
 Provides: %{_cross_os}settings-plugin(vmware-k8s-1.30)
+Provides: %{_cross_os}settings-plugin(vmware-k8s-1.31)
 Conflicts: %{_cross_os}settings-plugin(any)
 
 %description vmware-k8s
diff --git a/sources/Cargo.lock b/sources/Cargo.lock
index 78b2273eb30..2ae5a35c99f 100644
--- a/sources/Cargo.lock
+++ b/sources/Cargo.lock
@@ -2076,14 +2076,14 @@ dependencies = [
 ]
 
 [[package]]
-name = "settings-defaults-aws-k8s-1_30"
+name = "settings-defaults-aws-k8s-1_31"
 version = "0.1.0"
 dependencies = [
  "bottlerocket-defaults-helper",
 ]
 
 [[package]]
-name = "settings-defaults-aws-k8s-1_30-nvidia"
+name = "settings-defaults-aws-k8s-1_31-nvidia"
 version = "0.1.0"
 dependencies = [
  "bottlerocket-defaults-helper",
@@ -2111,7 +2111,7 @@ dependencies = [
 ]
 
 [[package]]
-name = "settings-defaults-vmware-k8s-1_30"
+name = "settings-defaults-vmware-k8s-1_31"
 version = "0.1.0"
 dependencies = [
  "bottlerocket-defaults-helper",
diff --git a/sources/Cargo.toml b/sources/Cargo.toml
index cce32144f45..6257bcff42d 100644
--- a/sources/Cargo.toml
+++ b/sources/Cargo.toml
@@ -27,12 +27,12 @@ members = [
     "settings-defaults/aws-k8s-1.25-nvidia",
     "settings-defaults/aws-k8s-1.26",
     "settings-defaults/aws-k8s-1.26-nvidia",
-    "settings-defaults/aws-k8s-1.30",
-    "settings-defaults/aws-k8s-1.30-nvidia",
+    "settings-defaults/aws-k8s-1.31",
+    "settings-defaults/aws-k8s-1.31-nvidia",
     "settings-defaults/metal-dev",
     "settings-defaults/metal-k8s-1.30",
     "settings-defaults/vmware-dev",
-    "settings-defaults/vmware-k8s-1.30",
+    "settings-defaults/vmware-k8s-1.31",
 
     # (all previous migrations archived; add new ones after this line)
     "settings-migrations/v1.21.0/pluto-remove-generators-v0-1-0",
diff --git a/sources/settings-defaults/aws-k8s-1.30-nvidia/Cargo.toml b/sources/settings-defaults/aws-k8s-1.31-nvidia/Cargo.toml
similarity index 82%
rename from sources/settings-defaults/aws-k8s-1.30-nvidia/Cargo.toml
rename to sources/settings-defaults/aws-k8s-1.31-nvidia/Cargo.toml
index 0243d89c16f..917c2d40303 100644
--- a/sources/settings-defaults/aws-k8s-1.30-nvidia/Cargo.toml
+++ b/sources/settings-defaults/aws-k8s-1.31-nvidia/Cargo.toml
@@ -1,5 +1,5 @@
 [package]
-name = "settings-defaults-aws-k8s-1_30-nvidia"
+name = "settings-defaults-aws-k8s-1_31-nvidia"
 version = "0.1.0"
 edition = "2021"
 license = "Apache-2.0 OR MIT"
diff --git a/sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/10-defaults.toml b/sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/10-defaults.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/10-defaults.toml
rename to sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/10-defaults.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/15-aws-tuf.toml b/sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/15-aws-tuf.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/15-aws-tuf.toml
rename to sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/15-aws-tuf.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/20-aws-host-containers.toml b/sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/20-aws-host-containers.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/20-aws-host-containers.toml
rename to sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/20-aws-host-containers.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/25-cf-signal.toml b/sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/25-cf-signal.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/25-cf-signal.toml
rename to sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/25-cf-signal.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/26-aws-autoscaling.toml b/sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/26-aws-autoscaling.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/26-aws-autoscaling.toml
rename to sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/26-aws-autoscaling.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/30-metrics.toml b/sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/30-metrics.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/30-metrics.toml
rename to sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/30-metrics.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/31-send-metrics-aws.toml b/sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/31-send-metrics-aws.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/31-send-metrics-aws.toml
rename to sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/31-send-metrics-aws.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/40-aws-creds.toml b/sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/40-aws-creds.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/40-aws-creds.toml
rename to sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/40-aws-creds.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/50-kubernetes-aws.toml b/sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/50-kubernetes-aws.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/50-kubernetes-aws.toml
rename to sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/50-kubernetes-aws.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/51-kubernetes-containerd-nvidia.toml b/sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/51-kubernetes-containerd-nvidia.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/51-kubernetes-containerd-nvidia.toml
rename to sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/51-kubernetes-containerd-nvidia.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/52-kubernetes-services.toml b/sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/52-kubernetes-services.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/52-kubernetes-services.toml
rename to sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/52-kubernetes-services.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/53-containerd-cri-pki.toml b/sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/53-containerd-cri-pki.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/53-containerd-cri-pki.toml
rename to sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/53-containerd-cri-pki.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/54-kubernetes-aws-external-cloud-provider.toml b/sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/54-kubernetes-aws-external-cloud-provider.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/54-kubernetes-aws-external-cloud-provider.toml
rename to sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/54-kubernetes-aws-external-cloud-provider.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/55-kubernetes-aws-credential-provider.toml b/sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/55-kubernetes-aws-credential-provider.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/55-kubernetes-aws-credential-provider.toml
rename to sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/55-kubernetes-aws-credential-provider.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/56-kubernetes-seccomp-default-false.toml b/sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/56-kubernetes-seccomp-default-false.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/56-kubernetes-seccomp-default-false.toml
rename to sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/56-kubernetes-seccomp-default-false.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/60-lockdown-none.toml b/sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/60-lockdown-none.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/60-lockdown-none.toml
rename to sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/60-lockdown-none.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/70-oci-hooks.toml b/sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/70-oci-hooks.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/70-oci-hooks.toml
rename to sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/70-oci-hooks.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/75-oci-defaults-containerd-cri.toml b/sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/75-oci-defaults-containerd-cri.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/75-oci-defaults-containerd-cri.toml
rename to sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/75-oci-defaults-containerd-cri.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/76-oci-defaults-capabilities.toml b/sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/76-oci-defaults-capabilities.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/76-oci-defaults-capabilities.toml
rename to sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/76-oci-defaults-capabilities.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/77-oci-defaults-containerd-cri-resource-limits.toml b/sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/77-oci-defaults-containerd-cri-resource-limits.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/77-oci-defaults-containerd-cri-resource-limits.toml
rename to sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/77-oci-defaults-containerd-cri-resource-limits.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/90-boot.toml b/sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/90-boot.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30-nvidia/defaults.d/90-boot.toml
rename to sources/settings-defaults/aws-k8s-1.31-nvidia/defaults.d/90-boot.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30/Cargo.toml b/sources/settings-defaults/aws-k8s-1.31/Cargo.toml
similarity index 84%
rename from sources/settings-defaults/aws-k8s-1.30/Cargo.toml
rename to sources/settings-defaults/aws-k8s-1.31/Cargo.toml
index 7ff527bb863..a3dcd31d561 100644
--- a/sources/settings-defaults/aws-k8s-1.30/Cargo.toml
+++ b/sources/settings-defaults/aws-k8s-1.31/Cargo.toml
@@ -1,5 +1,5 @@
 [package]
-name = "settings-defaults-aws-k8s-1_30"
+name = "settings-defaults-aws-k8s-1_31"
 version = "0.1.0"
 edition = "2021"
 license = "Apache-2.0 OR MIT"
diff --git a/sources/settings-defaults/aws-k8s-1.30/defaults.d/10-defaults.toml b/sources/settings-defaults/aws-k8s-1.31/defaults.d/10-defaults.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30/defaults.d/10-defaults.toml
rename to sources/settings-defaults/aws-k8s-1.31/defaults.d/10-defaults.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30/defaults.d/15-aws-tuf.toml b/sources/settings-defaults/aws-k8s-1.31/defaults.d/15-aws-tuf.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30/defaults.d/15-aws-tuf.toml
rename to sources/settings-defaults/aws-k8s-1.31/defaults.d/15-aws-tuf.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30/defaults.d/20-aws-host-containers.toml b/sources/settings-defaults/aws-k8s-1.31/defaults.d/20-aws-host-containers.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30/defaults.d/20-aws-host-containers.toml
rename to sources/settings-defaults/aws-k8s-1.31/defaults.d/20-aws-host-containers.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30/defaults.d/25-cf-signal.toml b/sources/settings-defaults/aws-k8s-1.31/defaults.d/25-cf-signal.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30/defaults.d/25-cf-signal.toml
rename to sources/settings-defaults/aws-k8s-1.31/defaults.d/25-cf-signal.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30/defaults.d/26-aws-autoscaling.toml b/sources/settings-defaults/aws-k8s-1.31/defaults.d/26-aws-autoscaling.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30/defaults.d/26-aws-autoscaling.toml
rename to sources/settings-defaults/aws-k8s-1.31/defaults.d/26-aws-autoscaling.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30/defaults.d/30-metrics.toml b/sources/settings-defaults/aws-k8s-1.31/defaults.d/30-metrics.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30/defaults.d/30-metrics.toml
rename to sources/settings-defaults/aws-k8s-1.31/defaults.d/30-metrics.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30/defaults.d/31-send-metrics-aws.toml b/sources/settings-defaults/aws-k8s-1.31/defaults.d/31-send-metrics-aws.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30/defaults.d/31-send-metrics-aws.toml
rename to sources/settings-defaults/aws-k8s-1.31/defaults.d/31-send-metrics-aws.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30/defaults.d/40-aws-creds.toml b/sources/settings-defaults/aws-k8s-1.31/defaults.d/40-aws-creds.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30/defaults.d/40-aws-creds.toml
rename to sources/settings-defaults/aws-k8s-1.31/defaults.d/40-aws-creds.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30/defaults.d/50-kubernetes-aws.toml b/sources/settings-defaults/aws-k8s-1.31/defaults.d/50-kubernetes-aws.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30/defaults.d/50-kubernetes-aws.toml
rename to sources/settings-defaults/aws-k8s-1.31/defaults.d/50-kubernetes-aws.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30/defaults.d/51-kubernetes-containerd.toml b/sources/settings-defaults/aws-k8s-1.31/defaults.d/51-kubernetes-containerd.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30/defaults.d/51-kubernetes-containerd.toml
rename to sources/settings-defaults/aws-k8s-1.31/defaults.d/51-kubernetes-containerd.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30/defaults.d/52-kubernetes-services.toml b/sources/settings-defaults/aws-k8s-1.31/defaults.d/52-kubernetes-services.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30/defaults.d/52-kubernetes-services.toml
rename to sources/settings-defaults/aws-k8s-1.31/defaults.d/52-kubernetes-services.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30/defaults.d/53-containerd-cri-pki.toml b/sources/settings-defaults/aws-k8s-1.31/defaults.d/53-containerd-cri-pki.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30/defaults.d/53-containerd-cri-pki.toml
rename to sources/settings-defaults/aws-k8s-1.31/defaults.d/53-containerd-cri-pki.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30/defaults.d/54-kubernetes-aws-external-cloud-provider.toml b/sources/settings-defaults/aws-k8s-1.31/defaults.d/54-kubernetes-aws-external-cloud-provider.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30/defaults.d/54-kubernetes-aws-external-cloud-provider.toml
rename to sources/settings-defaults/aws-k8s-1.31/defaults.d/54-kubernetes-aws-external-cloud-provider.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30/defaults.d/55-kubernetes-aws-credential-provider.toml b/sources/settings-defaults/aws-k8s-1.31/defaults.d/55-kubernetes-aws-credential-provider.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30/defaults.d/55-kubernetes-aws-credential-provider.toml
rename to sources/settings-defaults/aws-k8s-1.31/defaults.d/55-kubernetes-aws-credential-provider.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30/defaults.d/56-kubernetes-seccomp-default-false.toml b/sources/settings-defaults/aws-k8s-1.31/defaults.d/56-kubernetes-seccomp-default-false.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30/defaults.d/56-kubernetes-seccomp-default-false.toml
rename to sources/settings-defaults/aws-k8s-1.31/defaults.d/56-kubernetes-seccomp-default-false.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30/defaults.d/60-lockdown-integrity.toml b/sources/settings-defaults/aws-k8s-1.31/defaults.d/60-lockdown-integrity.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30/defaults.d/60-lockdown-integrity.toml
rename to sources/settings-defaults/aws-k8s-1.31/defaults.d/60-lockdown-integrity.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30/defaults.d/70-oci-hooks.toml b/sources/settings-defaults/aws-k8s-1.31/defaults.d/70-oci-hooks.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30/defaults.d/70-oci-hooks.toml
rename to sources/settings-defaults/aws-k8s-1.31/defaults.d/70-oci-hooks.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30/defaults.d/75-oci-defaults-containerd-cri.toml b/sources/settings-defaults/aws-k8s-1.31/defaults.d/75-oci-defaults-containerd-cri.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30/defaults.d/75-oci-defaults-containerd-cri.toml
rename to sources/settings-defaults/aws-k8s-1.31/defaults.d/75-oci-defaults-containerd-cri.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30/defaults.d/76-oci-defaults-capabilities.toml b/sources/settings-defaults/aws-k8s-1.31/defaults.d/76-oci-defaults-capabilities.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30/defaults.d/76-oci-defaults-capabilities.toml
rename to sources/settings-defaults/aws-k8s-1.31/defaults.d/76-oci-defaults-capabilities.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30/defaults.d/77-oci-defaults-containerd-cri-resource-limits.toml b/sources/settings-defaults/aws-k8s-1.31/defaults.d/77-oci-defaults-containerd-cri-resource-limits.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30/defaults.d/77-oci-defaults-containerd-cri-resource-limits.toml
rename to sources/settings-defaults/aws-k8s-1.31/defaults.d/77-oci-defaults-containerd-cri-resource-limits.toml
diff --git a/sources/settings-defaults/aws-k8s-1.30/defaults.d/90-boot.toml b/sources/settings-defaults/aws-k8s-1.31/defaults.d/90-boot.toml
similarity index 100%
rename from sources/settings-defaults/aws-k8s-1.30/defaults.d/90-boot.toml
rename to sources/settings-defaults/aws-k8s-1.31/defaults.d/90-boot.toml
diff --git a/sources/settings-defaults/vmware-k8s-1.30/Cargo.toml b/sources/settings-defaults/vmware-k8s-1.31/Cargo.toml
similarity index 84%
rename from sources/settings-defaults/vmware-k8s-1.30/Cargo.toml
rename to sources/settings-defaults/vmware-k8s-1.31/Cargo.toml
index f07ee7145da..668a4260084 100644
--- a/sources/settings-defaults/vmware-k8s-1.30/Cargo.toml
+++ b/sources/settings-defaults/vmware-k8s-1.31/Cargo.toml
@@ -1,5 +1,5 @@
 [package]
-name = "settings-defaults-vmware-k8s-1_30"
+name = "settings-defaults-vmware-k8s-1_31"
 version = "0.1.0"
 edition = "2021"
 license = "Apache-2.0 OR MIT"
diff --git a/sources/settings-defaults/vmware-k8s-1.30/defaults.d/10-defaults.toml b/sources/settings-defaults/vmware-k8s-1.31/defaults.d/10-defaults.toml
similarity index 100%
rename from sources/settings-defaults/vmware-k8s-1.30/defaults.d/10-defaults.toml
rename to sources/settings-defaults/vmware-k8s-1.31/defaults.d/10-defaults.toml
diff --git a/sources/settings-defaults/vmware-k8s-1.30/defaults.d/15-public-tuf.toml b/sources/settings-defaults/vmware-k8s-1.31/defaults.d/15-public-tuf.toml
similarity index 100%
rename from sources/settings-defaults/vmware-k8s-1.30/defaults.d/15-public-tuf.toml
rename to sources/settings-defaults/vmware-k8s-1.31/defaults.d/15-public-tuf.toml
diff --git a/sources/settings-defaults/vmware-k8s-1.30/defaults.d/20-public-host-containers.toml b/sources/settings-defaults/vmware-k8s-1.31/defaults.d/20-public-host-containers.toml
similarity index 100%
rename from sources/settings-defaults/vmware-k8s-1.30/defaults.d/20-public-host-containers.toml
rename to sources/settings-defaults/vmware-k8s-1.31/defaults.d/20-public-host-containers.toml
diff --git a/sources/settings-defaults/vmware-k8s-1.30/defaults.d/30-metrics.toml b/sources/settings-defaults/vmware-k8s-1.31/defaults.d/30-metrics.toml
similarity index 100%
rename from sources/settings-defaults/vmware-k8s-1.30/defaults.d/30-metrics.toml
rename to sources/settings-defaults/vmware-k8s-1.31/defaults.d/30-metrics.toml
diff --git a/sources/settings-defaults/vmware-k8s-1.30/defaults.d/31-send-metrics.toml b/sources/settings-defaults/vmware-k8s-1.31/defaults.d/31-send-metrics.toml
similarity index 100%
rename from sources/settings-defaults/vmware-k8s-1.30/defaults.d/31-send-metrics.toml
rename to sources/settings-defaults/vmware-k8s-1.31/defaults.d/31-send-metrics.toml
diff --git a/sources/settings-defaults/vmware-k8s-1.30/defaults.d/40-aws-creds.toml b/sources/settings-defaults/vmware-k8s-1.31/defaults.d/40-aws-creds.toml
similarity index 100%
rename from sources/settings-defaults/vmware-k8s-1.30/defaults.d/40-aws-creds.toml
rename to sources/settings-defaults/vmware-k8s-1.31/defaults.d/40-aws-creds.toml
diff --git a/sources/settings-defaults/vmware-k8s-1.30/defaults.d/50-kubernetes-vmware.toml b/sources/settings-defaults/vmware-k8s-1.31/defaults.d/50-kubernetes-vmware.toml
similarity index 100%
rename from sources/settings-defaults/vmware-k8s-1.30/defaults.d/50-kubernetes-vmware.toml
rename to sources/settings-defaults/vmware-k8s-1.31/defaults.d/50-kubernetes-vmware.toml
diff --git a/sources/settings-defaults/vmware-k8s-1.30/defaults.d/51-kubernetes-containerd.toml b/sources/settings-defaults/vmware-k8s-1.31/defaults.d/51-kubernetes-containerd.toml
similarity index 100%
rename from sources/settings-defaults/vmware-k8s-1.30/defaults.d/51-kubernetes-containerd.toml
rename to sources/settings-defaults/vmware-k8s-1.31/defaults.d/51-kubernetes-containerd.toml
diff --git a/sources/settings-defaults/vmware-k8s-1.30/defaults.d/52-kubernetes-services.toml b/sources/settings-defaults/vmware-k8s-1.31/defaults.d/52-kubernetes-services.toml
similarity index 100%
rename from sources/settings-defaults/vmware-k8s-1.30/defaults.d/52-kubernetes-services.toml
rename to sources/settings-defaults/vmware-k8s-1.31/defaults.d/52-kubernetes-services.toml
diff --git a/sources/settings-defaults/vmware-k8s-1.30/defaults.d/53-containerd-cri-pki.toml b/sources/settings-defaults/vmware-k8s-1.31/defaults.d/53-containerd-cri-pki.toml
similarity index 100%
rename from sources/settings-defaults/vmware-k8s-1.30/defaults.d/53-containerd-cri-pki.toml
rename to sources/settings-defaults/vmware-k8s-1.31/defaults.d/53-containerd-cri-pki.toml
diff --git a/sources/settings-defaults/vmware-k8s-1.30/defaults.d/54-kubernetes-seccomp-default-false.toml b/sources/settings-defaults/vmware-k8s-1.31/defaults.d/54-kubernetes-seccomp-default-false.toml
similarity index 100%
rename from sources/settings-defaults/vmware-k8s-1.30/defaults.d/54-kubernetes-seccomp-default-false.toml
rename to sources/settings-defaults/vmware-k8s-1.31/defaults.d/54-kubernetes-seccomp-default-false.toml
diff --git a/sources/settings-defaults/vmware-k8s-1.30/defaults.d/60-lockdown-integrity.toml b/sources/settings-defaults/vmware-k8s-1.31/defaults.d/60-lockdown-integrity.toml
similarity index 100%
rename from sources/settings-defaults/vmware-k8s-1.30/defaults.d/60-lockdown-integrity.toml
rename to sources/settings-defaults/vmware-k8s-1.31/defaults.d/60-lockdown-integrity.toml
diff --git a/sources/settings-defaults/vmware-k8s-1.30/defaults.d/70-public-ntp.toml b/sources/settings-defaults/vmware-k8s-1.31/defaults.d/70-public-ntp.toml
similarity index 100%
rename from sources/settings-defaults/vmware-k8s-1.30/defaults.d/70-public-ntp.toml
rename to sources/settings-defaults/vmware-k8s-1.31/defaults.d/70-public-ntp.toml
diff --git a/sources/settings-defaults/vmware-k8s-1.30/defaults.d/75-oci-defaults-containerd-cri.toml b/sources/settings-defaults/vmware-k8s-1.31/defaults.d/75-oci-defaults-containerd-cri.toml
similarity index 100%
rename from sources/settings-defaults/vmware-k8s-1.30/defaults.d/75-oci-defaults-containerd-cri.toml
rename to sources/settings-defaults/vmware-k8s-1.31/defaults.d/75-oci-defaults-containerd-cri.toml
diff --git a/sources/settings-defaults/vmware-k8s-1.30/defaults.d/76-oci-defaults-capabilities.toml b/sources/settings-defaults/vmware-k8s-1.31/defaults.d/76-oci-defaults-capabilities.toml
similarity index 100%
rename from sources/settings-defaults/vmware-k8s-1.30/defaults.d/76-oci-defaults-capabilities.toml
rename to sources/settings-defaults/vmware-k8s-1.31/defaults.d/76-oci-defaults-capabilities.toml
diff --git a/sources/settings-defaults/vmware-k8s-1.30/defaults.d/77-oci-defaults-containerd-cri-resource-limits.toml b/sources/settings-defaults/vmware-k8s-1.31/defaults.d/77-oci-defaults-containerd-cri-resource-limits.toml
similarity index 100%
rename from sources/settings-defaults/vmware-k8s-1.30/defaults.d/77-oci-defaults-containerd-cri-resource-limits.toml
rename to sources/settings-defaults/vmware-k8s-1.31/defaults.d/77-oci-defaults-containerd-cri-resource-limits.toml
diff --git a/sources/settings-defaults/vmware-k8s-1.30/defaults.d/80-oci-hooks.toml b/sources/settings-defaults/vmware-k8s-1.31/defaults.d/80-oci-hooks.toml
similarity index 100%
rename from sources/settings-defaults/vmware-k8s-1.30/defaults.d/80-oci-hooks.toml
rename to sources/settings-defaults/vmware-k8s-1.31/defaults.d/80-oci-hooks.toml
diff --git a/sources/settings-defaults/vmware-k8s-1.30/defaults.d/90-boot.toml b/sources/settings-defaults/vmware-k8s-1.31/defaults.d/90-boot.toml
similarity index 100%
rename from sources/settings-defaults/vmware-k8s-1.30/defaults.d/90-boot.toml
rename to sources/settings-defaults/vmware-k8s-1.31/defaults.d/90-boot.toml
diff --git a/variants/README.md b/variants/README.md
index fcdea3826a5..98a5fa1d9d8 100644
--- a/variants/README.md
+++ b/variants/README.md
@@ -155,6 +155,21 @@ It supports self-hosted clusters and clusters managed by [EKS](https://aws.amazo
 
 This variant is compatible with Kubernetes 1.30, 1.31, 1.32, and 1.33 clusters.
 
+### aws-k8s-1.31: Kubernetes 1.31 node
+
+The [aws-k8s-1.31](aws-k8s-1.31/Cargo.toml) variant includes the packages needed to run a Kubernetes node in AWS.
+It supports self-hosted clusters and clusters managed by [EKS](https://aws.amazon.com/eks/).
+
+This variant is compatible with Kubernetes 1.31, 1.32, 1.33, and 1.34 clusters.
+
+### aws-k8s-1.31-nvidia: Kubernetes 1.31 NVIDIA node
+
+The [aws-k8s-1.31-nvidia](aws-k8s-1.31-nvidia/Cargo.toml) variant includes the packages needed to run a Kubernetes node in AWS.
+It also includes the required packages to configure containers to leverage NVIDIA GPUs.
+It supports self-hosted clusters and clusters managed by [EKS](https://aws.amazon.com/eks/).
+
+This variant is compatible with Kubernetes 1.31, 1.32, 1.33, and 1.34 clusters.
+
 ### aws-ecs-1: Amazon ECS container instance
 
 The [aws-ecs-1](aws-ecs-1/Cargo.toml) variant includes the packages needed to run an [Amazon ECS](https://ecs.aws)
@@ -209,6 +224,13 @@ It supports self-hosted clusters.
 
 This variant is compatible with Kubernetes 1.30, 1.31, 1.32, and 1.33 clusters.
 
+## vmware-k8s-1.31: VMware Kubernetes 1.31 node
+
+The [vmware-k8s-1.31](vmware-k8s-1.31/Cargo.toml) variant includes the packages needed to run a Kubernetes worker node as a VMware guest.
+It supports self-hosted clusters.
+
+This variant is compatible with Kubernetes 1.31, 1.32, 1.33, and 1.34 clusters.
+
 ### metal-dev: Metal development build
 
 The [metal-dev](metal-dev/Cargo.toml) variant has useful packages for local development of the OS and is intended to run bare metal.
diff --git a/variants/aws-k8s-1.31-nvidia/Cargo.toml b/variants/aws-k8s-1.31-nvidia/Cargo.toml
new file mode 100644
index 00000000000..0ebbac00f51
--- /dev/null
+++ b/variants/aws-k8s-1.31-nvidia/Cargo.toml
@@ -0,0 +1,50 @@
+[package]
+# This is the aws-k8s-1.31-nvidia variant. "." is not allowed in crate names, but we
+# don't use this crate name anywhere.
+name = "aws-k8s-1_31-nvidia"
+version = "0.1.0"
+edition = "2021"
+publish = false
+build = "../build.rs"
+# Don't rebuild crate just because of changes to README.
+exclude = ["README.md"]
+
+[package.metadata.build-variant.image-layout]
+os-image-size-gib = 4
+
+[package.metadata.build-variant.image-features]
+grub-set-private-var = true
+uefi-secure-boot = true
+xfs-data-partition = true
+systemd-networkd = true
+
+[package.metadata.build-variant]
+included-packages = [
+    # core
+    "release",
+    "kernel-6.1",
+    # k8s
+    "cni",
+    "cni-plugins",
+    "kubelet-1.31",
+    "aws-iam-authenticator",
+    # nvidia
+    "nvidia-container-toolkit-k8s",
+    "nvidia-k8s-device-plugin",
+    "kmod-6.1-nvidia-tesla-535",
+]
+kernel-parameters = [
+    "console=tty0",
+    "console=ttyS0,115200n8",
+    "net.ifnames=0",
+    "netdog.default-interface=eth0:dhcp4,dhcp6?",
+    "quiet",
+]
+
+[lib]
+path = "../variants.rs"
+
+[build-dependencies]
+settings-defaults = { path = "../../packages/settings-defaults" }
+settings-plugins = { path = "../../packages/settings-plugins" }
+settings-migrations = { path = "../../packages/settings-migrations" }
diff --git a/variants/aws-k8s-1.31/Cargo.toml b/variants/aws-k8s-1.31/Cargo.toml
new file mode 100644
index 00000000000..7acbe3b3545
--- /dev/null
+++ b/variants/aws-k8s-1.31/Cargo.toml
@@ -0,0 +1,43 @@
+[package]
+# This is the aws-k8s-1.31 variant. "." is not allowed in crate names, but we
+# don't use this crate name anywhere.
+name = "aws-k8s-1_31"
+version = "0.1.0"
+edition = "2021"
+publish = false
+build = "../build.rs"
+# Don't rebuild crate just because of changes to README.
+exclude = ["README.md"]
+
+[package.metadata.build-variant.image-features]
+grub-set-private-var = true
+uefi-secure-boot = true
+xfs-data-partition = true
+systemd-networkd = true
+
+[package.metadata.build-variant]
+included-packages = [
+# core
+    "release",
+    "kernel-6.1",
+# k8s
+    "cni",
+    "cni-plugins",
+    "kubelet-1.31",
+    "aws-iam-authenticator",
+]
+kernel-parameters = [
+    "console=tty0",
+    "console=ttyS0,115200n8",
+    "net.ifnames=0",
+    "netdog.default-interface=eth0:dhcp4,dhcp6?",
+    "quiet",
+]
+
+[lib]
+path = "../variants.rs"
+
+[build-dependencies]
+settings-defaults = { path = "../../packages/settings-defaults" }
+settings-plugins = { path = "../../packages/settings-plugins" }
+settings-migrations = { path = "../../packages/settings-migrations" }
diff --git a/variants/vmware-k8s-1.31/Cargo.toml b/variants/vmware-k8s-1.31/Cargo.toml
new file mode 100644
index 00000000000..fbd0317f2e9
--- /dev/null
+++ b/variants/vmware-k8s-1.31/Cargo.toml
@@ -0,0 +1,50 @@
+[package]
+# This is the vmware-k8s-1.31 variant. "." is not allowed in crate names, but
+# we don't use this crate name anywhere.
+name = "vmware-k8s-1_31"
+version = "0.1.0"
+edition = "2021"
+publish = false
+build = "../build.rs"
+# Don't rebuild crate just because of changes to README.
+exclude = ["README.md"]
+
+[package.metadata.build-variant.image-layout]
+partition-plan = "unified"
+
+[package.metadata.build-variant.image-features]
+grub-set-private-var = true
+uefi-secure-boot = true
+xfs-data-partition = true
+systemd-networkd = true
+
+[package.metadata.build-variant]
+image-format = "vmdk"
+supported-arches = ["x86_64"]
+kernel-parameters = [
+    "console=tty1",
+    # Only reserve if there are at least 2GB
+    "crashkernel=2G-:256M",
+    "net.ifnames=0",
+    "netdog.default-interface=eth0:dhcp4,dhcp6?",
+    "quiet",
+]
+included-packages = [
+    # core
+    "release",
+    "kernel-6.1",
+    # k8s
+    "cni",
+    "cni-plugins",
+    "kubelet-1.31",
+    # vmware
+    "open-vm-tools",
+]
+
+[lib]
+path = "../variants.rs"
+
+[build-dependencies]
+settings-defaults = { path = "../../packages/settings-defaults" }
+settings-plugins = { path = "../../packages/settings-plugins" }
+settings-migrations = { path = "../../packages/settings-migrations" }
diff --git a/variants/vmware-k8s-1.31/template.ovf b/variants/vmware-k8s-1.31/template.ovf
new file mode 120000
index 00000000000..db70bac6f1b
--- /dev/null
+++ b/variants/vmware-k8s-1.31/template.ovf
@@ -0,0 +1 @@
+../shared/template-unified-secboot.ovf
\ No newline at end of file