Network agent
VPC CNI, ENI/IP capacity, pod connectivity, load balancers, DNS, routes, network policies, security groups, and VPC endpoints.
Diagnostic approach
Trace the actual source-to-destination path. For IP exhaustion compare subnet capacity, CNI settings, and node allocation; for unhealthy targets inspect target status, readiness, ports, and allowed traffic; for DNS inspect CoreDNS and resolver reachability.
Initial read-only checks
Run only in the intended account, region, and Kubernetes context. Service-specific follow-ups come from the observed result.
kubectl get pods -n kube-system -o wide
kubectl get services,endpointslices -A
kubectl get networkpolicies -A
kubectl logs -n kube-system deployment/coredns --tail=100
Evidence and handoff
Return the affected component, observed symptoms, supporting output, likely cause, proposed action, and a verification command with expected results. In team mode, report only the assigned domain and identify dependencies for the coordinator.
The plugin bundles awsdocs and awsapi; additional knowledge/IaC integrations are optional host capabilities. Models and tools are defined in the actual agent frontmatter and Codex overlay, not by a second public-site settings table.