--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-18T21:01:52Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"b0fc01e2-a999-486c-82ee-47d7435536fa"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T21:01:52Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: b0fc01e2-a999-486c-82ee-47d7435536fa resourceVersion: "3159" uid: 32e99a8a-348e-4cb3-bb86-c379fe654598 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-18T21:01:52Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-18T21:01:52Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "3140" uid: 3632d0d6-8bf3-42d5-9b90-178ed4d8bac7 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-18T21:01:52Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"b0fc01e2-a999-486c-82ee-47d7435536fa"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T21:01:52Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: b0fc01e2-a999-486c-82ee-47d7435536fa resourceVersion: "3134" uid: 691e0330-1d63-4d10-9e10-97bc584f7391 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIFbysoxS0VkcwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxODIwNTczNFoX DTM2MDkxNTIwNTczNFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8rabOJCbndTU LvdM0nkHN4p2i68t7ewY5UIsqkKDQRi0di7I6Lupn8H/U5UDvc5Fuhre9/A+lj3t 47jt7DZCf254N8VAM77mIKi/0ZT4LMNBTe9ardZbQfWEVHS13TW8xC0zK+s6yyYB JFoBE/XMDgR0uRw1vhwVRWNNhMVwBNXME3YIx56ORwYe9a3I2v9u3N8ffGbFfL32 72ThsJo9ty2ZofH4q3kP34K/9sqZUZvRC1aMUsRi8m1S8+xVMIsD/VxIWSgSDSI0 fEHzL7wzMl3RgAYzLI9jErEF6TqOIqSIcWUUsjQkFVQH8ldtB5Afv45rFIMYE992 zQCI36ZuxQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAbo2sd+ZvSiIk9VDw8awduzbPvTVzXhVcASkKatOGg6jIat10 jnzvNFhBthsdBsmycqZQbdV9WOS56+yWi57LHDANBgkqhkiG9w0BAQsFAAOCAQEA X+4hbBqA8rpVfUcMrlrndm+NiHIX9iwT92MBuc0EjaXIAEMUnRMq8f5iM8WZGgt+ 7ZT/QaeUJZUFQQKJrxUH3USzjs1IGWkREcO6MXY3B8A3MBMBX+AE5gtvxbgjnBM1 rMQLxALP+FvZencJKc1CQ52thp9OGxDKukygcyFN2SoKJbJ/C9kN9+l9m+upDwYB AldsVt+QXVnZA25N83sewghdrjGDp80JCbnq+E3EQ3SjsS6GWvQKCCCv+/dWGmRl r6GdwQcqA+ZmxBIGFCmIOziaIIzJZ1BJhqYl29xYbox6iB/bWBCyIvGzYpeTcYIG TgWVrX4xWeDb0TgY2Fj43A== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIZ/vXJZQojTgwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxODIwNTgyNFoX DTI3MDkxODIwNTgyNFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANGaRlNAds/CYf6a5zG5OCxlwvzCuLI75uESPGTzq9Iwf/9HvmcaKpQvUeNv9nvA hBuI/sSUqb4k3hTWXyJCpE2hEGWrUOXpubVxEu4VY6UFf04teUXVjz29jAOi/tbR +vwU8mBdlpGfr3sRnivT+cXrDt6NkRwWd9vARwaJIRwA4A2Hxv5DZCC6nQmpuCSA G6O1DIF10aLE39sOIbXdVs5fPXiiqvBWAb/+1vBZ8zELS9ozrowuZIivTVqPDz4w mgWkJWgKEpA5h4f2tMMZRK6VIMN3Cb38Pq64a/Ocdc2bM9GKXkk0ifj85ZNWaeak cEvTF1wAhLu/OwB985htNVECAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAWwJbzFU3C5AI9sQyDB7nI0Ox3gkEdywFjr4uHT9JRG46oCoU4hqhpcST HOzkg+7D77YOIBixcHsC0qmhFcMloTBLBgNVHSMERDBCgEBujax35m9KIiT1UPDx rB27Ns+9NXNeFVwBKQpq04aDqMhq3XSOfO80WEG2Gx0GybJyplBt1X1Y5Lnr7JaL nsscMEsGA1UdEQREMEKCQCouYXBwcy5iOTI2ZTBkNy05MTJmLTRkZjktOTQzZi0z YzBmNTFlOTJjMTMucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAJAIVjQNf/V3vmPdPMDqt5NZ1mFIrbuMIhs0qOpgSam02qXWpPdjYnk4S0k0 elCgzfb5Qmc3JmMCgDuqw8fAQtKlVysa888X+zEPSg8/w7aW5NI3D0KHkUtOyeQo 2/jIG1f5NVMIt8BpuUymzwVK3F5hfXPg5o87Y5V1WoxiewPlOcn8Rdlst60+4Fn6 irFH43RCCQ/p3DGKqXhXepkezmmUiErNHuuu8LVFe2Z+k0GrQ7rmgelOz5vJbLnV V31n+WxbmPMXDCir90aJFHKW6rqGHOF4w2L5VHyjwEslqi1ZIOlWYQqsCftc/IlF E+T99kShCUgMCzuxwpcL07EVYWI= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-18T21:02:10Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-18T21:02:10Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4242" uid: c355a81e-0492-4b22-a6bb-1e33ba4a3f59 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-18T21:01:52Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"b0fc01e2-a999-486c-82ee-47d7435536fa"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T21:01:52Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: b0fc01e2-a999-486c-82ee-47d7435536fa resourceVersion: "3203" uid: d6910577-f915-4d38-a2e2-83e5376fb5ee - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIVtqcmrNfgL4wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTc2NTY2MjAe Fw0yNjA5MTgyMTA3NDFaFw0yODExMTYyMTA3NDJaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk3NjU2NjIwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+gPXnnKAi4heVSY/AmGePm1dwjJ9vmaS /uoY7BM5BJh+nHqeBjeZthv4uzxP0JsS1Vq1k9QcGNZKG4Jlw+3BzM+TJflYLP41 CvmklSP4cSnLSqe7vuE2vClPf+GKTzZZgKISV4jskfJhKmZefgZk/aXxw6lWXDug Poq+1F6uIwCeNmDNWZNo8mycUIcL30VGLeUEU+4jD2orQNnXQnUzq5L+hLICJRVa CfzXS2HkpSfuEpRDGtGd6Yjz7u/9vZJGXOwj1Ch6NMrF1/WYEHC0d4nkHk5LsV/t liEW9FTqdyrfrJCLRVh7CvgYRAx5YLWVirF8l+Skx4UKU1/CiIG7AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSKaKFL k/LtP+DWvgrpU1MJKkN7iDAfBgNVHSMEGDAWgBSKaKFLk/LtP+DWvgrpU1MJKkN7 iDANBgkqhkiG9w0BAQsFAAOCAQEAHIY/nwwGW1EccuAJDWYM6hTtijntxg/Ck7H8 oIrDTnXzMGhB/wUJIJb+AfCeKE4rtEq413X29z6+comDfzwtIx4FImuv3jDGCnXD y4Ev4Z39i2dwpJ3dRrUDi3hgDPjRjG9rs+g5CduK+7wWDF4lqdm5RV6JS2gtCP+m Z6x7svlwEJisf2BAT+HkJ+7uqMHg08dNQQmb9URivEeE2RiurDmDLs3KRFBUDqvr 7HrIsX5q9aPltXJcNPyf49/3nbm2MQowZaF05x64BeOC0aPY8HkF94ehvRvAOZxR wyiHpaLy0tyugLm85Bxq/xNIvdDlq1ts+wTVZAvSE4KbzEAtJA== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-18T21:13:21Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-18T21:13:21Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14913" uid: 7fd1f27c-d754-49d0-a2b3-ac65f9398949 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIVtqcmrNfgL4wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTc2NTY2MjAe Fw0yNjA5MTgyMTA3NDFaFw0yODExMTYyMTA3NDJaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk3NjU2NjIwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+gPXnnKAi4heVSY/AmGePm1dwjJ9vmaS /uoY7BM5BJh+nHqeBjeZthv4uzxP0JsS1Vq1k9QcGNZKG4Jlw+3BzM+TJflYLP41 CvmklSP4cSnLSqe7vuE2vClPf+GKTzZZgKISV4jskfJhKmZefgZk/aXxw6lWXDug Poq+1F6uIwCeNmDNWZNo8mycUIcL30VGLeUEU+4jD2orQNnXQnUzq5L+hLICJRVa CfzXS2HkpSfuEpRDGtGd6Yjz7u/9vZJGXOwj1Ch6NMrF1/WYEHC0d4nkHk5LsV/t liEW9FTqdyrfrJCLRVh7CvgYRAx5YLWVirF8l+Skx4UKU1/CiIG7AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSKaKFL k/LtP+DWvgrpU1MJKkN7iDAfBgNVHSMEGDAWgBSKaKFLk/LtP+DWvgrpU1MJKkN7 iDANBgkqhkiG9w0BAQsFAAOCAQEAHIY/nwwGW1EccuAJDWYM6hTtijntxg/Ck7H8 oIrDTnXzMGhB/wUJIJb+AfCeKE4rtEq413X29z6+comDfzwtIx4FImuv3jDGCnXD y4Ev4Z39i2dwpJ3dRrUDi3hgDPjRjG9rs+g5CduK+7wWDF4lqdm5RV6JS2gtCP+m Z6x7svlwEJisf2BAT+HkJ+7uqMHg08dNQQmb9URivEeE2RiurDmDLs3KRFBUDqvr 7HrIsX5q9aPltXJcNPyf49/3nbm2MQowZaF05x64BeOC0aPY8HkF94ehvRvAOZxR wyiHpaLy0tyugLm85Bxq/xNIvdDlq1ts+wTVZAvSE4KbzEAtJA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-18T21:02:09Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-18T21:02:09Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-18T21:07:54Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8318" uid: eded1fd5-107c-4250-b435-1be480e9f0d6 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-18T21:01:52Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"b0fc01e2-a999-486c-82ee-47d7435536fa"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T21:01:52Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: b0fc01e2-a999-486c-82ee-47d7435536fa resourceVersion: "3181" uid: 456e9ff9-6c2d-47b8-ba72-75cbd4e04aa4 kind: ConfigMapList metadata: resourceVersion: "29652"