VPC CNI plugin
E699342
The VPC CNI plugin is a Kubernetes networking component for Amazon EKS that lets pods receive IP addresses directly from an Amazon VPC, enabling native VPC networking and security integration.
All labels observed (4)
| Label | Occurrences |
|---|---|
| Amazon VPC CNI | 1 |
| Amazon VPC CNI for Kubernetes | 1 |
| Amazon VPC CNI plugin | 1 |
| VPC CNI plugin canonical | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T7939990 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: VPC CNI plugin Context triple: [Amazon Elastic Kubernetes Service, supportsFeature, VPC CNI plugin]
-
A.
Amazon VPC
Amazon VPC is a networking service that lets users provision logically isolated, customizable virtual networks within the AWS cloud to securely run and control their resources.
-
B.
VPC Service Controls
VPC Service Controls is a Google Cloud security feature that creates a virtual security perimeter around services and data to reduce the risk of data exfiltration.
-
C.
Oracle Virtual Cloud Network
Oracle Virtual Cloud Network is a customizable, software-defined private network in Oracle Cloud Infrastructure that enables secure, isolated, and scalable connectivity for cloud resources.
-
D.
VMware NSX
VMware NSX is a network virtualization and security platform that enables software-defined networking, micro-segmentation, and automated network provisioning in virtualized and cloud environments.
-
E.
VPC Flow Logs
VPC Flow Logs is an AWS feature that captures detailed information about IP traffic going to and from network interfaces in a Virtual Private Cloud for monitoring, troubleshooting, and security analysis.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: VPC CNI plugin Target entity description: The VPC CNI plugin is a Kubernetes networking component for Amazon EKS that lets pods receive IP addresses directly from an Amazon VPC, enabling native VPC networking and security integration.
-
A.
Amazon VPC
Amazon VPC is a networking service that lets users provision logically isolated, customizable virtual networks within the AWS cloud to securely run and control their resources.
-
B.
VPC Service Controls
VPC Service Controls is a Google Cloud security feature that creates a virtual security perimeter around services and data to reduce the risk of data exfiltration.
-
C.
Oracle Virtual Cloud Network
Oracle Virtual Cloud Network is a customizable, software-defined private network in Oracle Cloud Infrastructure that enables secure, isolated, and scalable connectivity for cloud resources.
-
D.
VMware NSX
VMware NSX is a network virtualization and security platform that enables software-defined networking, micro-segmentation, and automated network provisioning in virtualized and cloud environments.
-
E.
VPC Flow Logs
VPC Flow Logs is an AWS feature that captures detailed information about IP traffic going to and from network interfaces in a Virtual Private Cloud for monitoring, troubleshooting, and security analysis.
- F. None of above. chosen
Statements (49)
| Predicate | Object |
|---|---|
| instanceOf |
Amazon EKS component
ⓘ
Container Network Interface plugin ⓘ Kubernetes networking plugin ⓘ |
| allocatesIPFrom | Amazon VPC subnets ⓘ |
| alsoKnownAs |
Amazon VPC CNI for Kubernetes
ⓘ
linked to:
VPC CNI plugin
Amazon VPC CNI plugin ⓘ
linked to:
VPC CNI plugin
|
| benefit |
allows use of VPC security groups for pod traffic control
ⓘ
avoids overlay network encapsulation for pod traffic ⓘ provides native VPC-level observability and monitoring ⓘ simplifies network connectivity between pods and VPC resources ⓘ |
| category |
Kubernetes CNI plugin
ⓘ
cloud-native networking ⓘ |
| configuredBy | Kubernetes DaemonSet ⓘ |
| deploymentModel | installed automatically in new Amazon EKS clusters by default ⓘ |
| developedBy | Amazon Web Services ⓘ |
| documentationURL | https://docs.aws.amazon.com/eks/latest/userguide/pod-networking.html ⓘ |
| enables |
native VPC networking for Kubernetes pods
ⓘ
native integration with Amazon VPC security features ⓘ pods receiving IP addresses directly from Amazon VPC ⓘ |
| implementsStandard | CNI specification ⓘ |
| integratesWith |
Amazon VPC network ACLs
ⓘ
linked to:
Amazon VPC
Amazon VPC routing ⓘ
linked to:
Amazon VPC
Amazon VPC security groups ⓘ
linked to:
Amazon VPC
Elastic Network Interfaces ⓘ |
| license | Apache License 2.0 ⓘ |
| maintainedBy | AWS open source community and AWS engineers ⓘ |
| networkModel | pods are addressable within the VPC CIDR ⓘ |
| primaryFunction |
assign IP addresses to Kubernetes pods
ⓘ
provide pod networking for Amazon EKS ⓘ |
| programmingLanguage | Go ⓘ |
| relatedTo |
Amazon EC2 Elastic Network Interfaces
ⓘ
linked to:
Amazon EC2
Amazon EKS security groups for pods ⓘ Amazon VPC ⓘ |
| requires |
Amazon EC2 worker nodes in a VPC
ⓘ
IAM permissions for managing ENIs and IP addresses ⓘ |
| runsAs | pod on each worker node ⓘ |
| scope | node-level CNI plugin for EKS worker nodes ⓘ |
| sourceRepository | https://github.com/aws/amazon-vpc-cni-k8s ⓘ |
| supportsEnvironment |
AWS GovCloud regions
ⓘ
AWS Outposts (with EKS support) ⓘ
linked to:
AWS Outposts
AWS public regions ⓘ |
| supportsFeature |
IP address allocation from multiple subnets
ⓘ
custom networking mode ⓘ prefix delegation for IP addresses ⓘ secondary IP addresses on ENIs ⓘ |
| supportsPlatform | Kubernetes ⓘ |
| usedFor |
connecting EKS pods to other VPC resources
ⓘ
enforcing network security policies via VPC security groups ⓘ |
| usedIn | Amazon Elastic Kubernetes Service ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: VPC CNI plugin Description of subject: The VPC CNI plugin is a Kubernetes networking component for Amazon EKS that lets pods receive IP addresses directly from an Amazon VPC, enabling native VPC networking and security integration.
Referenced by (4)
Full triples — surface form annotated when it differs from this entity's canonical label.
linked to: VPC CNI plugin
linked to: VPC CNI plugin
linked to: VPC CNI plugin