--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-01T21:37:20Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"027efd7d-bf93-4be3-95b4-9e756aa9390f"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-01T21:37:20Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 027efd7d-bf93-4be3-95b4-9e756aa9390f resourceVersion: "2299" uid: c9e579c5-22c9-422c-971b-e16a27d19c77 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-01T21:37:20Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-11-01T21:37:20Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2297" uid: 3424fe54-ff7c-4050-b8e5-3c5f083a9545 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-01T21:37:20Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"027efd7d-bf93-4be3-95b4-9e756aa9390f"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-01T21:37:20Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 027efd7d-bf93-4be3-95b4-9e756aa9390f resourceVersion: "2296" uid: 30eb2d49-9d10-4416-9608-a4af1604b70f - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIEt1ehHdMbAUwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwMTIxMzUxNFoX DTM2MTAyOTIxMzUxNFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng7xRWG3+ZZ8 fokaEoP3go3mnleylzKVjKSQ/4ZsLlKHR0dedIJKIUu7XZM7qstLYWX8B+n3Uri0 QQb2FLynyeSKr6d7RH2aMln4wfNCqjDi1iq2xvfDBQNfrSLUx5tyM4txtPDijSXG WmWNLGhormfBXLp5Oe+6kGTqivblrUD6Xo1Dp0McmaReHvZxGU0otqx+ZrlbBn6G 48jC1JwRqFuWF3QOcgMdE+N9ZD1FP9qwKXRn3Y/gkTiwztnFAoDwdDKMYtnb1Ye6 Pa8yaawqLjjPqzRR/NwN8b4KG7S3e6vPrjGG+/qiPdSTaU+vJgQGBOy/J1uwkRtp butw4GFIgwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAp0RyBrtJYLvv7lD9qYX8mNf2HjrTIRl9E8lztIBif1oOatxN 0hWunH8IhGzVz+JD4BZhmz+v2jEfAdeSpPPOxzANBgkqhkiG9w0BAQsFAAOCAQEA cwG1fKXGoNjJYN0vVcPZW3i3Dp72r1xJ+gpjJQgZ8P5LP5LLEY74ri5OxjtuLKdQ rSW5DIWw2THdAUfZ3k/tdlG22I5RNmhEXHMoVml8xsMde5rLv+LLsk458sWbbypZ Ue2PGKlL/5r5UkZambmpuhsohQxhliLakm0p9xS5+w3OhhgASXwLZfaIVsvkCoc2 23dXwvgvD+W3o3SMeInMS1e7rXOrSh3CNiw+6aZBi0ZDzz7cZnnEIOhHIgb8fNzD h8Q8nJHJk95EE/+fgMlgd8TfdhBxCYwbhzSo97DllN1YJRUwKEBhxP2g6KyoDF4l j8H7sHUmzr3zn+xeChV5sA== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIFmGW68hrH2QwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwMTIxMzUzMFoX DTI3MTEwMTIxMzUzMFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALbjnsUyL27YeS5a5sSsq2ENp9FrZ6Se19tVJLnIKDhP693Z94NVg6BqoNifOPpV XPd3+65fCnibYUBZhYFWWtgR5GREPcQNpoWwEXGLWs7dcnWKA3FLSPfEfiQnN2GY QzVjbcfY2eXlij+ZUwO7HZW3zelZ7VEbOJqOY83SNLpjnpyxYFd/rjLQ8AVmF6qA ydAZLv0FHcKIjzI4wwbtkaemSKqCl1h2Yv9GCCNJVTXw+uKcICVSTQvOBhr5tFE9 1IR4CWqJGx15zlVFykbpSxgTNiof/a9iuZ/Lu8v5bdb4fRtlkHO3KWyK0OO3pyJ8 d+83HlWjwp/1/yCxXk42UdkCAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRALGJ6Aq4Wsc/+V6nGJ8xAp0MuNxXgnB02fGTHI6RmCQoZIbtkhz/zWGF3 CJ8b/xZ0re/6wqC9Tsg5uVh2cubTiDBLBgNVHSMERDBCgECnRHIGu0lgu+/uUP2p hfyY1/YeOtMhGX0TyXO0gGJ/Wg5q3E3SFa6cfwiEbNXP4kPgFmGbP6/aMR8B15Kk 887HMD4GA1UdEQQ3MDWCMyouYXBwcy5lNTY2NDY0ZmQ3ZDBmNGM3NTdmNS5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEACgGJYrAGl81b Qw7MPW83277gnWJ7u/l9eMepCSCR94QYmuw8lZWlXDP2gBchGkgil/AJeuMvKz1J LxlqhMm8G7/gGlUOIpAAc/pjpyqEpDW0LzqDzZCtBp59EwgyEKwNxl22kTf6d49I i3bNcG1WKDA8WbEY5sbMu4ZXRbU4tDkysZ78uaPMSuwkGU+HdiorTkaFfH6hKiXh /kp/UBGGe7NfMO4nrls90/qG91VwcISZzAQY+TbmzP3x5TBJqJMvNDDtBMu7MJGF CO1zEj/X8hSpzxxmGvturj9hOvBqvIaNUhGs45KgaD6u7/q+SgJKPAeeGjHWiZ8M bW9JvnkUEw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-11-01T21:37:32Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-11-01T21:37:32Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3321" uid: a7558df2-2ed9-4d1a-856a-d939ce4f56c6 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-11-01T21:37:21Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"027efd7d-bf93-4be3-95b4-9e756aa9390f"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-01T21:37:21Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 027efd7d-bf93-4be3-95b4-9e756aa9390f resourceVersion: "2304" uid: c885a8a3-8d90-4555-bf0f-96479a0ecd31 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIITUWpYX0UN/gwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzU2OTQ0MjAe Fw0yNjExMDEyMTQ0MDFaFw0yODEyMzAyMTQ0MDJaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM1Njk0NDIwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu9Y0ZhCBqI4nmpUgHoNOKQbV76UkFfd2G e/pslMnPCbZGSn1nyQ9Myokocp/jj43dWdqUOnshF5z0VVqXrPeOFeF9M7qk670z eJYXhd7G6O45rStCJ7MAo5i8MR369t4ot8z53OLu0K3RK1Las3TZLBqAjQz9db2W 4yAKATWafWDn6MYOE19leWBXWjljr8F/LyHo/I4dzVFW7XRs8Cw/yUOdbPn55qH+ 1Y4ZCg8wrFi3i5TbSJJi3mZ8yeW6hKkxkpBbu4a5iQvgNZON50m6W+rmI7J7mWzX qiINPZddy+Ats0GVDgLIM/7Y/qp65IVJ7b3xoDDBjcTtHkP1U/5fAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQtRFUS yOkeRmsZ1iswC3Xb0/ECczAfBgNVHSMEGDAWgBQtRFUSyOkeRmsZ1iswC3Xb0/EC czANBgkqhkiG9w0BAQsFAAOCAQEAgzQeJUWGljSusT2gZeyDKMKIsEq0ay75gY8u S9TqfCd6njz8fzsYActJWMsGFoMyqpYg7yIhJmE/a/0l9UnoQcK57FhN4+HdlxnB bd1JEmcY/mtUc0AYULonRwp4tPgwRZHpizcA5TZS+gsOy0KkhWxxvvFgGzM0yhWF Ltfsoyync5XN7RdSMPO3QrSkNZtYweQ3BUTa5DAWdiw+oVzPEyM/amgViB/ZCU2R qbQk2I3zZlsHefdSG9/ySeJ1iKHS7LJZ65sqeU/EWgvY/X82SFDG7gs1WPAPyzTd S+ehD+xk2A+8jhXfrcyR3l01m5Ptpyyl9dMKALOHjUMKFgG3Gw== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-11-01T21:50:13Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-11-01T21:50:13Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "17161" uid: 5f7dc8f4-34ab-46af-acdb-2e9f6c6318be - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIITUWpYX0UN/gwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzU2OTQ0MjAe Fw0yNjExMDEyMTQ0MDFaFw0yODEyMzAyMTQ0MDJaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM1Njk0NDIwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu9Y0ZhCBqI4nmpUgHoNOKQbV76UkFfd2G e/pslMnPCbZGSn1nyQ9Myokocp/jj43dWdqUOnshF5z0VVqXrPeOFeF9M7qk670z eJYXhd7G6O45rStCJ7MAo5i8MR369t4ot8z53OLu0K3RK1Las3TZLBqAjQz9db2W 4yAKATWafWDn6MYOE19leWBXWjljr8F/LyHo/I4dzVFW7XRs8Cw/yUOdbPn55qH+ 1Y4ZCg8wrFi3i5TbSJJi3mZ8yeW6hKkxkpBbu4a5iQvgNZON50m6W+rmI7J7mWzX qiINPZddy+Ats0GVDgLIM/7Y/qp65IVJ7b3xoDDBjcTtHkP1U/5fAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQtRFUS yOkeRmsZ1iswC3Xb0/ECczAfBgNVHSMEGDAWgBQtRFUSyOkeRmsZ1iswC3Xb0/EC czANBgkqhkiG9w0BAQsFAAOCAQEAgzQeJUWGljSusT2gZeyDKMKIsEq0ay75gY8u S9TqfCd6njz8fzsYActJWMsGFoMyqpYg7yIhJmE/a/0l9UnoQcK57FhN4+HdlxnB bd1JEmcY/mtUc0AYULonRwp4tPgwRZHpizcA5TZS+gsOy0KkhWxxvvFgGzM0yhWF Ltfsoyync5XN7RdSMPO3QrSkNZtYweQ3BUTa5DAWdiw+oVzPEyM/amgViB/ZCU2R qbQk2I3zZlsHefdSG9/ySeJ1iKHS7LJZ65sqeU/EWgvY/X82SFDG7gs1WPAPyzTd S+ehD+xk2A+8jhXfrcyR3l01m5Ptpyyl9dMKALOHjUMKFgG3Gw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-11-01T21:37:32Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-11-01T21:37:32Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-11-01T21:44:13Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7017" uid: 4b760434-a891-41b0-9908-12701d50cc93 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-11-01T21:37:20Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"027efd7d-bf93-4be3-95b4-9e756aa9390f"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-01T21:37:20Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 027efd7d-bf93-4be3-95b4-9e756aa9390f resourceVersion: "2302" uid: ce73f3f2-75d0-47b2-b45e-78c649621aef kind: ConfigMapList metadata: resourceVersion: "192290"