--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-04T04:40:18Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"c92fb526-16fa-40c4-96cc-0d5c25536277"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-04T04:40:18Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c92fb526-16fa-40c4-96cc-0d5c25536277 resourceVersion: "3521" uid: b75fa281-2b0a-46b9-ace0-41872e3152c8 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-04T04:40:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-11-04T04:40:17Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "3499" uid: 48ac9e4f-4e01-42b1-8621-20a96f703420 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-04T04:40:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"c92fb526-16fa-40c4-96cc-0d5c25536277"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-04T04:40:17Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c92fb526-16fa-40c4-96cc-0d5c25536277 resourceVersion: "3498" uid: fc47e1ed-0f87-45ae-9fbe-09945633a61a - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIa+8RgYaCa5IwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwNDA0MzgyM1oX DTM2MTEwMTA0MzgyM1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jp91yJz55vI kmncXlK8DmwEpanC2XhUrWsFtFGw35rXmYJr3psGcqfcWxv7fSpyzLk17tna0Mie lmyH16QtIX7vCU14foZ90zSe37NJNStJkcTQecBMH2cs2/KdGs4TZmJMQJnXJtri MqRtkHp8lu6bkarc4qV1GBAu+bvCMLw34QBe1QabTSduv69A92tv/fffkJMDRhFg eFxiMEB8+ZnaoJK7vgLUwi0Xf4K0Eq+FcDaN9rgDZfMYXcdWZhCl5HDb6r+sWOBI NDNBcipHu+p02bwpmcijCuVvdriyNtidlLIoxavvlIKDvcjpIZYLDF0SZtauiryC Fv7pxWURwwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAKuhkg4wAiZ9ez6isa0wMWBZx/ZrIkyhDsoNyhS4NsyaEqFsb 1mViC7WHezLl6/GB3LQcuQzW6DJKtMxHqcYXEDANBgkqhkiG9w0BAQsFAAOCAQEA np8vJbkBynlFeE9NH+CoxIP5a+uhL48btxD2jw8r68oU+CKQFB2qtLo30sq+8tEN eTJ+ahuJwDemkLZnztFasT+cDJmvBdSz6hITPpX/2oOm0JuFPg+fc+3h8xFJkwga Av+j8Jgs3AN/9/A7aXIMs5pFOBy2gGyh0nvVUKGj25j6LEmeWnktGAxHG31CTwnf ZmzTJoVAIl/WvdhnAwUiVOCPudFa3oqu8hT5d97zQaBBphY7gAzyxPg4o+Psz1+m v3g6H0/eb2LFiw8oLl5fRmBUzRd96MjrcGCFCxDHnpjEBU/ysffV3UVwAuyiPF5F RaWIRfl8U+Cr3wBtRDJo6w== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIPvmdB1UXkM0wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwNDA0MzgzMFoX DTI3MTEwNDA0MzgzMFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMHSHWJmu4tCdSBB+7+5zmbFSszIoChRHESMpTedN5Kw8dgs7SyqMRYVYHB4FHXp sTM9r3oRjgHGuH32RnlvVM5b2lsyerHH4rZfWDTCtt8n/cCf2USRFG1DGl4AELZn dfcsvgo/r3qEy6VhNvGcqyxOSRy3O6Kv75j+75aKMsPW8/eRkAcO5aIFNoHQDoIX cEVuBcXBMUIp9yCG2d/PwCPBaySJ6MuBs4xg3PNG8C+9754cV+3ooC97Q+aDgcub qVJbL4zUM/8nopJWIOid3fOoMQ5AibUVrTqf3O1Fn11bUSA4WuWl8+AhcYhftgKr qrSFQahQTWE60NFmQheMZVUCAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAnjU/Cy/4cwySnyK9mS1sKxiRf+HsGOBT3Hc3jLIafG9cqsx/GFh/YRPy 6/D2C9vgN+nXj/E2XG486K94EvaXpjBLBgNVHSMERDBCgEAq6GSDjACJn17PqKxr TAxYFnH9msiTKEOyg3KFLg2zJoSoWxvWZWILtYd7MuXr8YHctBy5DNboMkq0zEep xhcQMD4GA1UdEQQ3MDWCMyouYXBwcy5lMGRhYWQ3ZThjY2JiZTViYWNhZS5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAEEaY9Ub705YK 36EnS9OWvxpEHB1dUVxeAXqgnhhoPZ4vN73dKjcJ7tthI1w6z4lY4hq4DN/Ft9sU DDgnWMipFMr6BwCQVmI6I8dTscCOEXg1diwW8NcYqf1AGgsJtyj4gc71dD9S6rmb tB0vwMucnaCIpmsgMN7t42pA+5d9NSeCf+aSpEs4gAkFefJcw2Yukuo8fdsVq2gv nL+iFQxjL7dcF/9GBCjYLKYV+slFzx8dKTxlWL+7iMUegAk2rYpxDVrEk+ZPbZ0T fjyruGfUiCIhTkd4lv83WVRrUgvhFZrfBkFKsomv6qk/J1mUpIf9zdyAYs9qZoml JiTLztO1Og== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-11-04T04:40:32Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-11-04T04:40:32Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4104" uid: 7581b1fd-2b9e-4adb-93ee-8cd0e5a99514 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-11-04T04:40:18Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"c92fb526-16fa-40c4-96cc-0d5c25536277"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-04T04:40:18Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c92fb526-16fa-40c4-96cc-0d5c25536277 resourceVersion: "3568" uid: ca4a699a-ddba-47f3-9b77-f075830e9d13 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIcyu4sG7ndPQwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5Mzc2NzYyNDAe Fw0yNjExMDQwNDQ3MDNaFw0yOTAxMDIwNDQ3MDRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM3Njc2MjQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNXimtzVRhd5mfyVJa3OFIF0+XOFH2Cy3f FUKXYU4jPhs5+N1mdDP7g6nTkZQ6V6cgYOkFiWTmp7lehsy/Lyy1/Ur/Ms2ldF/J Er/xCSMzEHepoUYlZjfC+ZBq2mpqmZLLqI27TjSiEFZWaNc8jbypkcH6/CNka4I1 mGDxImUKQkU02ESZ37iAttfwqAaVInAHda4DOLT9Hj5UO4iFDXOUZEdB0u4BbfHY jlZ00g+0tASs+rKImDZlvCEpTEDzx7eT5c7Ez8iwkozAMn0xKbLMUFrwXL+PbXWj 5AGWDJSg+btux6igi0rcVAmwMPOyVztXcaNMjtaT25n6fGhmeXIlAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+3PrS IPYDoGKCQcnn+wqjNkG07zAfBgNVHSMEGDAWgBQ+3PrSIPYDoGKCQcnn+wqjNkG0 7zANBgkqhkiG9w0BAQsFAAOCAQEAG6Y5mnbAk0e0o2srrF85fY2nGL/nvZTnVDqZ 37AoW8ixaeT7M7dOatnMYWjqV5QRSanv6Lw8fRf+bI9sYjDOamRTDa+1N8dpGjo4 gBh6FeNy4C2dBkwkWZNLBfttGMkhp7uK84FWmZfVwhexyQV1lC3dviMBNirjvQwH feBcJ6LTo3kNshoPhnle9WSC35o6KcWoukRtU6M39gkBquFEIYqfg4OjrfgkGJQK dDDyrrK5xnmkWIFi+CsYpHp2NWm9GTVRuVDEG+rtJeHM+svjgIV+l9nczmBvWVtr UziehSnYmOa1cZnDLDAyUtDYXlIyftp2UjsLh7sDmcrEBOq+pQ== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-11-04T04:54:25Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-11-04T04:54:25Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "18723" uid: f5168351-4c63-4d47-bdee-cfeb92ab4fe2 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIcyu4sG7ndPQwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5Mzc2NzYyNDAe Fw0yNjExMDQwNDQ3MDNaFw0yOTAxMDIwNDQ3MDRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM3Njc2MjQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNXimtzVRhd5mfyVJa3OFIF0+XOFH2Cy3f FUKXYU4jPhs5+N1mdDP7g6nTkZQ6V6cgYOkFiWTmp7lehsy/Lyy1/Ur/Ms2ldF/J Er/xCSMzEHepoUYlZjfC+ZBq2mpqmZLLqI27TjSiEFZWaNc8jbypkcH6/CNka4I1 mGDxImUKQkU02ESZ37iAttfwqAaVInAHda4DOLT9Hj5UO4iFDXOUZEdB0u4BbfHY jlZ00g+0tASs+rKImDZlvCEpTEDzx7eT5c7Ez8iwkozAMn0xKbLMUFrwXL+PbXWj 5AGWDJSg+btux6igi0rcVAmwMPOyVztXcaNMjtaT25n6fGhmeXIlAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+3PrS IPYDoGKCQcnn+wqjNkG07zAfBgNVHSMEGDAWgBQ+3PrSIPYDoGKCQcnn+wqjNkG0 7zANBgkqhkiG9w0BAQsFAAOCAQEAG6Y5mnbAk0e0o2srrF85fY2nGL/nvZTnVDqZ 37AoW8ixaeT7M7dOatnMYWjqV5QRSanv6Lw8fRf+bI9sYjDOamRTDa+1N8dpGjo4 gBh6FeNy4C2dBkwkWZNLBfttGMkhp7uK84FWmZfVwhexyQV1lC3dviMBNirjvQwH feBcJ6LTo3kNshoPhnle9WSC35o6KcWoukRtU6M39gkBquFEIYqfg4OjrfgkGJQK dDDyrrK5xnmkWIFi+CsYpHp2NWm9GTVRuVDEG+rtJeHM+svjgIV+l9nczmBvWVtr UziehSnYmOa1cZnDLDAyUtDYXlIyftp2UjsLh7sDmcrEBOq+pQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-11-04T04:40:31Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-11-04T04:40:31Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-11-04T04:47:12Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "6773" uid: 1c92a346-08ca-4a02-b163-650239096f2f - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-11-04T04:40:18Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"c92fb526-16fa-40c4-96cc-0d5c25536277"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-04T04:40:18Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c92fb526-16fa-40c4-96cc-0d5c25536277 resourceVersion: "3545" uid: 9c2bf312-4813-4005-bff8-f62a752f7406 kind: ConfigMapList metadata: resourceVersion: "43843"