--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-15T18:44:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"3bbc656e-b1f3-402d-9911-19a44bd4abe2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T18:44:48Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 3bbc656e-b1f3-402d-9911-19a44bd4abe2 resourceVersion: "2685" uid: 1f3fa8fa-d221-4a3a-90d4-0771f4880010 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-15T18:44:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-15T18:44:48Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2676" uid: 22b13d3f-e750-46a1-a4c0-134f8b576c6d - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-15T18:44:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"3bbc656e-b1f3-402d-9911-19a44bd4abe2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T18:44:48Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 3bbc656e-b1f3-402d-9911-19a44bd4abe2 resourceVersion: "2675" uid: bbc0cd62-dba9-4e82-8eb5-b7fed7947140 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIAviXtesQsBYwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNTE4NDIyOVoX DTM2MDkxMjE4NDIyOVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VfW3lviaSP7 XN/B/eIhgFC9CICUysOGlNP6dif7CqhNcN0UWEl7RvqzgHWzJYWdG9rdyb8muhMr y9foKrKzxkHi+WjLa/vy3H4COUerhbew+R5/bZma4jJE/OvAsQFb0na2523CwEk3 a6JeZXHhO7naUOUjApk7QbQBFDfne19HasGDzxUvSFPLm7eGkQMPe3uOK5bIxOtX WLfd+CiUsI6Yj4Sptv1LSpxyPzCUoJwUtVjV/wWwtvX6fhkkRkstSvCyJ/WGWm9H Uvw35hWE1OpUN/6PZclpQ/tELdbVx2YjC6vPX8hoT0qGA0f/3k7yCWYBPZN173de ocHMXWogFwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAHEfRuq0PJLbHM3la/tfAAGfIgzIMAy94zKZW7bnWScLnXS4s Do9XvbGLtknFDdOup62BA2V4ar0S9GLvF7/mDjANBgkqhkiG9w0BAQsFAAOCAQEA iG2e1AeAf03Jv03rvV2CbgItRzMr52+sU8wcEPyX8VhJs2BWYyHq4i15/jJGG4q1 8StbhWWtNpEBYyZH2tFu1BHg1K/9jB3cFdLrcFGSyeWL1Z513p6rqoZC+yE+SMOC MY9Wen9bRX4c4ishMn5F0zL8pxs2/8ol/8TLIUBbakT3zZGiM0kisyNoGLSYXacH TzvZoIl/k03u6qQ4pKHuBquL/88OAex9TDbYPgdazybeXnsrogKL1y1F+DUh0OSZ oQU88gUDgNdCtDbJNQEx/RLD4Uy6PIVYFAyql6Ewyia86IAJls8kAs+JolV6gfjB MxC55xAHrw7BZMdvwGEIjA== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIPf4+c1STvT0wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNTE4NDI1NVoX DTI3MDkxNTE4NDI1NVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMaSe7Y2RYUUd0/11eztDDErgenC+zbBsJafNRqIaqKu1HkAAycU3FW5mA9g81Lc o0aVdWRPOOHr3aP7Oo8TQGmlMUmA2/dNLTRKliCMCXDpyyB13QEXVIMySgPf4dFU kXVmD/KfjhhZGop1oAAbI6ofY1JZpw3YuCJ+6GRqQwdttCwTejTDyb/P4c8v+XaN pMUw1d9ACZvj2ruFvk+i4fRbvi/QqHI+j1inv/0lp9HfzIEEIIMR4B33tRqL6c0n HOl02xvpLHG6AcREiwk71wnyecXEYi7I67mbga5LrSMe8XNiKh7ME4CNtq8tNMMP 3+s0wwPENvusRKLgGv5fai0CAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAlVwnjEYqbh6SD1fvKQPwnhqJIxJxj9RzAweG1fcCU1WiK44wqKVyl9Ap +tktKHv7gSleamyzCpny6iGB2ak6UTBLBgNVHSMERDBCgEAcR9G6rQ8ktsczeVr+ 18AAZ8iDMgwDL3jMplbtudZJwuddLiwOj1e9sYu2ScUN066nrYEDZXhqvRL0Yu8X v+YOMEsGA1UdEQREMEKCQCouYXBwcy44YzFlMDBiYS02MmU3LTRkNjItOWVmMS1m MzM5YjFkZTcyYzAucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAAyYkzYpWhxA2DgJ3lDitYhsWSWG/p8aUsvRdxyMaeX0n3DG4eqexCpHlX1Z qKiUTbFmrt6QSFx0580hMN1lYAG0FHqHPTRWTXFxvYw3D0dnzU+pV+ijPchxba/0 AQ4o/OiWEnnEv+Le7KJtue2CzjYwI9lw92LezTBOY0xRSdKxbdj+Xs6vtqzf9pXU Kqa4lU8ajsn2HdWFaOtYNr7Gy6PJwQnlkZXoHvfdPFL/xzI7h4TZMdXG+7+ak4es JV/xb2yAnSWiuVc8KMbWytBA7kE8Sueuya38JK/MNZ/YwYOPRxtxNMsXwO/mD/98 gQoNKf7NHIz6/JVDgtc6mqYFKI4= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-15T18:44:45Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-15T18:45:41Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4459" uid: f44d2fda-2f4a-40d2-a46f-22919368e5ba - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-15T18:44:49Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"3bbc656e-b1f3-402d-9911-19a44bd4abe2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T18:44:49Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 3bbc656e-b1f3-402d-9911-19a44bd4abe2 resourceVersion: "2705" uid: 84003ea2-9676-498b-a4e4-d541b58febf0 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIDqQ8DxjE5U8wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTQ5ODI3ODAe Fw0yNjA5MTUxODUxMTdaFw0yODExMTMxODUxMThaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk0OTgyNzgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRmtUbJ+Hs5JBi7ArgkpBZa+ZMCOzG95JC E4z3gIZhN3SlOf7TJyrallZVFicu/yR7uMU6oTn4yySqCCiqBNxmDuw9SG06S79P 4g0SBU4x0EnuFvRVKx36ZyATJMwE4rCxh1xjjQq8uSlmk14wtsWR6+A4QsHrCqRj 9SoqYGSkm9rz8zSSsGf7z5wIyDQt6KKf1H1n1FgO4Qag3NAsDMhJCQzQQExwDv5j MMhARHg/ljhpDr0ZXvXHThiORH3eEW8+XrcRFDTXQyj6UBSDWJs6/ez+H3fV3Z5p 3RwUdx4jgh8nw0cjUDt26M3ucjSE0l6tISQTKOXl3o4PvKFrPVUjAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRW1Mj1 l1hb7Kr83gK5poMvKYL46zAfBgNVHSMEGDAWgBRW1Mj1l1hb7Kr83gK5poMvKYL4 6zANBgkqhkiG9w0BAQsFAAOCAQEAaqUDL1swVuF4ELR6vq1axA7cLC65uX92k+hA jfp8Kbf94iR0xYdeTGZSbowd4ZELaEnhhcb2109wbyI7bfEMZg+8rshdKBasp0Dv StcSdfN3JxF+bdZnqtuKpTrzURGKn7FgCbjMAlz4DYWNKhQRtOPxx+kNO3cafbyW 1cZgetVBcfPpRad9wx8S28eKm6h4YUnZWEnRsdX9bscO0sirZTvLvNjopQAdpbJ5 /0whD+Sdzy92gyG63FA+6v45iXS8ikmt7fak038+T92Fr6q+HRSnD5EfwZz82mrK lhofx2JwJQpgBgY462MWzR3D54VAuI5ByLoRPqCE5Jlks0GYCQ== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-15T18:57:22Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-15T18:57:22Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15707" uid: 382aaa72-cae5-40d8-8dbf-eeb125af26d6 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIDqQ8DxjE5U8wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTQ5ODI3ODAe Fw0yNjA5MTUxODUxMTdaFw0yODExMTMxODUxMThaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk0OTgyNzgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRmtUbJ+Hs5JBi7ArgkpBZa+ZMCOzG95JC E4z3gIZhN3SlOf7TJyrallZVFicu/yR7uMU6oTn4yySqCCiqBNxmDuw9SG06S79P 4g0SBU4x0EnuFvRVKx36ZyATJMwE4rCxh1xjjQq8uSlmk14wtsWR6+A4QsHrCqRj 9SoqYGSkm9rz8zSSsGf7z5wIyDQt6KKf1H1n1FgO4Qag3NAsDMhJCQzQQExwDv5j MMhARHg/ljhpDr0ZXvXHThiORH3eEW8+XrcRFDTXQyj6UBSDWJs6/ez+H3fV3Z5p 3RwUdx4jgh8nw0cjUDt26M3ucjSE0l6tISQTKOXl3o4PvKFrPVUjAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRW1Mj1 l1hb7Kr83gK5poMvKYL46zAfBgNVHSMEGDAWgBRW1Mj1l1hb7Kr83gK5poMvKYL4 6zANBgkqhkiG9w0BAQsFAAOCAQEAaqUDL1swVuF4ELR6vq1axA7cLC65uX92k+hA jfp8Kbf94iR0xYdeTGZSbowd4ZELaEnhhcb2109wbyI7bfEMZg+8rshdKBasp0Dv StcSdfN3JxF+bdZnqtuKpTrzURGKn7FgCbjMAlz4DYWNKhQRtOPxx+kNO3cafbyW 1cZgetVBcfPpRad9wx8S28eKm6h4YUnZWEnRsdX9bscO0sirZTvLvNjopQAdpbJ5 /0whD+Sdzy92gyG63FA+6v45iXS8ikmt7fak038+T92Fr6q+HRSnD5EfwZz82mrK lhofx2JwJQpgBgY462MWzR3D54VAuI5ByLoRPqCE5Jlks0GYCQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-15T18:44:45Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-15T18:44:45Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-15T18:51:33Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8054" uid: 979ce294-e57a-455e-99d2-cd6f01fb001a - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-15T18:44:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"3bbc656e-b1f3-402d-9911-19a44bd4abe2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T18:44:48Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 3bbc656e-b1f3-402d-9911-19a44bd4abe2 resourceVersion: "2690" uid: dd291894-f3b8-4864-b30f-1ff37a26cb66 kind: ConfigMapList metadata: resourceVersion: "66305"