--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T15:31:58Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"f81ba1b7-e5cf-4c0f-928c-22a63d8b6828"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T15:31:58Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: f81ba1b7-e5cf-4c0f-928c-22a63d8b6828 resourceVersion: "3136" uid: 70b69536-480d-4770-ba9d-056bd724d442 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T15:31:58Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-10-30T15:31:58Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "3134" uid: 6ae3dcc9-0b84-4551-b357-526d236c79e5 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T15:31:58Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"f81ba1b7-e5cf-4c0f-928c-22a63d8b6828"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T15:31:58Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: f81ba1b7-e5cf-4c0f-928c-22a63d8b6828 resourceVersion: "3133" uid: f41160b8-e94b-4bd8-97b8-e80febd18c3c - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIf7E70Rk7U7wwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDE1MjkxMVoX DTM2MTAyNzE1MjkxMVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzMgyEQoiKSu rJkD7HivesdWEVOWPiG5fK7EQ1V2xvB2bYlhIvECokE219KyvQWIDouqsoT9xmg1 6F+rkrYaY2EbsQoUwJ77CwXUgZeypCEpAc78qgV84Rhc1uW5SLoNrEHVboRuLG26 y5QvLZOJleRFMHxmIatEHxtgOokdRzNMipZFqhaVph2C/YaItzaIJ2SFhRVP267M +vRhPJXWVzLU6lrGBlh24/M2QGfHYUHak0awcOIZ+imKmkGag2UbOO1p3flKKFrB ttIjZDDg7a+n+OIPPqcdNyPJ5gbpbgMxk5uZoQ8JaBNofDm1z9FKErgUCwmLpX+B At+6EKIObwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRARn8F8pkthdHOqvpoEH+4/tjIAAFAAaBazIiawLPKbmG4Cyze H2Jh6gc3MJSTlWTJx6zowWucIZ+zKmrZhlkJfDANBgkqhkiG9w0BAQsFAAOCAQEA SSnvgwLVXAfoqAf1RepC375ws4gDJxUEXddYZu9ClHiRvIWPs35fAiqYF7Ab+O8z ypRDEuh52XRBKwrYmEp/cL9A7oxW112jW/HUVrBIrhE+lkojvGuyhUJZXuGZ+s0T 688/WLVUJxKogb32blLOfo5/S4jGdwh231M6tCwWuRjkgJcgWQD7HZKcI/qM9GFD CPI1rdUELYF2poDHUdqR8kzPyW2SpftqdwhDExpgeJtKZ/hINfDaXZET45B1gt+Y ZnvlDSrF9IPiVcBokkeAs9yjPdcaheoyVNiIS/V6/tFfN5OKQZF6jvvJ4qwl4BRk XdziWB0EU22OgObRlh8+Mw== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIVOAHGRTKqIowDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDE1MjkyOFoX DTI3MTAzMDE1MjkyOFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMsNkm4xRG3KtgLFNcX2Yj2HgSRjlYvdrUs9ryQOYkcsbFRdh65hkHk4GcT13KCR bje7vf98+CK8w9QmUBb4TQEmiwpuhXqSIhIeW18tjoKl5yayIMmsyaydkLsbaABq j+n4+MitYQ2kq0dY4m3G5od6xi606qXK2orf5uqThHorpjTiepjc5zfIm7H35n9j kuY/r2g3UO5vl3mr2NJraeZhis6DodPTPEw1INt4o6ahowhPVYcBM7OkIX4YizFy ANJc7B3d+nyqgt6C4qhjebpE7pzxOyk9tsMyN92QbL5/FubvwOyFx/miT6vYZWlD /sIuKIXmCnbc++Q0iidHiSECAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAd8/iiRLJmIqI3gPyN6aEzT4yUjvdq3w2Irzs9m/HjB4VjJvWyfEkDWw3 6HYOiPEmBWcbRfAPS+hqmXwfZCCxPDBLBgNVHSMERDBCgEBGfwXymS2F0c6q+mgQ f7j+2MgAAUABoFrMiJrAs8puYbgLLN4fYmHqBzcwlJOVZMnHrOjBa5whn7MqatmG WQl8MD4GA1UdEQQ3MDWCMyouYXBwcy43MmViZDkwNTlmZTZmODQ5YjA1Zi5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAeiNCtzs9g5/b U04nbL+ICefG5vzQxyLw9EGSMT1lST8i42dO4s5v6l7nD/m7BR5B8FdNh7qqtSuA iuhHsTdK+evhLvF9wUTlBs2frZMM/V6JVOE/v45i4+kwibloZp9AYRstLEyP0djg yDTrBV3SGyPbPc7RCEwImFdDz1AGZVyS0hkVSUGYPVEmKxQD9valLRmaCalFGcnD C5MkzSuiV3/DIARP+GVOIKuHcv/od1JagK5LSQ23X3aPAWs1KadyCU+zz07+zjzC 62Ls3fY6qGf35KpJp0qZmzKUSKfnBgTVMWDBayygDtAbgNmjcvn1T58YL+HTjtos YdT16ctj6A== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-10-30T15:32:10Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-10-30T15:32:10Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3331" uid: be238ef2-89e5-4464-9838-a8c57245185b - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-10-30T15:31:59Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"f81ba1b7-e5cf-4c0f-928c-22a63d8b6828"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T15:31:59Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: f81ba1b7-e5cf-4c0f-928c-22a63d8b6828 resourceVersion: "3140" uid: f724cdb7-1689-4434-837f-178d28862646 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIV45JDbNk91QwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzM3NDY3OTAe Fw0yNjEwMzAxNTM3NThaFw0yODEyMjgxNTM3NTlaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTMzNzQ2NzkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCttT3NgThCzm6/fYxBJyfA6bxkKHBf80/w teb3g03i4jEBPAeVtQGE7cdnHAF5XgP3Tv6wWKGlPgI3RlLj57aDW2JlI8SghmW0 1MHuM9ZWbMg0IGhSKJ9vtgvVYlhTXkM0Jd63gSKhvc18XohyQb4Cc3+crHwBP69l kkSS6ayXsxv/Rby3cOF534ynEOOSrexjNOSZwpLNt6HpQcrfDppvlpgWl4JX8mUX 4ss2k/1Czf3EfCrMODSenD9ksF18XJYrI9d9TCJAWZzAEF6ISI/wB48c8605EwUV 6uksDMyTf49Ez6GGb38GzdlP0KBKqhf3iXcsLfvZ0zYlnIlzUviJAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQb2wdM YE1MVqemTKWuQW87HGqgRjAfBgNVHSMEGDAWgBQb2wdMYE1MVqemTKWuQW87HGqg RjANBgkqhkiG9w0BAQsFAAOCAQEAhAIJHjSe68M8tDsCq/HFnKGOAmVenV/7l7hc yeYcQDXU/Yn2xuihZiQsmiSf7ntu791tI0wl/ZCrKBFetw5Ea2xJa02mBgUyE0qv RNGJQekzt48nHEN+dcE2vudgzLzoEHDp8aDpfX4r6EbDLj53sWozzb42TDuTOpaZ syHp6hWkMzENIjbdp9ZsQsf3YqVRjYnhipzXSebmDp61/Ifes+lSrTkjUz8Vy0kY hsY3N5hzNZIfSG1GvnSEiQArzQNdIw5XEE0yHlxrT7p0MIofUBEOzgTCsQH0q5Gz GIC6A+w59lKSA9UhLPzde6Yn2QcMWCSpbR/f6grLLpx5RE6/sw== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-10-30T15:44:44Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-10-30T15:44:44Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "13224" uid: 8f242d34-75fc-497b-a69f-4f98c1d27bb2 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIV45JDbNk91QwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzM3NDY3OTAe Fw0yNjEwMzAxNTM3NThaFw0yODEyMjgxNTM3NTlaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTMzNzQ2NzkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCttT3NgThCzm6/fYxBJyfA6bxkKHBf80/w teb3g03i4jEBPAeVtQGE7cdnHAF5XgP3Tv6wWKGlPgI3RlLj57aDW2JlI8SghmW0 1MHuM9ZWbMg0IGhSKJ9vtgvVYlhTXkM0Jd63gSKhvc18XohyQb4Cc3+crHwBP69l kkSS6ayXsxv/Rby3cOF534ynEOOSrexjNOSZwpLNt6HpQcrfDppvlpgWl4JX8mUX 4ss2k/1Czf3EfCrMODSenD9ksF18XJYrI9d9TCJAWZzAEF6ISI/wB48c8605EwUV 6uksDMyTf49Ez6GGb38GzdlP0KBKqhf3iXcsLfvZ0zYlnIlzUviJAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQb2wdM YE1MVqemTKWuQW87HGqgRjAfBgNVHSMEGDAWgBQb2wdMYE1MVqemTKWuQW87HGqg RjANBgkqhkiG9w0BAQsFAAOCAQEAhAIJHjSe68M8tDsCq/HFnKGOAmVenV/7l7hc yeYcQDXU/Yn2xuihZiQsmiSf7ntu791tI0wl/ZCrKBFetw5Ea2xJa02mBgUyE0qv RNGJQekzt48nHEN+dcE2vudgzLzoEHDp8aDpfX4r6EbDLj53sWozzb42TDuTOpaZ syHp6hWkMzENIjbdp9ZsQsf3YqVRjYnhipzXSebmDp61/Ifes+lSrTkjUz8Vy0kY hsY3N5hzNZIfSG1GvnSEiQArzQNdIw5XEE0yHlxrT7p0MIofUBEOzgTCsQH0q5Gz GIC6A+w59lKSA9UhLPzde6Yn2QcMWCSpbR/f6grLLpx5RE6/sw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-10-30T15:32:10Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-10-30T15:32:10Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-10-30T15:38:12Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7075" uid: c2087bff-d486-41b8-8251-9c2a28ba89a2 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-10-30T15:31:58Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"f81ba1b7-e5cf-4c0f-928c-22a63d8b6828"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T15:31:58Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: f81ba1b7-e5cf-4c0f-928c-22a63d8b6828 resourceVersion: "3137" uid: 47b4b4e3-87f6-40b6-951c-c780e889dc39 kind: ConfigMapList metadata: resourceVersion: "65562"