--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T21:48:55Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"c70f36df-2902-4edc-938b-a8cb0cd921dd"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T21:48:55Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c70f36df-2902-4edc-938b-a8cb0cd921dd resourceVersion: "2505" uid: 3f1fbbf7-3ac4-4669-87cc-69bd51c56eee - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T21:48:54Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-10-30T21:48:54Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2489" uid: 37ed40cb-2ee7-4601-9d80-cba200f6bb2b - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T21:48:54Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"c70f36df-2902-4edc-938b-a8cb0cd921dd"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T21:48:54Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c70f36df-2902-4edc-938b-a8cb0cd921dd resourceVersion: "2487" uid: cd0debb9-7082-4af0-9579-0ae5147d56c0 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIdeORXLCsxbEwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDIxNDYxNFoX DTM2MTAyNzIxNDYxNFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc02RbEyMBzq Gj+EOhB+lYm9DhnbMp40a+VywilbL7zyidHlQjL5FyJnmA+uEON18B0CkMOXKBKP z4JEHGDesB77A6426MhQ26+I7is1UFU5DpVYIKB0AenBrW8PHuAlB635ymq4xHKv zCwyZtY7fCVmSvSue4OAmQwvTaG7qWz3z58B2k5Aun/qnRH5DIHF85OKTA5OGAai XiVunYyKu0+/c8/147Jr3LCrg/XPdzOX81wXbSyeEIlFkm8tzIqhOQ6ErPzOOLan V2vS0SR+KLKo6fWhdl9iA+f31vlY0TmL8tQO6NLo9fKKhcAFIdqCcvTWI7wCA//U lpwLSqQ45wIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAY4dTBaEvSxV/ko2cqGfeMn9QIPxndOnNNhIDY6qumh6x/+UW Kd0tUCAeoEFgySYqKyh+vCN/obdXr4Qk5h+z0jANBgkqhkiG9w0BAQsFAAOCAQEA ko1p62LVubGnNJwgYo22WmqozgpbehWnK6SmY6xoH87PMrYOktJASwMAJAyb4kx7 x5OMoLSbYTEhX/BIlvghsetrXGJWC0pXu0zWnoSra+LIIdlIKVf6GXzO0nyZHQ4a xsY0o0iI64pz3h4Nh0mrJNBI+ZfEXC+uf1laYs5NvU/g7DyESnCOCTTuFlUlWMkZ miie+orSupOoZ6pNgcHxdD3LYeysEjaUDbOAGaMRbDY2Q7+AnnNkQKFaUrthvFUv vR6GbGNMLACVfSwmw1yAKFLCPUSZfAAg2zDirMJjXjm+09YiQRKnJPeD1vUdBype NW3GaEdXfcoCPDrmaPkStQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIQCHzsVw3hTMwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDIxNDYzM1oX DTI3MTAzMDIxNDYzM1owMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKuge72kofPJmfScAFMB5o9Vpl5k8mganWswvm0/uiIoJbbX76bLxLKqYxMP0RX+ MS4T7WZaSyU3V9EalOqK9jQUIdI8+9Q54lP2Igb5TuYio7iZk9FQ8v576n3uoRiO kagK73eKjSlS/hpj4iN6KxutkgohmeVyNPYze1iHO+CSnUWqe5ywLKyf3JHKjgev ZhoeuNAT4QlLK0DdVD0/t1pooe96Nh36PfdjqsOggjIdvKcX30aoZPXVYgAnYP+P d1SU/MZrajmBx/vRyZmXdsIqJHYd8WcwabDA6BRMoMfRLkMaGXHutk5LCqFHLaSj ebMDQxJWMdOSvUd7Jg5qIM0CAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAja4pMv7QNWQygaZLj7wjOnlmIkrsQUAa2GurHcWAgGE/EDpLs4sgUNpR /JFu74yF12PhJ5deOp3t25xzhBQ/3zBLBgNVHSMERDBCgEBjh1MFoS9LFX+SjZyo Z94yf1Ag/Gd06c02EgNjqq6aHrH/5RYp3S1QIB6gQWDJJiorKH68I3+ht1evhCTm H7PSMD4GA1UdEQQ3MDWCMyouYXBwcy41ZjU5ODVkMTliMmJhZjE4OTU5Yy5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAFdqzdWm82haX Y1ON9mFL8AzSXuUdOWVDh9BvFtpmNfufRJqG+7leVQWyfKs7YlCPd2NePtibG6BP KkJu7dAzNTLJurET/K/RpH9fORlpuxfkHSCtn3ufJyr2G0Nn4A6LsWP8Nyfo/W84 LJC9fbMUa2i6e4MVoNBSEoCxfyytIryUDNvOa1YCpTKlNjGfLWAOhN0tfSHiOKRN bZBJlC6k2xBRSHUuwcuTXqLHWDGaT0AUX3aUsZtb5HF23u8eDF2qthkxK2O9jwNi O0zMuaxsHixcRqM9HiiacHCj8AOloWZ2CSXOmLUT95hCWSBUfG2LQt2up31h8fiW 6uZBxHtFuQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-10-30T21:49:08Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-10-30T21:49:08Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3968" uid: 1ef0915e-096c-4aeb-958f-f6e784132e2e - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-10-30T21:48:55Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"c70f36df-2902-4edc-938b-a8cb0cd921dd"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T21:48:55Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c70f36df-2902-4edc-938b-a8cb0cd921dd resourceVersion: "2518" uid: 6e328f4f-088c-497e-a971-ebd8781f874e - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIEG0CzKKmqRQwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzM5NzI2MTAe Fw0yNjEwMzAyMTU0MjBaFw0yODEyMjgyMTU0MjFaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTMzOTcyNjEwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWOayGqbBfq4dd3h+tG7FnssmjMYuq9yAh MR+HGT+EWS3YrmQ3rcCqDYv0D8Ze0w9nxfKR8PPDAz0vq8YakrWFV+AX3LXFq9d8 OJyDBR+6zifLjfdCw/MTwavK4MqFZUnpNKeqNe3rXczTR6VWL8SkUXPuukY9F9Xe ZQ+FVvQ8L+CV3T7ffhjrOttD9c2FBvR4pOUxcehRkbwYudRieDVSc1oMPyX+bjaR DY96+t1DYhj3dEEPbKTNt6XFiJYws99ic4PJNdxzGrFRCsjCLl0um7xaeBb1hWgN XiCMst7y6mBfSGFV+uqJ9YrRVA+tE0cHYGPMy3fkLVNg9L0YT1pPAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTiKW/f C1IoEpF6+241SZ5UU9N8zzAfBgNVHSMEGDAWgBTiKW/fC1IoEpF6+241SZ5UU9N8 zzANBgkqhkiG9w0BAQsFAAOCAQEALZMSJu9O6qdOTSj6hAmkOPgPAyacBj3/gELl Oz6lbOHVtfpUFwRd3fahnBW9fQ0Mk0NnUNgaZHzuAY8dAITE/7uCNnwT8Airq1lK yv7EXbimw6ywVompi9uPYpQdjxyuGZ3+TAjWG1Hnw1KGyBDxN0HpiRVOGGMLnV9h xpcJQJQ6CGCb1mLw39FODtRulUvh4VXg/ZS+yfkz2AYCqfLBVDGm6ZBc7tpGTXXt J+AaaPZccUk4WnIiu4+EpnIX883ONFBQqRbjmFXURDb0ZoeQmBAAXhgqVlu7mwXq zbalAsohJuDIt102udhHi2vBnG3xISjEbL4sPQ6GccC0C23REA== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-10-30T22:03:04Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-10-30T22:03:04Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "17962" uid: c26f8bbe-f159-4c8f-a44c-efbb67c1631c - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIEG0CzKKmqRQwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzM5NzI2MTAe Fw0yNjEwMzAyMTU0MjBaFw0yODEyMjgyMTU0MjFaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTMzOTcyNjEwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWOayGqbBfq4dd3h+tG7FnssmjMYuq9yAh MR+HGT+EWS3YrmQ3rcCqDYv0D8Ze0w9nxfKR8PPDAz0vq8YakrWFV+AX3LXFq9d8 OJyDBR+6zifLjfdCw/MTwavK4MqFZUnpNKeqNe3rXczTR6VWL8SkUXPuukY9F9Xe ZQ+FVvQ8L+CV3T7ffhjrOttD9c2FBvR4pOUxcehRkbwYudRieDVSc1oMPyX+bjaR DY96+t1DYhj3dEEPbKTNt6XFiJYws99ic4PJNdxzGrFRCsjCLl0um7xaeBb1hWgN XiCMst7y6mBfSGFV+uqJ9YrRVA+tE0cHYGPMy3fkLVNg9L0YT1pPAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTiKW/f C1IoEpF6+241SZ5UU9N8zzAfBgNVHSMEGDAWgBTiKW/fC1IoEpF6+241SZ5UU9N8 zzANBgkqhkiG9w0BAQsFAAOCAQEALZMSJu9O6qdOTSj6hAmkOPgPAyacBj3/gELl Oz6lbOHVtfpUFwRd3fahnBW9fQ0Mk0NnUNgaZHzuAY8dAITE/7uCNnwT8Airq1lK yv7EXbimw6ywVompi9uPYpQdjxyuGZ3+TAjWG1Hnw1KGyBDxN0HpiRVOGGMLnV9h xpcJQJQ6CGCb1mLw39FODtRulUvh4VXg/ZS+yfkz2AYCqfLBVDGm6ZBc7tpGTXXt J+AaaPZccUk4WnIiu4+EpnIX883ONFBQqRbjmFXURDb0ZoeQmBAAXhgqVlu7mwXq zbalAsohJuDIt102udhHi2vBnG3xISjEbL4sPQ6GccC0C23REA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-10-30T21:49:07Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-10-30T21:49:07Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-10-30T21:54:39Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "6915" uid: 0bd252ae-9b10-424f-adcb-3e1b849b5bae - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-10-30T21:48:55Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"c70f36df-2902-4edc-938b-a8cb0cd921dd"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T21:48:55Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c70f36df-2902-4edc-938b-a8cb0cd921dd resourceVersion: "2511" uid: 9eda2b84-272c-440f-ab2a-1c247f7b5639 kind: ConfigMapList metadata: resourceVersion: "105830"