--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T18:34:03Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"6e9a877d-0178-4921-bf84-2432f9a98a39"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T18:34:03Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 6e9a877d-0178-4921-bf84-2432f9a98a39 resourceVersion: "3252" uid: 061953ed-91be-4ef5-a114-ba7fbc8c0030 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T18:34:03Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-10-30T18:34:03Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "3229" uid: acb792f3-c18d-4058-aed9-b364c2e5c854 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T18:34:03Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"6e9a877d-0178-4921-bf84-2432f9a98a39"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T18:34:03Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 6e9a877d-0178-4921-bf84-2432f9a98a39 resourceVersion: "3227" uid: 76dec2d4-ac43-4148-95f3-527787c256fb - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIVbUy5hWDwEMwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDE4MzE1OVoX DTM2MTAyNzE4MzE1OVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XAPzgDVCMuq RRyt1kT5hZN1oIP9re2EQ4u/h2keNiU68IKOmrbOawBG9gl/3i65MnEKIV2J+CV3 H2vRiDjhrCRU8qrIenMJI71p2sRtA5/FaEczdC9AdjFcef9vp8pq5capQen3NA70 ITr7AncVjrcSP/XDdYhOk/TXFXSZs+71DbDPQfs4NTOhPEa+lHHu2evDWmJcpsEC 9BltRsojuzIyIxDnkl5StDPxw0Hn7YHXHnRsHEWRuTorpAIhSC/5WbcJiDHUJ2d2 0BpOskoxNtWqS+jNSpnI8meJeA9zqPJsLh5qptic5S5n+lpbMYw99Xip/sI293nq bxZzd8TuOQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAQghsYK/eiKQLVTZZCAv3yYrJIThsbSJgsL56h373Fl+Hsn10 9YzvnBlLPuSTRsIQIWbNLhU58Lxl8hZNdbL7NjANBgkqhkiG9w0BAQsFAAOCAQEA UBBy3GJxUh3B1fTMUWUH1vdirGE4alWBRR54HqqKiAMF6I12al6g77vfiGryPGjp 47Ila08aCyARwpnHZglq+Kh1tQ33I8tNPMATDY4Nd/+c/RDCTxXTtkm7fMN+qVhE w4OKp2VI8nEkvIlVr0Puhnk5UITnfG7PYk/R69OksLpF5LmgkxWxSYF3RrCs7tJq HQb2KknuzUARrOlMKQehUs6zReCG3/m5yztFmQls1fODPLsg3DaBlBp+X1FCUkB4 CMHR7CVS+Maf8oAI6P0Gdy5IbrY0v0l1rFLVKMxPSVj+Twj36DbRAoEdS4Wb/hmm khgXQbVvQdx/pwqspJoydw== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIWQWup9Hr2ZgwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDE4MzIxNFoX DTI3MTAzMDE4MzIxNFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMYrBXAz4tGCk0tICdxW5gpfvqSaV7RgjqOOzt+su9/2QG5zLSLXW6/8LVV1ItmL xVP67Zpe57fNfZut6DSprfTWb5blTx/HbySpf4/HAZbN93gx7xba8GIh3KAKnEK/ ZCl/DNofrQBShny62q5PxbhY2JTdzzN6UCC7gDFunoD2Z6rHDKWAfN15niap2uLT JKkFwF7kQz38XqNysKmuh+Dy6Rs3tym9nOHacIveSdoRr4Y7AZoXcfuSUc0YaxmF dP5KEWZjGa8QFbacbgasx6zaGn7iCnd49RqdLrQ6QH8RjaVWWUOpp6x+r17PJp45 m6G1M9BvNUIbV6t+75BSQzECAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRA9qA0d5yrObydvyY3Jp/SfU7u8SBfvMui3tKp+iXQ6fWJ8twfZIbK4/y0 TrEq/zUu5y1PfcKMpnVaC0XyspagkDBLBgNVHSMERDBCgEBCCGxgr96IpAtVNlkI C/fJiskhOGxtImCwvnqHfvcWX4eyfXT1jO+cGUs+5JNGwhAhZs0uFTnwvGXyFk11 svs2MD4GA1UdEQQ3MDWCMyouYXBwcy5iMjFjZGY0M2YyOTU5YjVjNWFjMy5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAgCZB+aV/DkKr d8HXlSHy8xQyThaERGgoTYZYj/aDqHc+wSdqCJCEwA6wy5HcSxeroIsAslpZJDtU duscIGcq5oPm3qK0jXZHynwTKY3afWOtBbIJexaa65HkzRWn8hMEG/L7Ntoz8HwB AMuVRYud0PvphUhT07mcUhsLZPjROZfcMFWKW04N2G0GH2ALquOlTxKfr2vbwSoI Mc90UmyGp9oAJXreMxTdHW+wRoaiyG9/kKRujvuBWPztiIhVOaGs1mM69TglgmDl T4M1rVRfpaBQ3YSOZ2GRpBYrOYSoOVLBylp+vMW+QX34hdq4y0YXPfnsd5Dqk0fN C5M6yzUxgw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-10-30T18:34:15Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-10-30T18:34:15Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3872" uid: d055459a-5e18-4fef-8641-3223f1092a16 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-10-30T18:34:04Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"6e9a877d-0178-4921-bf84-2432f9a98a39"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T18:34:04Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 6e9a877d-0178-4921-bf84-2432f9a98a39 resourceVersion: "3294" uid: dae51353-7ee4-4cce-b07e-5e5a5dd03644 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIeoaijiftEWMwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzM4NTQ5OTAe Fw0yNjEwMzAxODM4MThaFw0yODEyMjgxODM4MTlaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTMzODU0OTkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTMCuoSowk5nT2ieII3lQMcGaFXqMKKhpN SRMz1KHHKr21CCASiuU1RXfG96aN7vAl1rBOjPOVLrTKn5Cjzf79yNHSkiPtd8cN i5tzImuCH3A+3kAZrL6kIihTCq9cNXTSwNyvws9MJjziTO3djOL9ohqd9MqxqohK dAM01AS8by7w8n0aub+zBsX2QRPITCoVgsZio//q12c7eYwefUaeOac/Q8k8Xdd5 dXbvJUT0S5Qo9gIa3bdj8m1AJcpQ3lIC/Q4eKfkYG8Kxz1d3maqc1EmwDriFFodj x5/9BXLXRl5SiDx9pOihq2514KIwsza7Xk6VJ73FRHMjr3e1sYx/AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRXBCl/ agJfHXUBucmRTcy9zW+4JDAfBgNVHSMEGDAWgBRXBCl/agJfHXUBucmRTcy9zW+4 JDANBgkqhkiG9w0BAQsFAAOCAQEAbMCgQUr6QyIRp31X1Hm5/jz2L+KSezACr11a zl0znu93tjS/GdFSb5xEC07RqZFISXYN31enzrXv702cwi9FLuoh9ITR6iKDEb5z gjQibPAP3KfKTCDl5+BGunV/MTyiuhDpWp5ztrOjbQaZVcY+680G42IRuBuUGYPT txZvE/Af42SYhEe+gUZnLeaDvWY9+Rf57N5/LuyKTpnTq9rX6hWxJ48rV9DM2z+O oUvelD+d2dF4MyZfFHwFVZeRzrFtIctLPVTKtNC+oY6H6LTyWuQzToAOTqdiwAh6 Hlq9+3ynaKMfX0s8ldYxdMTprVzcRvbFhE0QsyFnomelsU17zQ== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-10-30T18:45:29Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-10-30T18:45:29Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "13484" uid: 66905b01-bf55-4aa2-872b-3ac1f4f21475 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIeoaijiftEWMwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzM4NTQ5OTAe Fw0yNjEwMzAxODM4MThaFw0yODEyMjgxODM4MTlaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTMzODU0OTkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTMCuoSowk5nT2ieII3lQMcGaFXqMKKhpN SRMz1KHHKr21CCASiuU1RXfG96aN7vAl1rBOjPOVLrTKn5Cjzf79yNHSkiPtd8cN i5tzImuCH3A+3kAZrL6kIihTCq9cNXTSwNyvws9MJjziTO3djOL9ohqd9MqxqohK dAM01AS8by7w8n0aub+zBsX2QRPITCoVgsZio//q12c7eYwefUaeOac/Q8k8Xdd5 dXbvJUT0S5Qo9gIa3bdj8m1AJcpQ3lIC/Q4eKfkYG8Kxz1d3maqc1EmwDriFFodj x5/9BXLXRl5SiDx9pOihq2514KIwsza7Xk6VJ73FRHMjr3e1sYx/AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRXBCl/ agJfHXUBucmRTcy9zW+4JDAfBgNVHSMEGDAWgBRXBCl/agJfHXUBucmRTcy9zW+4 JDANBgkqhkiG9w0BAQsFAAOCAQEAbMCgQUr6QyIRp31X1Hm5/jz2L+KSezACr11a zl0znu93tjS/GdFSb5xEC07RqZFISXYN31enzrXv702cwi9FLuoh9ITR6iKDEb5z gjQibPAP3KfKTCDl5+BGunV/MTyiuhDpWp5ztrOjbQaZVcY+680G42IRuBuUGYPT txZvE/Af42SYhEe+gUZnLeaDvWY9+Rf57N5/LuyKTpnTq9rX6hWxJ48rV9DM2z+O oUvelD+d2dF4MyZfFHwFVZeRzrFtIctLPVTKtNC+oY6H6LTyWuQzToAOTqdiwAh6 Hlq9+3ynaKMfX0s8ldYxdMTprVzcRvbFhE0QsyFnomelsU17zQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-10-30T18:34:15Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-10-30T18:34:15Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-10-30T18:38:24Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "6774" uid: 943db2d7-64f1-433b-9813-4d883c156ffb - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-10-30T18:34:03Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"6e9a877d-0178-4921-bf84-2432f9a98a39"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T18:34:03Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 6e9a877d-0178-4921-bf84-2432f9a98a39 resourceVersion: "3273" uid: d42044e6-49d4-4e31-bd13-aa6046f067d2 kind: ConfigMapList metadata: resourceVersion: "98206"