--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-19T04:10:14Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"44bd2ee4-387d-4923-bb86-404b4ae570cf"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-19T04:10:14Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 44bd2ee4-387d-4923-bb86-404b4ae570cf resourceVersion: "2338" uid: e7fe0b22-50bf-4a34-8e8f-a4e8a8cd2481 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-19T04:10:14Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-19T04:10:14Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2315" uid: a0c08e3a-98d6-46da-8589-e101d4cfdd40 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-19T04:10:14Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"44bd2ee4-387d-4923-bb86-404b4ae570cf"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-19T04:10:14Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 44bd2ee4-387d-4923-bb86-404b4ae570cf resourceVersion: "2314" uid: 1ac99d2a-2b4b-4d38-b707-88db9c7599a1 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIMIL6v3sYFNEwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxOTA0MDY0NloX DTM2MDkxNjA0MDY0NlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3e6fq/xnYU0 QtZ5CAUXYO7KfBNuNzMX3j4/VvG9Z5PRkzK9uZUNCDT6vbkL0O0fKtsCml5wCVL2 Y1JdmPbRBayla7pJFXj0iTiyr7NmmfgoQnH1PQ2I/wrTYHJKImynjcOy6CLRY5Cy JsS9imhdKypdrK7cjpRA0CLqZHtZYDpIGUbgxG+6MUJVa/jpJFVwwUS0w3IfdGJ4 iozvdtU4cand+iqOxNKKaK1vrFOiqN6+HoBY+7A3W5b0FYRC7aH4SfzrY71U6F+t xHlHaItIzDjRHZ/9ubXVbof3f6JZ2k8U7AQSHirlY2R6nld3OoH2MMuvRk5suDOE hRPfvChaswIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA4sglfOVvutm15BTIp1MLNbe0wTGriD+9eCxc7XdJNgnfkMB/ sNfpPgOhblT72p9SyU1J8fp4JYACKjaXyPTrDTANBgkqhkiG9w0BAQsFAAOCAQEA g+n51fmnokFW7fB4UUN2gL0eJGB1khZdh+4PXF7JQnOPkRh9IKOYkOCPvZkldaPn R/cGS3dODwJT4VaPvjsGKlioC2kmwvJ1np0FKHELgJ/Ydo7omWyDiNOhK7a1jJAB bgbvvoNF+fsrdkiandh8jjNZUQBCBY7+H4diYyKFa+o1GKswdS2ricwZAvPseKYM EautTGbDtjuyYQD0/4p61zRoHNxhQtjeW1dRq2BgAppr59SoeZlTReGr5+6zMVQB tNwg2p+Oty0EmK1ItZgXc1yeMpegZ0fWYsAIFk07RKdcxxOMJPBvk7m6YZaHYpRu LNFfj5HpaWUqbGjZfuZ5JA== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIKA60WOm4g8kwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxOTA0MDczOFoX DTI3MDkxOTA0MDczOFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMiQ7Sn3qw8ylB81CHIfQUIfWJSjAMtSUyrVFfe9JcEp727BrdED6ySkrVB8JeHl FGpYVo9WzzdhbOl37/JZ3wXA0fPfd9s87aFKRuAKHTIV1eh/d2+nJISzUIxUfj9i p6kjygB9vZQTPW4Qr3Arjgv12qkzop0k5n6nD24XoVTavkLCqLwvueDZ3/fusL6B 4EssLHmcvg+z/lIqx0RfDPR/h590AyhrFUwy28VqK8yOHwZ9vFLT0QWV4gX4YLYJ 67sFIq7uEp1BawIJdR9zO1Bl/g4640UELt40tDq3/7YsZvk5WgB/Mp6nb6ffLS96 S2AS4pYqvs/Mk2a/jpKz3GkCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRANKXtcIkge1Gw1+sUGMLMoFuTPq5i9nQHXMcxvw84IV0U5aui0Jnyz8OW oRmY3wmQYV+UnYO6Zwyyxc+n49l8aTBLBgNVHSMERDBCgEDiyCV85W+62bXkFMin Uws1t7TBMauIP714LFztd0k2Cd+QwH+w1+k+A6FuVPvan1LJTUnx+nglgAIqNpfI 9OsNMEsGA1UdEQREMEKCQCouYXBwcy4wY2QzYjcxYy0yYWQ0LTQwOGYtOWM2NC1h YzE0OThiYzFmNDUucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAA5RR+aaNWusp9Uy0Q8LXfFhNHnnfeX/q9Kn3BBJkHa14Gi+USYn/MtZjylt FNWSZP6Xkg4n7whkl43j/86o94RenVfZV+NeVWUq7rhwxFXqf/Y5+jUvUR5Ei5FO eM6W0x9lRXCkzjVvxgNQVHkSwck1KyLelHtpsM1sO3L2GT484zaxwV7EEE2hppe0 vtES2NAAt4ivJbVhtuEPjD2+xUGH0S9atUd9Z+IgpWUYPaHzkwWlBj7PITgh8KJR jjzDUpYwJOeERUCPyn4FiB66JSt3XeYqJIPhVbZHC/8LZ/6WYEDZXT0q1JbDIHLa o/VyUNKmal3DRA/UYUs1w8M6ITo= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-19T04:10:11Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-19T04:10:43Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3958" uid: e08ecbfa-b59e-4c20-8a5b-d6fafdc25ff9 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-19T04:10:15Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"44bd2ee4-387d-4923-bb86-404b4ae570cf"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-19T04:10:15Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 44bd2ee4-387d-4923-bb86-404b4ae570cf resourceVersion: "2365" uid: fd181c1b-d170-48cd-bf58-192b2fa145c0 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIeEST6m+mStowDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTc5MTM4OTAe Fw0yNjA5MTkwNDE2MjlaFw0yODExMTcwNDE2MzBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk3OTEzODkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPobZjhELCBY7JI/1SrzCWDeSNI2TbDpTB njOl3Hn25GkSiNYsSfU8Hzk6g6FFAQNkEr1Lj28xtecKOQvWMetYiJ2MCGRoVnKi J1wnRTiOcyzo+hJVnFmA0YTH4bXgfE75B1v1N4MjpvvPlKpizZ3GBtDvDBHXTM++ oOOm4MarSBLLQJS1MYWCvXQoI9wV3s70lzuAGD6HvAqpLfyI7pEz1mDXATCy3eag 6QUaLxpeDrtK19NfgkuD9FW/xcu882Qg39Ur3+KhhAKzTIAjpRES4JD15KFeB4Dd 1aLtcWTDj7yRFWFq6w1fWSG7Ukf133+gySxl2absmpAg4MYrSiRHAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTqSTyb SJxFSMEGUHkbOuh3p9QMfzAfBgNVHSMEGDAWgBTqSTybSJxFSMEGUHkbOuh3p9QM fzANBgkqhkiG9w0BAQsFAAOCAQEAPwkD6ZDeEnClIRKWzYLktzTZ5gIE/kez2l2z PKopfDtlSmxASC2YKpB8QMM5qngu5NYRck1DRyd2dkdK72JbLTpdA0eiOqXTJ+ej RGAQkn+rIykAGRyFRUvCcltD1Ce6AlB+0hyiprm7nDzFGxPJ+2oNONMfQCec7cL9 z2KC1T2B2Ttqqsgwom50r82m+0+Sz1HSIAAOYZ5LLqXSzaszcbnc2mHLDd1lJXF4 VXwUJ/H/G1O+k00S9R8qlR3FH0mDDdHtJyB3AdkzGgj0UhAMLzIAkWTM0k+xHSAL wHYsUsaYThOVsXehyW5neb6tU/GYzFUEB0DVdm6iOVg3L6FICg== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-19T04:22:16Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-19T04:22:16Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15012" uid: 3a5816b3-0a16-46f5-a8e0-f21c49ded1ef - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIeEST6m+mStowDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTc5MTM4OTAe Fw0yNjA5MTkwNDE2MjlaFw0yODExMTcwNDE2MzBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk3OTEzODkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPobZjhELCBY7JI/1SrzCWDeSNI2TbDpTB njOl3Hn25GkSiNYsSfU8Hzk6g6FFAQNkEr1Lj28xtecKOQvWMetYiJ2MCGRoVnKi J1wnRTiOcyzo+hJVnFmA0YTH4bXgfE75B1v1N4MjpvvPlKpizZ3GBtDvDBHXTM++ oOOm4MarSBLLQJS1MYWCvXQoI9wV3s70lzuAGD6HvAqpLfyI7pEz1mDXATCy3eag 6QUaLxpeDrtK19NfgkuD9FW/xcu882Qg39Ur3+KhhAKzTIAjpRES4JD15KFeB4Dd 1aLtcWTDj7yRFWFq6w1fWSG7Ukf133+gySxl2absmpAg4MYrSiRHAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTqSTyb SJxFSMEGUHkbOuh3p9QMfzAfBgNVHSMEGDAWgBTqSTybSJxFSMEGUHkbOuh3p9QM fzANBgkqhkiG9w0BAQsFAAOCAQEAPwkD6ZDeEnClIRKWzYLktzTZ5gIE/kez2l2z PKopfDtlSmxASC2YKpB8QMM5qngu5NYRck1DRyd2dkdK72JbLTpdA0eiOqXTJ+ej RGAQkn+rIykAGRyFRUvCcltD1Ce6AlB+0hyiprm7nDzFGxPJ+2oNONMfQCec7cL9 z2KC1T2B2Ttqqsgwom50r82m+0+Sz1HSIAAOYZ5LLqXSzaszcbnc2mHLDd1lJXF4 VXwUJ/H/G1O+k00S9R8qlR3FH0mDDdHtJyB3AdkzGgj0UhAMLzIAkWTM0k+xHSAL wHYsUsaYThOVsXehyW5neb6tU/GYzFUEB0DVdm6iOVg3L6FICg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-19T04:10:11Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-19T04:10:11Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-19T04:16:42Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8468" uid: efcf80ac-f6b3-4f0f-81df-afd3bbc71f03 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-19T04:10:14Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"44bd2ee4-387d-4923-bb86-404b4ae570cf"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-19T04:10:14Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 44bd2ee4-387d-4923-bb86-404b4ae570cf resourceVersion: "2363" uid: 9b00fcf6-e9e9-4638-934b-28ef16330d45 kind: ConfigMapList metadata: resourceVersion: "25400"