# CNI Plugin

The Kedge CNI plugin is a Multus secondary network plugin that attaches a `net1` interface to pods requiring infrastructure access.

## Operation
- Invoked by Multus on pod ADD/DEL/CHECK
- Creates veth pair, moves one end into pod network namespace
- Programs routes for both overlay (WireGuard) and underlay (VLAN bridge) subnets
- Applies SVID-based network policy

## Configuration
Configured via Multus `NetworkAttachmentDefinition` — see `k8s/network-attachment.yaml`.