--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T14:02:15Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"5ce78210-441e-4d19-bbce-e0a1236a0152"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T14:02:15Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 5ce78210-441e-4d19-bbce-e0a1236a0152 resourceVersion: "2312" uid: c85ccc5e-d7bf-4099-8990-9e29ee19ad2c - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T14:02:14Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-16T14:02:14Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2303" uid: b8efff4c-9152-4ff2-9f65-91fca167d904 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T14:02:14Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"5ce78210-441e-4d19-bbce-e0a1236a0152"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T14:02:14Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 5ce78210-441e-4d19-bbce-e0a1236a0152 resourceVersion: "2302" uid: 9b121816-35ec-4aa6-9004-0d953d726483 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIXp0351NeQMswDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjEzNTkyMVoX DTM2MDkxMzEzNTkyMVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzsCFQgNXkGb feHjnY1+1diD4IvY2CXnJPdkh7rcy/0fQEvQbZr9obrln9hlQj4FNiuMYFtcccjW +LkYtLZ0/Tinbd4QxHuC76jYEMjNThRfv2EXpElLNdUNSpRgZNMbiieCoBPuO3zZ Qn+AEx3TdNWqrnAgKnEy1KGpl8tvfpoAMCDP8J6FLhPkLs0+Gj1RY9HSPp509Xeu CNLcfEHDITTwnMR2uDUB5wiI/t3w6q+u0ervx9ccYvOsQot6IjNvR9LCYi4HYieJ 7mKtmBF2IwVsK+7TjpiD0tZDfT64YyI+z95sp3PbZlquSNy6cruOda1bkhoLralP 3HcHgu6tNwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAhmLgFFXZ8Xp7O7NIgG0YmzCV6/NqVwF70JYNewOo3/D3ZFJ6 NXfFiM/6eilmtBzfrvZ2Y9lwZaJYOfXBWsMqXzANBgkqhkiG9w0BAQsFAAOCAQEA nKtzgLI62js+o1PibRyi1tdgHkyKRNMV0I0phYVtk0LreHCcL68Yku+MjTiUX0t9 enotPGojrojyxitYYNdQwaLfXAmENZ0nT6Xas/NoeNg8vNZS6dIuFNUmg7AkeShe 1GP6v4qopsMJKd0fA37lnUnk6Kn7/vF2HUqM49tqaqZZbZgKOOQR+InQspnq6Auc 4CZEJmvjUI4MPI/Egh8yd3a0VYAFYOhKbqFsHiL2z99AqYL3KXTpDapPiSRA9rDI Xe2svjWdp1uEV2HJ3PmjxOawhMN98hHYBT6M1wyykcZ5yk4enWdPxs5r8x5+8kJz 0xOrCI8sZ3z8HL00ueJ1WQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIINAmBDjE0Z3UwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjE0MDAwMloX DTI3MDkxNjE0MDAwMlowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AL+aM3hg8UXIdj83AMcvK4uYlGpiTNxLUxqgB5bOda2JbWG+o3QB/ONKz2CIFrJn k3QDaLnhru/n8chSPuTuh/o9JZTYB7y0CcXmzH+TS3uBiIE5kdNGzQy8cVM3d/lP ichJofMiHoW1+v9acDaZDnWgPP61U6vbbbOVtxH6LshHDt9/WtsMAOZVNT8g2IBA eNcROmwlJ0HbtjzC9PsiQaYv29ygYgyPfNfZpXO4WzQQEXgpcV3MKFP/eLpVEgCX d74fKhz+IarncudAfYa/CHF9zEBoWZha6rxmxYh8ssUqmM8KwJJw3zDM9QI/dou9 OR58pqDO3cqkIcD3jYT7UQ8CAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAw7aA+0kJRUMn+K7sQkZOXWPPsiPvUdqbWFEOSEXmYwYJFeaboTmNmVpF rwwwxADnoi3uRsK5lAAA3JK1WWeRpzBLBgNVHSMERDBCgECGYuAUVdnxens7s0iA bRibMJXr82pXAXvQlg17A6jf8PdkUno1d8WIz/p6KWa0HN+u9nZj2XBlolg59cFa wypfMEsGA1UdEQREMEKCQCouYXBwcy41ZmNhNTkxMS1hYjVkLTRhNmItYjVjZS00 YjgyZWFhNzFlY2IucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBACXbfzJfF0S8yQACtTygs187Jg7osm0pSbhUhVTYjPIWrpC2uVTsAE+H40gV wXLJq7F5I084ps9ffRyvf03KyZ3a1/R6FN1c1nLk6HHmcYaRn1LXpZ7QyVcFipat qID7VhCubWdIE1cymEbUwbnCPwXpzHddbzNVU3nK4rAqN2PI4HJ2bsNywrXHRppf Zd+zIJ1GBRo3w45Vre1KD8Sa5XMfFsUMPVdT3XqkD823vaEDnVdJ0rp1Fs1FiPll xjr1v6ziTjIax5q8RkVqXhGrf60yjrKaafzLSHRU33TFeGxTGIhJB8/dn7Phzy4w Aus49gHiEZPbd56lMI+RVAK2NrA= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-16T14:02:12Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-16T14:02:46Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3855" uid: cdd11731-589c-4cef-abf2-68c4f8c3ead4 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T14:02:15Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"5ce78210-441e-4d19-bbce-e0a1236a0152"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T14:02:15Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 5ce78210-441e-4d19-bbce-e0a1236a0152 resourceVersion: "2323" uid: 529d35f5-4cc2-4946-9a17-b888e8d84d4d - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIISAqFPlJekdEwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTU2NzcxODAe Fw0yNjA5MTYxNDA4MzdaFw0yODExMTQxNDA4MzhaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1Njc3MTgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh54ICa6Wa9LbXW0GzOtHcYUnd2DSPqIsh Am6rX5SlwUzzmsNdhEs97HQ68cJK994spqnwDCVtke7bxhGL4+tuiKIrzczCxedV cMTu6kf1C0TYjajEHZCvX8YmOVRDWmn46jpOuRo92l/4M7PfAsym3sktvSTEyjEJ kHk1SRuMn5E5CN9pR4799Bh4G7H255Zg+3jgtA7jHc4Iw85olxVTruHqFcoGbdi5 IwGsW23W84YFpKl+lQRDumj3iOIR6yYoSyqFfthIPDckqjZGRobKL/gzKA9fuG7a /dF4Jr07ZSUlD8wImIuPPY/hyLSHumaeHBFbFPQrZU1GnxhmmndLAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTX8dvQ QyyOU3iSc0v3Y4bC10PCPjAfBgNVHSMEGDAWgBTX8dvQQyyOU3iSc0v3Y4bC10PC PjANBgkqhkiG9w0BAQsFAAOCAQEAHozTTORgde90MP0m6R30sBv3g7+3V27epdMh VtHJQ8rh8d366EET4qGCGxoLGOeMHlbPxJvL3xkdZsauO5P6bP5u9QA03l4KfJ0d VUPWKayUrmIa4Rfih8wiSclFosJXDBjqgkDTfT1j8YHfnYJQrfw7+OSTHv9L9nVG 9418R4Z60fdQx+CEiqGB7f8KkVnAYWyN8gZpTsgr6wGr/f4Oeyqio4eWkhAN83UH UR2TxoObNuBYvcKWFXlehRncUa+KCDGrxKasWljtl1mId5bDKyVZPOH6aSypnc9k nDpYw6kKCMwGuPfWHO3mEOD6BHqeAU3SpGE4vcCPOA40G7UGAA== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-16T14:14:34Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-16T14:14:34Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15511" uid: 8e1947e0-de1e-4634-951b-a9721650e2e2 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIISAqFPlJekdEwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTU2NzcxODAe Fw0yNjA5MTYxNDA4MzdaFw0yODExMTQxNDA4MzhaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1Njc3MTgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh54ICa6Wa9LbXW0GzOtHcYUnd2DSPqIsh Am6rX5SlwUzzmsNdhEs97HQ68cJK994spqnwDCVtke7bxhGL4+tuiKIrzczCxedV cMTu6kf1C0TYjajEHZCvX8YmOVRDWmn46jpOuRo92l/4M7PfAsym3sktvSTEyjEJ kHk1SRuMn5E5CN9pR4799Bh4G7H255Zg+3jgtA7jHc4Iw85olxVTruHqFcoGbdi5 IwGsW23W84YFpKl+lQRDumj3iOIR6yYoSyqFfthIPDckqjZGRobKL/gzKA9fuG7a /dF4Jr07ZSUlD8wImIuPPY/hyLSHumaeHBFbFPQrZU1GnxhmmndLAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTX8dvQ QyyOU3iSc0v3Y4bC10PCPjAfBgNVHSMEGDAWgBTX8dvQQyyOU3iSc0v3Y4bC10PC PjANBgkqhkiG9w0BAQsFAAOCAQEAHozTTORgde90MP0m6R30sBv3g7+3V27epdMh VtHJQ8rh8d366EET4qGCGxoLGOeMHlbPxJvL3xkdZsauO5P6bP5u9QA03l4KfJ0d VUPWKayUrmIa4Rfih8wiSclFosJXDBjqgkDTfT1j8YHfnYJQrfw7+OSTHv9L9nVG 9418R4Z60fdQx+CEiqGB7f8KkVnAYWyN8gZpTsgr6wGr/f4Oeyqio4eWkhAN83UH UR2TxoObNuBYvcKWFXlehRncUa+KCDGrxKasWljtl1mId5bDKyVZPOH6aSypnc9k nDpYw6kKCMwGuPfWHO3mEOD6BHqeAU3SpGE4vcCPOA40G7UGAA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-16T14:02:12Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-16T14:02:12Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-16T14:08:53Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8294" uid: 757cd118-36f2-47b1-b0c9-f781c5905763 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T14:02:15Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"5ce78210-441e-4d19-bbce-e0a1236a0152"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T14:02:15Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 5ce78210-441e-4d19-bbce-e0a1236a0152 resourceVersion: "2321" uid: 55ceffff-19d4-498c-862b-7ee67f9eac7b kind: ConfigMapList metadata: resourceVersion: "65411"