--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T19:09:21Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"963522b6-827e-4fc1-ac22-f73dd990d943"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T19:09:21Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 963522b6-827e-4fc1-ac22-f73dd990d943 resourceVersion: "2348" uid: 2de2f786-9428-4254-b2e0-87f982ff043d - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T19:09:21Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-10-30T19:09:21Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2346" uid: 097a10bf-d6b0-4d52-8e59-7a965a4b12f5 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T19:09:21Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"963522b6-827e-4fc1-ac22-f73dd990d943"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T19:09:21Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 963522b6-827e-4fc1-ac22-f73dd990d943 resourceVersion: "2345" uid: e02a3861-aa85-41d1-88df-9779caaa4698 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIOb7UxkiU9okwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDE5MDcyM1oX DTM2MTAyNzE5MDcyM1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60wTyyS/JaZw 1dyK3kN1uK2F6uLKTN6Tf0KbeFZChRu4AsST622jX3477bixs5XibWPVdhs28iiw eVFGaoJJspDAD/3EuCo0o/i70rBv/dF4L4Et05GfjYA4XrgbRNXd37J7yOmQs9AC ls90yyckr7AG9jFKNYmzGmho5U5JuRTsJaByt0/9W2O+pz5US9UV3TGKEoUiw2XW /82+bCkELteU75/boeut2zKYIEHFLRjGty/ATOpawpF7tHn+HXREIvEDEj66A86R rctqaUaeSKyBjzeg+bH2/6TDeFAgXi7f8euLlhPaI0NL2zjNzD0We/KkVrv8NCfT Oz3BQaMIlwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAIW0Uyqs+Mju8PvJWbMkqf/aY57Y7O5UXw+MbqrJ6vw1seTMW m/9L+e+keHwjAsYJwqAvLdsdXA/tm5cmVbyWKDANBgkqhkiG9w0BAQsFAAOCAQEA uhY4+VLqP0p7nQLw3hH+E3jKQyiOV6xHx7Xxim1DIS34/yIBbJhzTNGh+6opuWec 41tozsye31pRQBGLxMxnNkdC3GeIT30puGFC8tnQggqu9Ou1Fo2kO6TbpwI8LpvI vq73o6bsmYxJyAVuqiXVldKHOX1Jn53JazLoAH909/iAb45VcdAXlKK68LNi0jrd 62aAkcx8+LCIU2oclPfTeOR/TfLUyCXmTUv+PEVgGpmingoeCTFQYqx3GHZs6dvk sY2fAzFwMlPpeqthxYJtHQOW0Xwu9eqADIvwZoJbHhMDqoC+X8/Bfzf4RAGeRnLF 2pyjv1ZfWP5Bahd7PDoU1g== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIICXcdQuMLkgswDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDE5MDczMloX DTI3MTAzMDE5MDczMlowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOem/EjHp5CSpetRf/Oc3n9go+6bValwzgKlumzO95vfuKqb3UuQhfDV+8DO0kv6 8e6q8FoZA0oa3S8nfaIARHc81ltqRM2Lx9QtXYOgpeaWc+O23qwMmcMcQd/eRrAe Icu43TVpith5kwMYubSrx3jL4PAGyi89bRp4Uvmnxh/kWcu27JDr1XeSrRaovfQj 1j0iBEfId4BWdQ2Jhht7zqbCtkeR/yUTkhFZms/1DTT2hrQXRDsF/McBiF7vlsPr /lroM22vZbgGXTWp3IOHjxtz6GOI8CWx2wg+ZtqMdhlZEFupvNxeNJKiIlJ1ZPE/ XfLPkKi1mdZn43VLGsNkkMECAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAuZl4DpbBcTU+2W8JH8PI/1l5haFXvEZuOtR2UJ60NcfcUCIqEVK1CElI S7yEtVZHaa5ghwI625RkcqkfIU95/TBLBgNVHSMERDBCgEAhbRTKqz4yO7w+8lZs ySp/9pjntjs7lRfD4xuqsnq/DWx5Mxab/0v576R4fCMCxgnCoC8t2x1cD+2blyZV vJYoMD4GA1UdEQQ3MDWCMyouYXBwcy41MGZhNTg2MGUwY2E1OTU0N2QzOC5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAIKSDK0d09Woo s9uXlFf6M2DnBCyDSh4BXj9suvSdf2gmFc/xP6Ith0uN8y6I6vlLqBC42flcFtPs aNw5FSCfvG4YjQYzzFRE3XqbQ0jDmgl0V2qRLHJYly7DguqgmQeZQY82nlyX6fjr OMLO7ny+11z8lRWVA2gZR+zB3+RSXLo+KZD6DjDpfN+Kl+REOhvm8lAZKvQiwIBf 4wscDoWiime14pcjkqBmOvaSnc8xuZsCe0EbPhOcQ0P/USvFeQYsupYkswqg7DFt xzUhLHfKc3r7Ya6fhBDIdGOFK3tAwItbtYhbHNypVmnS0i2QK8f76JMwA16hZQqk ZfJZkcWFEA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-10-30T19:09:39Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-10-30T19:09:39Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3695" uid: f875fc21-673d-4fd0-bf28-25e8018bb2c1 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-10-30T19:09:21Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"963522b6-827e-4fc1-ac22-f73dd990d943"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T19:09:21Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 963522b6-827e-4fc1-ac22-f73dd990d943 resourceVersion: "2350" uid: bdc85cbb-14ae-4614-851d-dbf3d1861803 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIPLjocGnXRnQwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzM4Nzc3NTAe Fw0yNjEwMzAxOTE2MTRaFw0yODEyMjgxOTE2MTVaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTMzODc3NzUwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsVKjXnQSUB3GayAHzf+GbUNsOs9dLF6qx dVJMHfPOxqqwzZWzwa7iF1DVXi5AwkN71bI5OKyz8WTZlJphujp4ki9zANxFJBp5 uaJ2KXgekfKpoYZgPQfse0joeFe/lAyESWmPUPdV28S49Lxsbn+i7LUzBt/zoLD6 a/r0C0HK+ncb2Nj4v0nNQlpUSHyDMlgadzW5Sx6ujCl96Ct93iJ00ztkMxfoaYI8 Ndtrn5sHhDM/f9qoZCkrYK08K/KodUyuqTj7PoX/PckYy8ah4jgGgLqSgPMt5Gtf p7ePxxIstL9LOdeUM9ByZJWbOmq62KvRu4vo71iw+c5t5F2EDp4LAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNneLz BJxb/HJ7jL2hXoby8L1M3jAfBgNVHSMEGDAWgBQNneLzBJxb/HJ7jL2hXoby8L1M 3jANBgkqhkiG9w0BAQsFAAOCAQEAjFcvw6SndA7h68nQIhppzxNkyoCGpJv/BedK SrE1RcJW/Ildu9T8t3mZL5n1fm1tkWzS0iXSLUjN6ZYrDn4v+3pgyFnbl+X/Txs/ Qj9THMnd+EYXhF/QGm7HmCpDb3m79KaAvAxfjqDkOB9eU1TQOQ+MWnxsjeAE+zlZ EqgWDD3WoZZvDjHZsjBVh+h5s3Qu+eCP9BWOMHUq9r1WmEOLJE2lTx+C1ytFBjjF gTrmClOjY/Lz+XDuSPWChRveteEqVAnz9V3dmdx+txpR1d83kD9Q3hGktD/+cmpT QMIMLkYqpad2IKr5qB3POQyFv6MagKegJeIxvGN6ftgV8sQ/aQ== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-10-30T19:22:11Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-10-30T19:22:11Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "17170" uid: 532e4ede-7196-4b32-8e28-72005a4b7a68 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIPLjocGnXRnQwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzM4Nzc3NTAe Fw0yNjEwMzAxOTE2MTRaFw0yODEyMjgxOTE2MTVaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTMzODc3NzUwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsVKjXnQSUB3GayAHzf+GbUNsOs9dLF6qx dVJMHfPOxqqwzZWzwa7iF1DVXi5AwkN71bI5OKyz8WTZlJphujp4ki9zANxFJBp5 uaJ2KXgekfKpoYZgPQfse0joeFe/lAyESWmPUPdV28S49Lxsbn+i7LUzBt/zoLD6 a/r0C0HK+ncb2Nj4v0nNQlpUSHyDMlgadzW5Sx6ujCl96Ct93iJ00ztkMxfoaYI8 Ndtrn5sHhDM/f9qoZCkrYK08K/KodUyuqTj7PoX/PckYy8ah4jgGgLqSgPMt5Gtf p7ePxxIstL9LOdeUM9ByZJWbOmq62KvRu4vo71iw+c5t5F2EDp4LAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNneLz BJxb/HJ7jL2hXoby8L1M3jAfBgNVHSMEGDAWgBQNneLzBJxb/HJ7jL2hXoby8L1M 3jANBgkqhkiG9w0BAQsFAAOCAQEAjFcvw6SndA7h68nQIhppzxNkyoCGpJv/BedK SrE1RcJW/Ildu9T8t3mZL5n1fm1tkWzS0iXSLUjN6ZYrDn4v+3pgyFnbl+X/Txs/ Qj9THMnd+EYXhF/QGm7HmCpDb3m79KaAvAxfjqDkOB9eU1TQOQ+MWnxsjeAE+zlZ EqgWDD3WoZZvDjHZsjBVh+h5s3Qu+eCP9BWOMHUq9r1WmEOLJE2lTx+C1ytFBjjF gTrmClOjY/Lz+XDuSPWChRveteEqVAnz9V3dmdx+txpR1d83kD9Q3hGktD/+cmpT QMIMLkYqpad2IKr5qB3POQyFv6MagKegJeIxvGN6ftgV8sQ/aQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-10-30T19:09:38Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-10-30T19:09:38Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-10-30T19:16:20Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "6941" uid: 3088c9a5-a2f2-486a-b1f5-dee3b3a82e4a - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-10-30T19:09:21Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"963522b6-827e-4fc1-ac22-f73dd990d943"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T19:09:21Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 963522b6-827e-4fc1-ac22-f73dd990d943 resourceVersion: "2349" uid: bf4b96bb-0b2d-4770-94b8-ad5cf4378123 kind: ConfigMapList metadata: resourceVersion: "124984"