--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T20:13:11Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"9eb72f12-8353-4714-8462-68b44e339a72"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T20:13:11Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 9eb72f12-8353-4714-8462-68b44e339a72 resourceVersion: "2389" uid: f89fc32d-6135-48b9-96a1-a4c02db8e9bf - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T20:13:11Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-10-30T20:13:11Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2382" uid: 2b5a7e1b-df70-4f20-a6e2-648de17ffbce - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T20:13:11Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"9eb72f12-8353-4714-8462-68b44e339a72"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T20:13:11Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 9eb72f12-8353-4714-8462-68b44e339a72 resourceVersion: "2381" uid: f46999fe-a18e-4c61-bc54-fb801269d755 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIISyc36vY3rIkwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDIwMTEyMVoX DTM2MTAyNzIwMTEyMVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/ON0t5khPte kU8vk5BU9eW0/M9U3tEdD3DWt5OfaSCpkT1zp7onpvrzbfoTsx1YUxKYROsZsB0M 0j+edj0gzWfpNt7/qPyZdy60uj0Os6jzrz4ttaqScVYKetukoANmWyJnvlDmvt+a lJGXd1F6x+Xmq3n7N6+uXiK3v/5U4DowZS1XYzAW9KuhK2LDbTqPgdOA4R2f1gmh 3mhDp+Hlsn5XziYWo/4kcX3SpHXYAhqzxRdiHSTn/OR8iSoWRiKQa/L3o/Q00KVs Ze1Hxgqq9MCqGGXcNiF67mb132R3X9xEZ+MttTv+a3cJz0qI+2/tx5y2/drEiIYa uo9e9NUPuwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAVodd5xQ+15Q0urp1HrSW8a+OFC+jPe+vsEvqhW7RxptPn99f F09O1zUHNjnh/IXijQXUr9QpFJMFIsOqCTTADzANBgkqhkiG9w0BAQsFAAOCAQEA OGOiP1B7IKTvikNM7ofR/LidHshaSh2nIZ+1+gDUTncn+enawbSKLdWZvojMcFau 7wzBHkjO4Z8DhVoxacPA6S4jWJHqI0I8UgT7tLWXLfcfSqN/yipzETio1HJ5SCYB +glgxMCgHwBmztrhGi40WevV1KbcVgBRi58heIXl4AZPy9EkdYT00CDZ8W2PENV/ U+d7WptUEFZ+r9WR6+UnWuH0R9crelxzGLLp487lgfYw58XVREnz2EVnJUf6lRfG REYXzoZPeo0OW30HwMNuUBPBWfNcKZ1Wmh/bc7LyBpCJNeQzmX7aD8pOFMC/9sAz uxnN632u2VcJynAHZH3q9g== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIAQuyodyAp7swDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDIwMTEyN1oX DTI3MTAzMDIwMTEyN1owMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMZK4dyvZspkqSa4zeDjtIY/hzqaFgW/oa7AtZbC+RDe/hbxX0DCiqTNsDJMUlvH 04xhStyMxextvz+rNIBaV/Dkw34hELcUcvMMCS6vSIef3FiYv5ophbgC41n6AaCF sXnB9tnKE9h4Pcw50IJY2i+beSI/4BS1c11BBZkAidGxQfALzmwZQZoUH5K4/ZNh MdXUjZW3tSL1PtI1OW8AFWGbJcCJJ6RcYDvJ6MzclliHmPIQ51bg2CjWQ1EVVzuT z0s6Urr1GCs/9Ji10ZMn630VG+BmmYi2LxjsnxpK5IMS7HR9+IUGOuj7f+TsAMAv 1quXGFWyU0nu+kp1UE6Mf60CAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAZxyWEUFBhm703CyoHzTRSenOz04noz8jvXpczvuppArg5RNJhQn1mcf/ DHUplXHVK+WRb9mB+3c/2TxMYtWZeTBLBgNVHSMERDBCgEBWh13nFD7XlDS6unUe tJbxr44UL6M976+wS+qFbtHGm0+f318XT07XNQc2OeH8heKNBdSv1CkUkwUiw6oJ NMAPMD4GA1UdEQQ3MDWCMyouYXBwcy45NjZmMWU3NzgyMGFmY2U3ZDgyNi5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAdp+y4P/HUDqi sMy2Hr9x6RZWpneowvKft4yNZA3J3tv5v3CesM7h5dN0AOZvjoJ6+24od8YB+dBm PN75gpeqFaSRR6YjucdbcB9Mu/nLIfaGJjX43YB5K167bDdTCf3+zIOhgyy9jZj6 GTRbF2eR2ZhNrJbkLgRgiQThVQ0zZFcsf6Ox/03uPiFKRcN1m73stIzI2Ea61IjL SASgbUsCY6kXT4mE9lFg4dvkJXWOCm47zDDRyj/LlK5H4f0Eif14O/Bstl8rZ5g6 HRw8TA1if3ehA3wByfqCQQGNGmXdcaBqQzt6QRkQiCbviiWFN3lAWPNBrV3PiObf F1Mi3qqbRg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-10-30T20:13:22Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-10-30T20:13:22Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3524" uid: 618d61da-66ed-4eab-8ad7-7a27e22eb357 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-10-30T20:13:11Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"9eb72f12-8353-4714-8462-68b44e339a72"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T20:13:11Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 9eb72f12-8353-4714-8462-68b44e339a72 resourceVersion: "2392" uid: 838eae0d-c859-4709-bec1-3da4930d55e0 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIfyFWeTrTz7owDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzM5MTU3MTAe Fw0yNjEwMzAyMDE5MzBaFw0yODEyMjgyMDE5MzFaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTMzOTE1NzEwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnuFGPkZ1rXajYB/9D8qxxNss3X0i7q8hg niCx9GM33whvWmNGMvMMxxd2wWtazXYz9tmyUkN8Hfg3qoC8pMAXdudJ4pgWuqcP pHbowqf6M72P4Jmx1NcRfdc9W162yvDIWOqJoQNl8YPHFDRGxtd3HPuSUlWURsHJ moBehjfnnMaMcClM/NVg1EIbZdXiqwAnnscfBUAbIH/Psve4bO2VHv55SBy4jmwr bFsyTqnHjA1sC2tZZkxRCuJxC+W76BHYw6MG4U8nZbCWxXi1q881K/TBXnfxqzuf bb41vdJ6x7YQcUgOfktvUIY6so3JDxM4A6NB8YuVW2CXxTjv3HEhAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQh9+Bo FLB8zqA8WNoCX5d+Zlx6pzAfBgNVHSMEGDAWgBQh9+BoFLB8zqA8WNoCX5d+Zlx6 pzANBgkqhkiG9w0BAQsFAAOCAQEAocCj1B4OyBDkgaA2Gni1xID7cpmLPImmAfqK IfiPR2554eT2fUCba9y4habybd7IKI3hjpb1eYLVNd4SH6o+eJ2JN6O2O4gtlSCr MhPA5x6EA08dLB/ztxtVf3Wp+mRsJyMwEd3fCDVuEXbErCt67ZYy2xGXC5wK27nr dOXe3iB/DwM0W8JERsvURUaX/BxSiPOVLN1BAPAm9dh+6DxtCbW8VzbPQ3qRANGv eYYtCrLdNhPR10TtJYsV40MFQD1ldudEeJUFZrznj8vS1LeWwmxw+Bw05WdxBNdO URfEbpsytTj9wXkPZnep4gq/7UWijnQd1smXdZposJEGVgUWvw== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-10-30T20:27:05Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-10-30T20:27:05Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "17711" uid: 50184e87-d3d3-4f74-b818-e3ee729d79bd - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIfyFWeTrTz7owDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzM5MTU3MTAe Fw0yNjEwMzAyMDE5MzBaFw0yODEyMjgyMDE5MzFaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTMzOTE1NzEwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnuFGPkZ1rXajYB/9D8qxxNss3X0i7q8hg niCx9GM33whvWmNGMvMMxxd2wWtazXYz9tmyUkN8Hfg3qoC8pMAXdudJ4pgWuqcP pHbowqf6M72P4Jmx1NcRfdc9W162yvDIWOqJoQNl8YPHFDRGxtd3HPuSUlWURsHJ moBehjfnnMaMcClM/NVg1EIbZdXiqwAnnscfBUAbIH/Psve4bO2VHv55SBy4jmwr bFsyTqnHjA1sC2tZZkxRCuJxC+W76BHYw6MG4U8nZbCWxXi1q881K/TBXnfxqzuf bb41vdJ6x7YQcUgOfktvUIY6so3JDxM4A6NB8YuVW2CXxTjv3HEhAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQh9+Bo FLB8zqA8WNoCX5d+Zlx6pzAfBgNVHSMEGDAWgBQh9+BoFLB8zqA8WNoCX5d+Zlx6 pzANBgkqhkiG9w0BAQsFAAOCAQEAocCj1B4OyBDkgaA2Gni1xID7cpmLPImmAfqK IfiPR2554eT2fUCba9y4habybd7IKI3hjpb1eYLVNd4SH6o+eJ2JN6O2O4gtlSCr MhPA5x6EA08dLB/ztxtVf3Wp+mRsJyMwEd3fCDVuEXbErCt67ZYy2xGXC5wK27nr dOXe3iB/DwM0W8JERsvURUaX/BxSiPOVLN1BAPAm9dh+6DxtCbW8VzbPQ3qRANGv eYYtCrLdNhPR10TtJYsV40MFQD1ldudEeJUFZrznj8vS1LeWwmxw+Bw05WdxBNdO URfEbpsytTj9wXkPZnep4gq/7UWijnQd1smXdZposJEGVgUWvw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-10-30T20:13:22Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-10-30T20:13:22Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-10-30T20:19:47Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "6971" uid: c78707d5-18a2-4512-9df2-784d94440c8c - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-10-30T20:13:11Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"9eb72f12-8353-4714-8462-68b44e339a72"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T20:13:11Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 9eb72f12-8353-4714-8462-68b44e339a72 resourceVersion: "2391" uid: 8e3ea7c1-1fce-42f1-b861-844fa73efdc3 kind: ConfigMapList metadata: resourceVersion: "110828"