docs(byoc): document AWS VPC Lattice option for Kubernetes API private connection

[duanshiqiang]

Summary

BYOC on AWS now supports reaching the customer EKS API server privately via AWS VPC Lattice (reverse PrivateLink), in addition to the existing Tailscale-based private connection (ClickHouse/data-plane-application#33849). This updates the customer-facing docs to reflect that:

• docs/cloud/guides/infrastructure/01_deployment_options/byoc/05_configuration.md — the "Kubernetes API Private Connection" section now presents two private connection options: Tailscale (default) and AWS VPC Lattice. The existing anchor is preserved; two new sub-anchors are added. Customers are directed to contact ClickHouse Support to enable either option.
• docs/cloud/guides/infrastructure/01_deployment_options/byoc/08_reference/03_network_security.md — updated the control-plane connections table row for "Daily operations — Kubernetes API server" and the "Optional Private Endpoint Configuration" bullets to mention VPC Lattice as the AWS alternative to Tailscale, linking back to the configuration page.

Both changed files pass the repo markdownlint config (scripts/.markdownlint-cli2.yaml) with 0 errors. No URL/slug changes, so no redirects needed.

Checklist

• Delete items not relevant to your PR

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
clickhouse-docs	Ready	Preview, Comment	Jul 13, 2026 4:36am

4 Skipped Deployments

Project	Deployment	Actions	Updated (UTC)
clickhouse-docs-jp	Ignored		Jul 13, 2026 4:36am
clickhouse-docs-ko	Ignored	Preview	Jul 13, 2026 4:36am
clickhouse-docs-ru	Ignored	Preview	Jul 13, 2026 4:36am
clickhouse-docs-zh	Ignored	Preview	Jul 13, 2026 4:36am

[mintlify]

Docs PR opened: ClickHouse/ClickHouse#110214

Added AWS VPC Lattice as a second private connection option for the BYOC Kubernetes API server, alongside the existing Tailscale option.