--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-04T02:25:45Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"68e345f4-6dbb-4f8e-910c-bd4c926ea002"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-04T02:25:45Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 68e345f4-6dbb-4f8e-910c-bd4c926ea002 resourceVersion: "2402" uid: 47dcf6d0-1957-4bc3-919c-dd20dd722944 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-04T02:25:44Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-11-04T02:25:44Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2397" uid: cf674b85-ccbc-43f1-b1ca-842a0b781fca - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-04T02:25:44Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"68e345f4-6dbb-4f8e-910c-bd4c926ea002"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-04T02:25:44Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 68e345f4-6dbb-4f8e-910c-bd4c926ea002 resourceVersion: "2396" uid: b5854ca3-21ed-4562-9a90-7ede2ca71f27 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIXEQegYTggPAwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwNDAyMjMxN1oX DTM2MTEwMTAyMjMxN1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvu1YiezAwQo gaxBfcL5SBgupkOHEie6+KecNwiL/1roNZO9LXeZN0KnLxiXdr5G2XHxEc13h3+9 lw4lptxHckiPwCNv8dZaFPrhnikOMirfoT2XrmkAh6zJ75PwEVj75wdtA2EDzN7J tI0GIX0fvbf9G/s34QYJzSb9gwiTaS0h59bj1z38SHB64ed1gRogqwb/8U4zL1Nk zSRYK3vvF2aralExdUL7awGEBtNP/eUJukFpdimPQxRqGL2i6goGGkwuT/7Y7gnq ht0iifYudTWD1I4qC4rK6pa+oZ6wgnj7E2FzxhN8nwCiI3xbYr0NYEa4DvBoIa7P LqzO8472EQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAkD8NKFTa7ql+sCHfiHZp5vUPpht5YVmQnIwp2AXR23a8S/WL 1ufxoxzwGEhLf7gZT/lo+lEXWIX6McnEFfRFYzANBgkqhkiG9w0BAQsFAAOCAQEA I1cuan9ZJNb/k91xpR5gbnXfpUFzWTu+FZPr44s2PHIQBX1exUCw0qAURokQuNEg GGIr7TGBmDO5lzBiFHuMSaHb9U0JmodqthlNJe7K6If9VjVOBhK35sqGTfM1ODdx NATNQ+Q+InVnqeyFwHjAu6ekIOXky8paFBRHD24nfLjxBN8mVVQVeqndB/My0YV6 nbj/gFfVKHys2RL2PZRdkkjMqRUpnGapvY3Xygr6BNQNTxRHWnlhlpaHpXS5MeCw fDYYqkr5RIWx6kIaODS0Bv8hBR7Qa6J5O/0wImWROlEKlCLBc5sGcbTBG2qs4mYu nkVQlofk5umqUcI65+1a7g== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIBz4NdV1InCUwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwNDAyMjMzNFoX DTI3MTEwNDAyMjMzNFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AM9wwwVimKokDvJIcEMXNRneewRk1Kb/GQzwPCS4emlDupihiBOEa7wcFNYa0CL3 hrBhIDUS39pE3kGQSBJBE//CP+bR9lgPANwsOX9u0qfV6TkIRGYNDA4WiUonuRUo chB5SuUHdDIOZK2DFXxfqMrT/2DcRBLTi6KIvwIk8OX6QbtHpxF+n6jByx/LqhrY r1xVkDmyngbyRViyaw8uLoS9uLjtdwpK703bUNMwq19cXiaJhgrKbuzuDsnznXzD A/3434Gx7DoAoQB0HcGx8w3sGWoU5FCrcnger6vG8xwLDwH/wp10YEMQA2yDWsFG s9v9FH8s0taMuUScbwkPbV0CAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAM7hlJgQLL1OgsoOOYWQl3Sm/qlapcH6SkbSKPQ+fcyQsDqqdKPNOKAg8 UnU5+9V4QHBT+THBCbuK0tkD99vMIzBLBgNVHSMERDBCgECQPw0oVNruqX6wId+I dmnm9Q+mG3lhWZCcjCnYBdHbdrxL9YvW5/GjHPAYSEt/uBlP+Wj6URdYhfoxycQV 9EVjMD4GA1UdEQQ3MDWCMyouYXBwcy40OWIyNWJkOWQ5MTI3OTQyZmQ5OS5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAJFZaIoKrL3SJ GMKw02IwfnzJs7BmSWVJqkLFe7gAKhL/QBVzNfAwdlvQLpitm4/dBRsKA6q3Ot9N p2NfcIG+0EUXROEoq2zlH6+zundI6enBRrHOq5Q3VizsEF+KybnVe5PDnPGlD/2V T+rDqOT/ui+carAYDdubKWAdYyh4dANw/QMFTsU5TYFPlRHT79FUXpECoZLvriFy oCjoxn0bT3gW6p2H0K7mc7KXaNfDdPfmzIikCnFlW9LaIziJQUettEeuJDhphEg9 HqsickqaIONr4oPIu58bbeVnvIk59ZbxQkHamLWB7BD2U/jClI8ZKMxlvV8e0nJr SKy7HMGHMw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-11-04T02:25:52Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-11-04T02:25:52Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2530" uid: 472b06c8-6021-4c7b-b18f-fbe8ceca0ac2 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-11-04T02:25:45Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"68e345f4-6dbb-4f8e-910c-bd4c926ea002"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-04T02:25:45Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 68e345f4-6dbb-4f8e-910c-bd4c926ea002 resourceVersion: "2407" uid: 0464eb41-59d5-49fc-a1e4-8a7e6f4bd251 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIfDIvZTQniMQwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5Mzc1OTU2NzAe Fw0yNjExMDQwMjMyNDdaFw0yOTAxMDIwMjMyNDhaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM3NTk1NjcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwSEJ7kQs783LV12A92Yg3k98RCRNoyj1o hJCRVbj08cTRJRrOy+oNHYJVGHWfpz5lu8VWGw2kWhI53fId2lLpbboSYb9gZpUm IjpnJXmyFaISOuqXQXtIQEIhhsxVDRINnFzMOaoiTb31+dgGhqNzxRA9oLuXhLV2 hGWK5HGvrXpt7OgJJXoT+I3Ina8DKqsYPABsF8hjeneCbJzGUBD5ceWu5RdTchy7 LGWMBAmYsA9m7zyqUwouuzHH/s9aZTn8emMJupgn0ZnNffHy+1Y/1Yp4infjc8uB KuCBns6AD+nWviZZetF1UikDd5Qt8rUUx7iDCKG72ZJBSVpAobeDAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS5fYEE je9BuNvVXVTjNvk4YFC9wjAfBgNVHSMEGDAWgBS5fYEEje9BuNvVXVTjNvk4YFC9 wjANBgkqhkiG9w0BAQsFAAOCAQEApiIkQVpShRg1l/yj9hC6tL9Ik0/Zu6Crchvu yNIRL3gMhM/7et/CfXzBnLDKltO2GFjAKORnNU4QYzP0MlYTaAtzSJN3TvNKifol LICkb+4J2zRxg7UZLDut8s38ZqNrZp2MGYTkDts3HawuiHG3Qanq1DBgDCMrgqsg wGo2pmzXaeOVok+fD6lMyHzqJJESwp1uIWklKYQpl+67YPOTQVvn/ZZCd7klIsyO tN5opweYb2Z9Sz0eUQQLyBV7VzhJXrAVePNQMgTIsAN00hb1/odnW5sghLGJV/6b gWKjZAU/Ft8NhUIHmRe6U8Y2H5e1mz9byo6i71SHjdHmUV1uHg== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-11-04T02:40:18Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-11-04T02:40:18Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "17730" uid: 0f22552f-e820-4249-a1ed-e814de3cbacc - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIfDIvZTQniMQwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5Mzc1OTU2NzAe Fw0yNjExMDQwMjMyNDdaFw0yOTAxMDIwMjMyNDhaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM3NTk1NjcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwSEJ7kQs783LV12A92Yg3k98RCRNoyj1o hJCRVbj08cTRJRrOy+oNHYJVGHWfpz5lu8VWGw2kWhI53fId2lLpbboSYb9gZpUm IjpnJXmyFaISOuqXQXtIQEIhhsxVDRINnFzMOaoiTb31+dgGhqNzxRA9oLuXhLV2 hGWK5HGvrXpt7OgJJXoT+I3Ina8DKqsYPABsF8hjeneCbJzGUBD5ceWu5RdTchy7 LGWMBAmYsA9m7zyqUwouuzHH/s9aZTn8emMJupgn0ZnNffHy+1Y/1Yp4infjc8uB KuCBns6AD+nWviZZetF1UikDd5Qt8rUUx7iDCKG72ZJBSVpAobeDAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS5fYEE je9BuNvVXVTjNvk4YFC9wjAfBgNVHSMEGDAWgBS5fYEEje9BuNvVXVTjNvk4YFC9 wjANBgkqhkiG9w0BAQsFAAOCAQEApiIkQVpShRg1l/yj9hC6tL9Ik0/Zu6Crchvu yNIRL3gMhM/7et/CfXzBnLDKltO2GFjAKORnNU4QYzP0MlYTaAtzSJN3TvNKifol LICkb+4J2zRxg7UZLDut8s38ZqNrZp2MGYTkDts3HawuiHG3Qanq1DBgDCMrgqsg wGo2pmzXaeOVok+fD6lMyHzqJJESwp1uIWklKYQpl+67YPOTQVvn/ZZCd7klIsyO tN5opweYb2Z9Sz0eUQQLyBV7VzhJXrAVePNQMgTIsAN00hb1/odnW5sghLGJV/6b gWKjZAU/Ft8NhUIHmRe6U8Y2H5e1mz9byo6i71SHjdHmUV1uHg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-11-04T02:25:52Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-11-04T02:25:52Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-11-04T02:32:54Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "6990" uid: c31a8be5-69e9-48a4-88d3-9eec93cf3100 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-11-04T02:25:45Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"68e345f4-6dbb-4f8e-910c-bd4c926ea002"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-04T02:25:45Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 68e345f4-6dbb-4f8e-910c-bd4c926ea002 resourceVersion: "2405" uid: cc9abbdb-71d6-4b1d-986f-9a6ce48d1ef3 kind: ConfigMapList metadata: resourceVersion: "108265"