--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-03T21:59:51Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"3ab84d16-d10e-49cd-8240-9f41da84c1da"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-03T21:59:51Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 3ab84d16-d10e-49cd-8240-9f41da84c1da resourceVersion: "2661" uid: 4c5808ff-7a9a-4826-8e09-c15263180630 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-03T21:59:51Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-11-03T21:59:51Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2659" uid: a75b3271-143a-44ce-8146-89e045dbfc40 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-03T21:59:51Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"3ab84d16-d10e-49cd-8240-9f41da84c1da"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-03T21:59:51Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 3ab84d16-d10e-49cd-8240-9f41da84c1da resourceVersion: "2658" uid: 3adc82e9-1101-4714-aecb-f007f1eddd4b - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIMdQvHanWchIwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwMzIxNTgwOFoX DTM2MTAzMTIxNTgwOFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmwVP1+FTFWu AWx51f2Ha4XuT9zWdo9oDG8n5CEEXaF7lAE1z6k4q3y8NlgG05n5UkeNRGNle5iU C2FZRNnptEIMB1LTWFgtI78hS2QAjTqgcw8TrEg9vWbl/dpvFSrktuKBDqtqBshy yfNfELzLH99UpvqNE3/JnVzvutmknLrXZUjMX6X6gUVVkaunt6RbYn2Cn9DB1UWD jElhOJ0UVfddt2dXN0uh0LONsWp6GHHEtyP1cED934uJYk+9+LvtENNNRtddWbw/ CKuy6LH1MFxljS5Qs46oBe3bNA5h4aARTGrqUYqRCK9qklkX3gptoBX9hwrFwapO nQl/MYI03wIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAu64t2yLTs+1H/4Oz/VPiKbxXX4nW9d2RPsELWVXWAVLHEdFU Q3KgmZ+HBibKau5Wc5uKk2S2tPTXIY+0eNyjFTANBgkqhkiG9w0BAQsFAAOCAQEA Yg7MCdn9lhXGw9L7RJ6Es5z7vq4p5Q2DNSuDShbnIM5h6kDT54Y/qbuRYxnBtDi3 JwflEHkKoKWvnk5MCt9KzqrvY1FoaPofT7wJoOCO/7HCKVnav5AJHGN2hkZBEg1K 5N+DAx6Vx1v66/aWa6AaSvCmTi6fEEZisslojpuUhLYI6TLGFBF3Ts7jV4p70z9g FQs+V32lyMMjlDzFTDLcEkucTvqeBwlxaIcUqnaxDJKQmFNJiyic0Y0ViJBHGU+R 6LzkcLHF5yO9T8SYeYKjFuMQ6M6QQp1wImgu5Om5jkHm5aJhcRuvABFqKxEBvzfx 2lcuqEeW7mPgPsA35+tfuA== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIWUvWAWzwPHowDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwMzIxNTgxNFoX DTI3MTEwMzIxNTgxNFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANQ6Dsf1OBDsj57xRgxSluxkN5r9Od0iRWAgMFqbhxyQHLkO9Vyakzu1XZA4602l 9tBkuyH0jHeR2n5rNOLWBqxROnw/9H3+tzWXzvzc/LtiIK0B+7TdlOjWmu259rjy YOO3zVLh3TvQ+NGuK3GfIIyZb6jyFri7YUK4oMav7m8ZqS1xGDCsEz2Z80qruu7y Nh10X7BFShnRhaZ6nldQrTEZcN4jBNl91HgZ4R87HE0yowg4Ap/zrfCqjDHtCUSr NGKmh9CnXLxiC//U17enOBX5POzEfGr5C49FZJSrsC+Ea2dM4MrzQCspozuhGuLH KecXizKF4NPOgs0EmwDd7DsCAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAPymg0y7NHxawGTKydSwXrqjLYrYF+cWr+nYnfr8tXQuxHpPQKK05B9vs ankWlfAbhFmmBoT/SVgw96ovcuYcLzBLBgNVHSMERDBCgEC7ri3bItOz7Uf/g7P9 U+IpvFdfidb13ZE+wQtZVdYBUscR0VRDcqCZn4cGJspq7lZzm4qTZLa09Nchj7R4 3KMVMD4GA1UdEQQ3MDWCMyouYXBwcy40MmQ5NzJjNjM0MWE1ZDk5NTk4Yy5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAxgFDzraSHc1t furc3g49ENs3crldxR/Nrve4HXDgf5VETZ0/0gWAR4OiW4eYCRZl69rSFpVtxS/l t4Avea/G5lhB7mH3230obfJHLoY5LJAvdDyCNuG4poK1+qD/Mub5rOJhdEG1ZuI3 dLWsI0RjOy3lHBYMTJ4O92No+XCqZ2OqsUACGwI3b4IhDNB2IVETvFeTS4K+wmcf Qwqz3MeUCWiDm0rmvKFMI47yHoLJjmAdnwJCCYMfuPsQwL2JfzsWQPvjM7k2Kp9l xdILjVr1gq5J7JYCdlTRv3nR/QIGnSp7IkJLqz83QUuHiuA9ALT7Q83srGNsCu3n jvOLX+Mzgw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-11-03T22:00:03Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-11-03T22:00:03Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2941" uid: 5873fa3f-5c52-48bf-9608-96b1ba48c3d6 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-11-03T21:59:51Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"3ab84d16-d10e-49cd-8240-9f41da84c1da"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-03T21:59:51Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 3ab84d16-d10e-49cd-8240-9f41da84c1da resourceVersion: "2664" uid: 4e6d8e0c-d048-4cc9-863b-c5309af4eb7d - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIQ54nGXIuYOwwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5Mzc0MzYyOTAe Fw0yNjExMDMyMjA3MDhaFw0yOTAxMDEyMjA3MDlaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM3NDM2MjkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3th/SYTPF4JkuaQCTopkFGL/kgDdo7VhK k8HqiMbk4W5lVHiOUJOF4njLQF/r94/bXEfOkZH+ArxkSUCPJFecLpjD7kMl8AOh +LW97URvL1rKAsW4hsfhZ2+Ld4wEo7SUffbBeKRvHDGkeg6lRTuhfa/QgIbajR3+ lq7znMBM2MPorboq1ocWno2PzIFjkzlZWl5xaCycjH5PaiSRLgLy1hKkaIG4uks3 +0s3Tgkj+CcKEKqdBl4B0c4zR47YNqkmuowuCYfmr2fo1Tpc3hr/WE7Bik/SEu/Y hH/SVy9QmYBX8PSboOnDdUZrfBf9JZQ2bXYAVoXp3umKZWzt1iaZAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRSlEs0 soP+dydhbkbR6TBfOx145jAfBgNVHSMEGDAWgBRSlEs0soP+dydhbkbR6TBfOx14 5jANBgkqhkiG9w0BAQsFAAOCAQEAoy7eNNfVm/OsFxscLv4dmTWVMZIDIUhYMMGH Lh0BZQzEjhigsMm79mgiooE6nVbiNFRQ7s5w5bljaYVaOcT+G9Nrjm0XwYDatkD+ axIlobf6PqHDFJZFXq4tyDwhNlHmyHmAXkxQryvgFk2UyDoIjU9Ls1pG7GbvQh8s Gy7Mtu9Prc5oIvTfFNqmHsP5krOcVzUiri23g/1kZbQjCE/pcp4JKu8PpHoqimaw xlrY2nXfi7ml/T29U6R5T1eSdcmN7EMGeMhnopndyyNzvBR7tpkr/x50RL5Ug8OZ XZDECy0/7nXnUKWnjGK1KxrqLuMsblWLmnfafJykxKdzk2NDQg== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-11-03T22:14:53Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-11-03T22:14:53Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "18423" uid: 30c150f5-f854-456e-a5a9-9b77ca5bad18 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIQ54nGXIuYOwwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5Mzc0MzYyOTAe Fw0yNjExMDMyMjA3MDhaFw0yOTAxMDEyMjA3MDlaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM3NDM2MjkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3th/SYTPF4JkuaQCTopkFGL/kgDdo7VhK k8HqiMbk4W5lVHiOUJOF4njLQF/r94/bXEfOkZH+ArxkSUCPJFecLpjD7kMl8AOh +LW97URvL1rKAsW4hsfhZ2+Ld4wEo7SUffbBeKRvHDGkeg6lRTuhfa/QgIbajR3+ lq7znMBM2MPorboq1ocWno2PzIFjkzlZWl5xaCycjH5PaiSRLgLy1hKkaIG4uks3 +0s3Tgkj+CcKEKqdBl4B0c4zR47YNqkmuowuCYfmr2fo1Tpc3hr/WE7Bik/SEu/Y hH/SVy9QmYBX8PSboOnDdUZrfBf9JZQ2bXYAVoXp3umKZWzt1iaZAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRSlEs0 soP+dydhbkbR6TBfOx145jAfBgNVHSMEGDAWgBRSlEs0soP+dydhbkbR6TBfOx14 5jANBgkqhkiG9w0BAQsFAAOCAQEAoy7eNNfVm/OsFxscLv4dmTWVMZIDIUhYMMGH Lh0BZQzEjhigsMm79mgiooE6nVbiNFRQ7s5w5bljaYVaOcT+G9Nrjm0XwYDatkD+ axIlobf6PqHDFJZFXq4tyDwhNlHmyHmAXkxQryvgFk2UyDoIjU9Ls1pG7GbvQh8s Gy7Mtu9Prc5oIvTfFNqmHsP5krOcVzUiri23g/1kZbQjCE/pcp4JKu8PpHoqimaw xlrY2nXfi7ml/T29U6R5T1eSdcmN7EMGeMhnopndyyNzvBR7tpkr/x50RL5Ug8OZ XZDECy0/7nXnUKWnjGK1KxrqLuMsblWLmnfafJykxKdzk2NDQg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-11-03T22:00:03Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-11-03T22:00:03Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-11-03T22:07:15Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7005" uid: b70a7d90-1201-4d46-ad75-2a2dd36fc0e0 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-11-03T21:59:51Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"3ab84d16-d10e-49cd-8240-9f41da84c1da"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-03T21:59:51Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 3ab84d16-d10e-49cd-8240-9f41da84c1da resourceVersion: "2662" uid: 81f8def5-38ef-40e5-b23b-3c73dd84addf kind: ConfigMapList metadata: resourceVersion: "111910"