amazon-k8s-cni

dhi.io/amazon-k8s-cni

amazon-k8s-cni

CIS
FIPS
STIG
linux/amd64
linux/arm64

Networking plugin for pod networking in Kubernetes using Elastic Network Interfaces on AWS.

About amazon-vpc-cni-k8s

Networking plugin for pod networking in Kubernetes using Elastic Network Interfaces on AWS.

This plugin gives every pod a real VPC IP address by managing ENI attachment and IP allocation on each node, enabling pods to communicate directly within the VPC without any overlay network.

About Docker Hardened Images

Docker Hardened Images are built to meet the highest security and compliance standards. They provide a trusted foundation for containerized workloads by incorporating security best practices from the start.

Why use Docker Hardened Images?

These images are published with near-zero known CVEs, include signed provenance, and come with a complete Software Bill of Materials (SBOM) and VEX metadata. They're designed to secure your software supply chain while fitting seamlessly into existing Docker workflows.

Trademarks

Amazon Web Services, AWS, and Amazon EFS are trademarks or registered trademarks of Amazon.com, Inc. or its affiliates. All rights in the marks are reserved to Amazon.com, Inc. Any use by Docker is for referential purposes only and does not indicate sponsorship, endorsement, or affiliation.

Try DHI Enterprise

Start a free 30-day DHI Enterprise trial to mirror this image to your organization's registry and unlock full benefits.

SLA-backed CVE remediations

FIPS & STIG-compliant variants

Customizations at enterprise scale

Try DHI Enterprise
Security summary

Distribution:

debian 13

Packages

204

Vulnerabilities

0
0
1
1
1
View full security details
5 Tools included

aws-vpc-cni

Main image entrypoint that bootstraps the aws-node container and starts the Amazon VPC CNI components.

aws-cni

Binary invoked by kubelet on every pod creation and deletion to physically wire up or tear down a pod's network namespace.

aws-k8s-agent

IPAMD daemon that maintains a warm pool of pre-allocated VPC IP addresses by managing ENI attachment and IP assignment on the node.

grpc-health-probe

Binary used as a Kubernetes exec liveness/readiness probe.

egress-cni

CNI plugin that gives pods the ability to reach endpoints via SNAT.

More info

Recently pushed images

amazon-vpc-cni-k8s 1.x (fips)

Updated: 3 hours ago

amazon-vpc-cni-k8s 1.x (dev)

Updated: 3 hours ago

amazon-vpc-cni-k8s 1.x

Updated: 3 hours ago

View all
Got questions or feedback about this image?

Join GitHub Discussions or our Slack community to share ideas, ask questions, and connect with the team.

Go to discussionsJoin community