--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T21:07:18Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"797ecda2-9caa-47b1-a6ea-ab4c2df7406d"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T21:07:18Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 797ecda2-9caa-47b1-a6ea-ab4c2df7406d resourceVersion: "2369" uid: 1406eb34-704b-40e0-a482-59239dd02885 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T21:07:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-10-30T21:07:17Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2365" uid: 9d15df97-daec-4e15-afd7-f9c9cac6d241 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T21:07:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"797ecda2-9caa-47b1-a6ea-ab4c2df7406d"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T21:07:17Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 797ecda2-9caa-47b1-a6ea-ab4c2df7406d resourceVersion: "2364" uid: 887df6cd-c7f2-4b5e-8874-91c75a1f2b6d - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIVJBaD3Kq2zUwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDIxMDQ0OFoX DTM2MTAyNzIxMDQ0OFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20BUTBd9eenN axulnfvLysZgYGGZL0g4johaD+J7vAcOg1sKRJLkL5jffMYrk7pkloj1vj37pU6B 8Toqf0GJC1ItG+vOv05nAST90+J/2tycxZxqsouBj7RmhQ1NbrqNyn7YXf0xOTOj +sYTlDfIDQDc9oeXMHlDiK9QewuKvBrYxH/kKaj/yzlZjAILIC7teVIE5w7yLmPa Z/9sx+nqVZR+drO2aDBezqq5V+idYTF1C6iETveQpXGtAPvJU0a/NbyPT9MfYXbR UWAfzR1aGReEjcaUf8qdx+PvjEpvrUlgbLvwoHomnjI8kP/o/97lLsC6yTxYa4Lg E5X5JsNbUwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA+NltB1xlwNe39QxZp2/PAvMgeOQa/z9gnD9h4iAhAkXRLCtx ON7gGP/VjEgE5tpX/paWMXH3UKdb/csLHnfFDTANBgkqhkiG9w0BAQsFAAOCAQEA kjWhODwS9yPufEFltuqE+XDqRPCTNiExQYMIl7ba8VC4bZo8mV88jNmnT5pc+A7O rC3581wQRVhclPf90boKjDxQ9o0Ix+X0qS644IJk91AY8K82UqDn8q4beh11FnkB skvWv/qC/IBL8gjPumzSycmDPGXyavFpw7EgYteV3uX/lwgFryhkAYu/vfmpgUrs 9ycF+gLllptntOKphIqq643/YP7T+PobnFaFZs1hXMdpsqw7TuQje9LBUMU9CH4+ XDUroSzEXbolhqg2pPc/6K2oSu+xEdfOdiOvC8p4awjyPaM6mJnT98O012aWwo6A AOTOpO4Vjwxu9LhfCIJ1wA== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIdMwk/dfDKTMwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDIxMDUwNFoX DTI3MTAzMDIxMDUwNFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALaMfrhXgKp4wAJa4TjNApBT/7lbdcga6OxyI/BVrdDK1Cpm72gZwF5xSIMsxQdl doZv4Y/RFcRWkhlUgIoOmVNdbGu2n3H2kGK1Zd7/SJeg2+7D4xae4wH9j2VQaExV CGgfW3d1BnE4yrn559U8hqVjJcs5hhSZm1IbEfZSHxuf5/jlheyuaMNJTcYZVANs bKo2iXfeJe8VdSGch9lhWtJUBW2dYYQuYCEADZW46fruvYg2HfuVUdncWZll+YVq GMise8BcEIjFxtJC5TVOnwE52nRP+Fi6jlEV6eFa+OfqKHTrbPRlYdxfvsGiYjlM 6+8crvxD0620xxynBPelFIUCAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAD29oHyO8NKt2X7fNdhn9bWbbJyyF5tQLffWrCiW89ek2l37pcQLwdrtZ X5e5D1yAy82g6tCf1Z5HZY+RDjTKpDBLBgNVHSMERDBCgED42W0HXGXA17f1DFmn b88C8yB45Br/P2CcP2HiICECRdEsK3E43uAY/9WMSATm2lf+lpYxcfdQp1v9ywse d8UNMD4GA1UdEQQ3MDWCMyouYXBwcy4zNDQyZmViMGJlNTQ5ZmM2MzNlZC5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAtj2o0IUktoT2 vKQrSGcMzD30TkCPXS6T/UR2/g8vdsMFyJLuHJiLyKxJ5B3fbOl/aQgWUc0Ng1Ea p8tbalS/k1Az9981XyzFx15FZ8gjQFkOvQ+WGxqDX3qb9R17xWtbQNxf0/7Lmg37 r+nwidjdQMU9S7lI4GIlU8/NbB3aE0ZYE5l+MXCFWUvLbLhoitxoUlnaFhl8XUoG trIsQKl9MUZja4gccFQLm874rNS4JgMnumO36oc9M0HmGNTkuMrv/b/OyVC6ZMNx bbkaIZEyLVea2w8jqRTjcXi55AhYOlSXAa7KwptNbGrTsQB48LftY0t54Mxafv8n JQpkVXQsxg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-10-30T21:07:14Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-10-30T21:07:46Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2972" uid: 0180cc72-14d6-4b49-8763-6d70cc81c5d0 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-10-30T21:07:18Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"797ecda2-9caa-47b1-a6ea-ab4c2df7406d"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T21:07:18Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 797ecda2-9caa-47b1-a6ea-ab4c2df7406d resourceVersion: "2377" uid: 05d5930b-2656-4253-8952-19058be1521b - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIUBzJahXyibkwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzM5NDgxNjAe Fw0yNjEwMzAyMTEzMzVaFw0yODEyMjgyMTEzMzZaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTMzOTQ4MTYwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6P6iSJQ6NZC2N09mHNfqVSBwDiD2qDKPK POMpg5TzanfLuUxgj1/cRAa5mKtDnl1Sd6fUHlvIL4AW9RC4c5zgvBquBYUixiDL M64h/ZONtwqZ1zLpcTfTwTfhhJkBSDQ6BC1Di70fK2FvbrGXJo832ZHroF6CuGrz q0dv7eQAsHmCwwY5AeogePnY29+96lM82OJxKhqLF1lBkRZjK8Q1RhGMIdUP75wd m8FFBVPEjc7lS5s/WSVTEIKCz2CoCu8PYG9x/WsrQ6/InmVOVhvxdu4HXPgb9iGc osbaXeREo9i8fQvGXCEVc78O0qvzIPaLKpfhWmQaKvhmxTzriz7jAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTWj85Z lehG/1qJLBtqi82cFK4UlTAfBgNVHSMEGDAWgBTWj85ZlehG/1qJLBtqi82cFK4U lTANBgkqhkiG9w0BAQsFAAOCAQEAhMZSK1tTFEtQ9tvKJYrqQM4SVgp46HotF8mQ 6ciXmj1nTjyCT+OzriToSnn2HthIUm4Opj5fsf3vFTQb7zPOCyqKZc/PY+BU4QLj CO0EUgtj3BT/IhlQ/x83CCRhz3CEPBl2yVC2d6P8z75P+QUXt0ipad72TBtGmkTS kgfeZD7MbK339os5YKze8PMrE9OfcfKV+GraJWV8i6JeF3k9x53PfKsdMeRmLQFn vLq64y/NpoO069dKl0G8Dst5SiBUNol5Ut2/4Fs4JOFZsiedFxoMD6K/R1wh+4Fo 2ML1tHFNXYsBv5qTJ81mFaVjpWlhsdpqjtUpA0TZLWPJRjFV1g== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-10-30T21:21:47Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-10-30T21:21:47Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "16967" uid: ff385c0a-c064-45db-be0e-b97a42b225a1 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIUBzJahXyibkwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzM5NDgxNjAe Fw0yNjEwMzAyMTEzMzVaFw0yODEyMjgyMTEzMzZaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTMzOTQ4MTYwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6P6iSJQ6NZC2N09mHNfqVSBwDiD2qDKPK POMpg5TzanfLuUxgj1/cRAa5mKtDnl1Sd6fUHlvIL4AW9RC4c5zgvBquBYUixiDL M64h/ZONtwqZ1zLpcTfTwTfhhJkBSDQ6BC1Di70fK2FvbrGXJo832ZHroF6CuGrz q0dv7eQAsHmCwwY5AeogePnY29+96lM82OJxKhqLF1lBkRZjK8Q1RhGMIdUP75wd m8FFBVPEjc7lS5s/WSVTEIKCz2CoCu8PYG9x/WsrQ6/InmVOVhvxdu4HXPgb9iGc osbaXeREo9i8fQvGXCEVc78O0qvzIPaLKpfhWmQaKvhmxTzriz7jAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTWj85Z lehG/1qJLBtqi82cFK4UlTAfBgNVHSMEGDAWgBTWj85ZlehG/1qJLBtqi82cFK4U lTANBgkqhkiG9w0BAQsFAAOCAQEAhMZSK1tTFEtQ9tvKJYrqQM4SVgp46HotF8mQ 6ciXmj1nTjyCT+OzriToSnn2HthIUm4Opj5fsf3vFTQb7zPOCyqKZc/PY+BU4QLj CO0EUgtj3BT/IhlQ/x83CCRhz3CEPBl2yVC2d6P8z75P+QUXt0ipad72TBtGmkTS kgfeZD7MbK339os5YKze8PMrE9OfcfKV+GraJWV8i6JeF3k9x53PfKsdMeRmLQFn vLq64y/NpoO069dKl0G8Dst5SiBUNol5Ut2/4Fs4JOFZsiedFxoMD6K/R1wh+4Fo 2ML1tHFNXYsBv5qTJ81mFaVjpWlhsdpqjtUpA0TZLWPJRjFV1g== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-10-30T21:07:14Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-10-30T21:07:14Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-10-30T21:13:49Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "6958" uid: ed41d45a-3373-4b68-9d3a-d0c2fbcaeec4 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-10-30T21:07:18Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"797ecda2-9caa-47b1-a6ea-ab4c2df7406d"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T21:07:18Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 797ecda2-9caa-47b1-a6ea-ab4c2df7406d resourceVersion: "2372" uid: d0efc821-ade1-4290-bc90-6d83935e88b6 kind: ConfigMapList metadata: resourceVersion: "105832"