--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-04T02:07:19Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"710888b8-1b96-4de9-b410-fe43f156cfd2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-04T02:07:19Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 710888b8-1b96-4de9-b410-fe43f156cfd2 resourceVersion: "2374" uid: bfb019fd-cb93-45bf-836b-078f98435f56 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-04T02:07:19Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-11-04T02:07:19Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2369" uid: 834d973d-d42d-4af9-8ab2-bc1606c19fb9 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-04T02:07:19Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"710888b8-1b96-4de9-b410-fe43f156cfd2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-04T02:07:19Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 710888b8-1b96-4de9-b410-fe43f156cfd2 resourceVersion: "2365" uid: ad67c4e0-6d2a-49ac-b888-f702dd8f00c4 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIepMweE5gancwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwNDAyMDUxM1oX DTM2MTEwMTAyMDUxM1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyISN+k53zNaS hPnHJtxMTsiyyn7L1MK68pER4vqf/9dKd0N7XR/I4lWhCJW+nKubsSEwMD7tQWg1 1kgUi2O9XKpWHmkQagE/CyXmCaC/i4DH/tc98N/xKvMqk1ybndDi1PVaSlvrjeHp 3l6L8X2KDKpSLbUWBECY1p2g8Q4h2sHxpXqQTSci+LDiw+Ef6hPfx4VYGYyisTrD 9PSL9pmGwcxu1iWd4azcMLx7eQI2/ZyFBFX1oQREnUqVGAFl6XXcItZmZNt8yPl4 lLmpAeC4WuDjJkVe2aFNRRdSckEy/XmkBkE+x+qDOXtszpSLvAcU8uZVCuvn/nV+ hgepF419xwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAcd5tvGfv//+JYlDXxWHzcZJpT5u6P0h2XgkgjytwBGYyRD5U +bgy7lJyhlh6PUVUkhYDaNqL56NeY1fbrhdUnDANBgkqhkiG9w0BAQsFAAOCAQEA viHKxS4Qdpc6Da73UyvrjwY2ihKJThvJ0NiRw//dLpSXAgEchSDdzjKXgYaeUoGH QXxSMHYgwM/jjOfu782KtM/pYqFw8TcBmjX1V67HVxhH6M4ZUwijaxDcFt5ul2Wi 8DgjWLVIMFT0SZQGaRHC0zHbQIsF5tk54SNANFmKL/yQ4wUctzobPkGxQVJRTE8k DGWR7nJevjJkFPRFOxtkEa05hvSR4+zX9Oz8nX0cIDg7QI3E3yrOiPhreJhLy1un xpucTqkfushn8yulEufrkCXEDoXfsGE/M74i0x/LxF29b7awCvbx8BZdKsA6jj2v J9rqQ7V1oArfeskKsGFiTA== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIRXowjBuRJ0owDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwNDAyMDUzMFoX DTI3MTEwNDAyMDUzMFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANDJ2dDCFGi4Fpysj0qMVOY7JinHK7GzdO7FA0cvEO4K+Tb1q+ijTGjTNypWN7yj JqDWzfuQC5kPstZFHx62GsZCWGEAwfM7oZQvPyNhfR6NTFlsNthpjNlvDxlljjPi XquHoUKc6Lw3WoBeI2+DuieSl8OfuBxGBTJk07JJlD3GfOPLULpEmlJPW0h/XhPu NRovg1t+Rm+wRsfXgatSIJCsag5W8z38I7WrR+PIxT2l/W67kBkp34FZgtIgCQy4 iT8RbpFSMmKGU32FieL9cC/SSKBf0aGz3/7DuCWiak5w501Tm1YUU//rdW73AIYM +guwNnv62mHxdVMwA/6ZqT0CAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRA7Apa/LJKUL002DQbRt98g4hI7aNqgfn+mwV8KCZoE038r6HNiYcoW7/C N/nYwfxmXjvwOaTSBRng042xBnQZzjBLBgNVHSMERDBCgEBx3m28Z+///4liUNfF YfNxkmlPm7o/SHZeCSCPK3AEZjJEPlT5uDLuUnKGWHo9RVSSFgNo2ovno15jV9uu F1ScMD4GA1UdEQQ3MDWCMyouYXBwcy43Nzc3MmJiOGEwM2QxNWY2Mzk1MC5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAb/on2orMSODU gAU06zhXWQ2fpuMA0b7S0pLwqVnxOyC/P0Hf21vxe2l/O8C+ia0TTN85KMLKY2PT UxLXMsO0fHhYZnf95mW0unvKwdc1EW3sF+9C1CxnUF6e7t4Hrn+Lf6OvBdnkkSMJ ZtXPA7fVsvIcIfweNWANiLHs3ZhAZDSM7fvfse++GRdR265J2lroEX2N1YRqOscG 2WJfzSPeqpb6eJza4OLehS7yHAutU1S7JRuhzGret3cbV0af172GP6JvOfefV8XZ 0ReP66p0YaxzCndZ67T+klS1QBQgVQ8x0xBcGxUfNg8xwBvnX7hu9xB9LYcH6ZH4 oWrgtijvfA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-11-04T02:07:31Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-11-04T02:07:31Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2907" uid: 92bb34d8-f8b3-482d-a12a-bfff88930ce1 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-11-04T02:07:20Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"710888b8-1b96-4de9-b410-fe43f156cfd2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-04T02:07:20Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 710888b8-1b96-4de9-b410-fe43f156cfd2 resourceVersion: "2377" uid: df5b4242-6d88-4987-a7a2-02f76c19abb8 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIITHdZLKojgGgwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5Mzc1ODQ3NzAe Fw0yNjExMDQwMjE0MzZaFw0yOTAxMDIwMjE0MzdaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM3NTg0NzcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtGNmgrm9M9uFzSOOyIt3OM0SFJB7ISvWy x2njbDfTD+R54LrkHVPwfFreQw6Jv0JTk0YBroAhwxOAhUyLGwyKhntAqyJMTY+v EwvsEP+1h5afAetGzpx/LMu41lPYZFjxFFs+VSqr5djLVixI/5r223Q5VKXDiniB W6Lk6oYqSD8dP6+bVMF79PAyOwWVKjNuJEtWfgTnX9KAGlghCEXmMhDFs67Lh2XX UXqM/H1+/X59LAoPPGbJO/mI18MMoIoxwox1SMtAORsUU6z0DOl5HUU5UgGDkKfL Y8kRR6c4NOUixpvg4bgAMtrougPAt9PJxHmrKD7TBPDqffkYXz0dAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNN1kZ kl3GfqSxW/Rq/7npTmUttzAfBgNVHSMEGDAWgBQNN1kZkl3GfqSxW/Rq/7npTmUt tzANBgkqhkiG9w0BAQsFAAOCAQEAS5MdcCMisPTaQcg0mVOJzM8+GoMeqK51t9Bq BfLU8ZCsi4Z048Bs7HFTCoClBskVYHlyJr8w5RvEBp4sIAosjfEfXb29Si9JaqO/ RwNMlK5H0L4pzTt4t4mNuzFur2NkY7WI6vko6j0XbcYE1Yqm/ADofRvC2mNEvArZ t3NvIJrGaAENSsz5wTyhGVwfY2O4NKMd3RwPGidmJxwU+Kq4nXjaHHAXPZ8azoLe 9dwmHL2mhkHqaHQjIu9HKbwYpZyyTanVNrjYZL8jy0oasujILZxN/v4oN3SF14BY RvBpbtORG1ucsbZBmC5cZ8wZ6fxHpKRLynhbfPTFcchsqpUvwg== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-11-04T02:24:28Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-11-04T02:24:28Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "18347" uid: c6a3f797-7a70-4dd3-9b2d-a68acbe3d8b0 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIITHdZLKojgGgwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5Mzc1ODQ3NzAe Fw0yNjExMDQwMjE0MzZaFw0yOTAxMDIwMjE0MzdaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM3NTg0NzcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtGNmgrm9M9uFzSOOyIt3OM0SFJB7ISvWy x2njbDfTD+R54LrkHVPwfFreQw6Jv0JTk0YBroAhwxOAhUyLGwyKhntAqyJMTY+v EwvsEP+1h5afAetGzpx/LMu41lPYZFjxFFs+VSqr5djLVixI/5r223Q5VKXDiniB W6Lk6oYqSD8dP6+bVMF79PAyOwWVKjNuJEtWfgTnX9KAGlghCEXmMhDFs67Lh2XX UXqM/H1+/X59LAoPPGbJO/mI18MMoIoxwox1SMtAORsUU6z0DOl5HUU5UgGDkKfL Y8kRR6c4NOUixpvg4bgAMtrougPAt9PJxHmrKD7TBPDqffkYXz0dAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNN1kZ kl3GfqSxW/Rq/7npTmUttzAfBgNVHSMEGDAWgBQNN1kZkl3GfqSxW/Rq/7npTmUt tzANBgkqhkiG9w0BAQsFAAOCAQEAS5MdcCMisPTaQcg0mVOJzM8+GoMeqK51t9Bq BfLU8ZCsi4Z048Bs7HFTCoClBskVYHlyJr8w5RvEBp4sIAosjfEfXb29Si9JaqO/ RwNMlK5H0L4pzTt4t4mNuzFur2NkY7WI6vko6j0XbcYE1Yqm/ADofRvC2mNEvArZ t3NvIJrGaAENSsz5wTyhGVwfY2O4NKMd3RwPGidmJxwU+Kq4nXjaHHAXPZ8azoLe 9dwmHL2mhkHqaHQjIu9HKbwYpZyyTanVNrjYZL8jy0oasujILZxN/v4oN3SF14BY RvBpbtORG1ucsbZBmC5cZ8wZ6fxHpKRLynhbfPTFcchsqpUvwg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-11-04T02:07:31Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-11-04T02:07:31Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-11-04T02:14:49Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7065" uid: 6fad87b3-a862-4649-8017-0651610c4fe8 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-11-04T02:07:20Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"710888b8-1b96-4de9-b410-fe43f156cfd2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-04T02:07:20Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 710888b8-1b96-4de9-b410-fe43f156cfd2 resourceVersion: "2376" uid: 7112a3b4-16c7-4db0-ac8b-f2227ccea457 kind: ConfigMapList metadata: resourceVersion: "44489"