--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-09T17:34:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"83c51907-9385-4cf1-8785-149714bf1031"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-09T17:34:17Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 83c51907-9385-4cf1-8785-149714bf1031 resourceVersion: "2375" uid: 179c9b9c-ea8d-41a9-b07b-09c44b93f97b - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-09T17:34:16Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-09T17:34:16Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2370" uid: cabf39e6-1ba2-4eb6-85db-07ad4e4ac12f - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-09T17:34:16Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"83c51907-9385-4cf1-8785-149714bf1031"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-09T17:34:16Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 83c51907-9385-4cf1-8785-149714bf1031 resourceVersion: "2369" uid: 0b37cd9e-4521-41e0-89b6-8ceac5c7fce0 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIQg0tqps//OEwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwOTE3MzE0NVoX DTM2MDkwNjE3MzE0NVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3Gj3SLXuCX1 m0rqyjX6BTBGPCgowA2YO1ZAG+NuwysWsyjtp/EnPOam1LoKo/VCssAWlHXpkpF2 W5WFC6HRkBZsg8mhc4VlLiGXfqztALAocda4fCidDBPX/f2VaQOLEeRrqIbx8bjo 06bYzOjV5CkqTuwYqSgu6v3fEt3CFtDG5d2MaRJb0eziml2a6z1XxAaERSew3dh3 dg5+xYBV0bosFvV+jzmeU8QQGNnXt4sMG8QsE3El50LI4kYskV10xp1HqgBZFdRH aEq9Ugnss1XsrKebiH5+qJpb18urLV2fsDl3z6RypJMTk0Xpo+cWTuhCQxCOrop4 7SSxlqTr0QIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAngEVsqiVyosDEfuB7HXJHJWcJRTRU6pi+dEeXZ/8x4RhZkcb +hC5CyjTKEOVRXv9E4Irn+/z7nLBFBQ1SaqMszANBgkqhkiG9w0BAQsFAAOCAQEA hiN8RPQDSvlyc40/7SProohtvAUe574n5Jr5fqeyco/q+GwR9vHw3JfsDyQsJeUM T4MN+cxQzSZh1G7NhXEjETS0Vw5qw5bayXjMDBZBpKsJ5AP66qAD0KCrZ0gzxANv Hths3RWBrKl1qDWcCMEgpFGg9pTKhuxKisuUvBHWQqQFWa/FezHKx41zlxTX359F g9ZOVvXljR2X7eWTq9K7Dnelp3O5K8r2ocSMDO0fTZCJPkeE5WAExgjBgv/KfeE8 PplnhDE34kqvvb0n7nzBU99dAHfCZTqMf8P1zMVaX3CDEjYsogbbic6GuhDRapNX vNdUj808EjHTuiqWNKE3/g== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIaVn/zF8Ct8owDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwOTE3MzIxOFoX DTI3MDkwOTE3MzIxOFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMPBQxMf0OkYKy5clj+vU0DVsmyRiBwnL9YfjbG7fNCDSQ4MBFwqAhIv30VVbcZ8 NQ2zd9otXPMFEUk/S25hzcxIrrAyY3BsS2jKfwcDgDZxpMBXXdEivN5hY+yslG3p cdgCzzJgWKMDQeXC3EJBteLfysLMC10U+If5J7ofZR85NdTbGMU58Qv+PlJqnODW HdJapNX2TLHJQ1pBFsZu+F1/kqboe9kR3ptBeas3kKqLU+t8lEkbPFx+z6CKtd5r JMrPOPovDKl7MHQKBw/G+Zar0o+vp/f0lWjM/5yWQi2rS4YEROBQLimEfeoIlJmP 072JGtdTh1VcgPdwotp+nR8CAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAsSaFMFKg2tKzhVNVpH+QZ+rdlty28BKEjwrLrNSYFDuJ9uJum18N4aUl Ka1K4hc5je+GVV3faQ+ZFg2vCcojdjBLBgNVHSMERDBCgECeARWyqJXKiwMR+4Hs dckclZwlFNFTqmL50R5dn/zHhGFmRxv6ELkLKNMoQ5VFe/0Tgiuf7/PucsEUFDVJ qoyzMEsGA1UdEQREMEKCQCouYXBwcy4yYjc5NTZhZS01MjkxLTQyMmItOTQ1Yy1m ZmE3MDU0YjM2MDMucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAK8YY3iEfLSTRUnJOARuw1pjeoeho+JXXL2xkFBG6m3IIlhCMDeDlEvLu2Cz iG8Co08fmtRFuI7E9VN2zhIJZMRFI2EFhSnwuzBrMku7TnqNSC61QX68uAKLBWxc RCZz5kv3sA67DYOnHdnqYmDDitT8ZvVsEN6hmlCku1ifu3HeDDsm3lf0GdBusGl9 rFDHQcJ8zraembyHuIvTAaJJDsYzaYtpTTysRzOimGpF8Ei5m4cxLd1GHqG7Eebz dUe2793RDngMnfCzYxj3AcPo0ZsHWOZM1/aFTEiuBlhfZK+cMQMqJee9pNIAkk4t 6F2MDybkrk9JFcxziGuSUtmj3Q0= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-09T17:34:27Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-09T17:34:27Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2802" uid: a4f9abab-ed15-4584-8a06-d09631226887 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-09T17:34:17Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"83c51907-9385-4cf1-8785-149714bf1031"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-09T17:34:17Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 83c51907-9385-4cf1-8785-149714bf1031 resourceVersion: "2381" uid: e236a667-eb08-41ff-8c5b-28a78168f297 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIBW3ujsEsg6gwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODk3NTYzMDAe Fw0yNjA5MDkxNzQwMzBaFw0yODExMDcxNzQwMzFaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg5NzU2MzAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0nGsVnzpEeLPELmDpBAdncckIuzg6KZYe WcB5wpZ6MpF/i0O1oCNxbqJD8gS4aco7PcCNT5l9mZv1hMGWPQz+0QfDyLtOGM1L aE/FVj7kgvDlvP7rsIOMmPcrw1LbPtMpSejlMmCk2GycBq7WGH3NrdS6w/3mDB5H 7WoLjBT+MSURA/mms2BKblIn1yQAz1ve1I6dOxxodWJoQPJrmUeoBQuHjEfrYRb0 7Vrj0Le4j0AHvU2bZsYjZczcNzaW7diOC5vdRjpNn4G7cthJcy0RgibEqRKcEPw6 7VhEzIwtANSK5fBdKwJLAOUrkct4FPWk7RodTiuB90Q2FcAwTc9bAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTq3h+q RxY9k96bgzJa2ptytvrbyDAfBgNVHSMEGDAWgBTq3h+qRxY9k96bgzJa2ptytvrb yDANBgkqhkiG9w0BAQsFAAOCAQEASS1zk3Hr5OtZ1dd7ZHcdTFXmYVmfBI0C5tlX jwt3jk3j0JhUdE7Mfy8hi8CeWqcKAlIiHhTu6kiQ1bt95h5TwZQGFwfuucePqx4i uAPnljiT2qoI+N0uwGjAZWm9M13P6BbAPn2m4X4V9q0BtnBOvffvAUBBv18VSopt gcyeg0acUql4SEoP3Js7Eetb3f4E8VriX/LSKcXtUH32M0ll0zuXUPuHxyi+k8np 5KzPgCYB1HzELNgkVv3FFoUWyD+jAW7cdrO8mtfOiFXUa5O2+wkOP1FGkJm8AeAv QRBDl/GAG0/2WZ8UL9z/oB85LLqOO7YXr3FeRiAqCOSRzAgI8g== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-09T17:45:01Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-09T17:45:01Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15017" uid: 5f5f8df7-4618-43d1-a256-81cb3892465b - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIBW3ujsEsg6gwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODk3NTYzMDAe Fw0yNjA5MDkxNzQwMzBaFw0yODExMDcxNzQwMzFaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg5NzU2MzAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0nGsVnzpEeLPELmDpBAdncckIuzg6KZYe WcB5wpZ6MpF/i0O1oCNxbqJD8gS4aco7PcCNT5l9mZv1hMGWPQz+0QfDyLtOGM1L aE/FVj7kgvDlvP7rsIOMmPcrw1LbPtMpSejlMmCk2GycBq7WGH3NrdS6w/3mDB5H 7WoLjBT+MSURA/mms2BKblIn1yQAz1ve1I6dOxxodWJoQPJrmUeoBQuHjEfrYRb0 7Vrj0Le4j0AHvU2bZsYjZczcNzaW7diOC5vdRjpNn4G7cthJcy0RgibEqRKcEPw6 7VhEzIwtANSK5fBdKwJLAOUrkct4FPWk7RodTiuB90Q2FcAwTc9bAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTq3h+q RxY9k96bgzJa2ptytvrbyDAfBgNVHSMEGDAWgBTq3h+qRxY9k96bgzJa2ptytvrb yDANBgkqhkiG9w0BAQsFAAOCAQEASS1zk3Hr5OtZ1dd7ZHcdTFXmYVmfBI0C5tlX jwt3jk3j0JhUdE7Mfy8hi8CeWqcKAlIiHhTu6kiQ1bt95h5TwZQGFwfuucePqx4i uAPnljiT2qoI+N0uwGjAZWm9M13P6BbAPn2m4X4V9q0BtnBOvffvAUBBv18VSopt gcyeg0acUql4SEoP3Js7Eetb3f4E8VriX/LSKcXtUH32M0ll0zuXUPuHxyi+k8np 5KzPgCYB1HzELNgkVv3FFoUWyD+jAW7cdrO8mtfOiFXUa5O2+wkOP1FGkJm8AeAv QRBDl/GAG0/2WZ8UL9z/oB85LLqOO7YXr3FeRiAqCOSRzAgI8g== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-09T17:34:27Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-09T17:34:27Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-09T17:40:42Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7816" uid: 85bcdbb0-e1b4-4f61-873d-c107432e73e1 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-09T17:34:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"83c51907-9385-4cf1-8785-149714bf1031"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-09T17:34:17Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 83c51907-9385-4cf1-8785-149714bf1031 resourceVersion: "2377" uid: 5a450fe8-0803-4b04-9ffa-260ac0fad222 kind: ConfigMapList metadata: resourceVersion: "21123"