--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-02T17:33:05Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"ecbdc5e2-3326-4a43-a0e8-9856da3d4f82"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-02T17:33:05Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: ecbdc5e2-3326-4a43-a0e8-9856da3d4f82 resourceVersion: "2289" uid: 34a29c2a-d27f-4f96-898b-e3e42ebe12ad - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-02T17:33:04Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-11-02T17:33:04Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2286" uid: b43c4c94-8940-4cc4-9ed4-f8405bd5ec24 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-02T17:33:04Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"ecbdc5e2-3326-4a43-a0e8-9856da3d4f82"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-02T17:33:04Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: ecbdc5e2-3326-4a43-a0e8-9856da3d4f82 resourceVersion: "2285" uid: ff7040d4-0af6-4650-bc16-06506d8f0f42 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIdi3gW0UA3LkwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwMjE3MzA1OFoX DTM2MTAzMDE3MzA1OFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS/Lwp3Hcppi 2IqA5fbhWqIIBoS2eA55CkzmatGIZLCWyl21To4MX4YJN7TDcp17JQiHXweQJWiB /enPsMaaY9OZaCgl74WzcH4ikLux/cRchny9VMvNNFODvmKVABVrFx/vtcthVGxl 5AXzPqWOuIEgzXJ3JPTTXnaAMztpY6K93huq6Esrc3ml1crebhJUFaZagN/O4VAL 1Hs6RB0f8zztJhwK9Vv7GFPGGBQ104gor4P+LJ38LXTIILH12w2xuQ72YhYkDEgX mugmaA1fLNzCj3BpgDgykUxMnoMF0ItspnoUJFb8oeaGj6jdW/lc/M/7kd1EK6eJ rSvOlE+fBQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA9x+DcI8qtI7lRDgVTljcJZsi6IWwvrs6q0SCVsNxx70SN5NF TNiT5dd4v46Ap8ycSsHPpTRv62SSAGFxkFyznDANBgkqhkiG9w0BAQsFAAOCAQEA ZH44qyj1TnVALZtjlP+2FL4e+/uTPIdVM8H6xwPBuSTmTixjXek+7MB+L/9iHG8m hc+HDEbeSjX9CAPIMgzwIrxl9i3aftwwArv0DofPJudZeXTbgrDnXj9didd+XpUR YEe8yWoYRQ+AtVnCaKhDpLF6LgX+LqYWbuEbxuv60NlBORijGmV4LzEPbmkDv9JF 41ywuTWuqsiggfFhjvb23GNfe3DFibbjvoGo0NRYYbupXyLAiy+zTKQ09USl43xd O/z4aFSoeEvuPOcD+g6FbRAt212Eh9ismw/OfZ6lho/R15rgdnQv9HHOd75p0jHS FG2WdE+7X9QIHAjIF6rSrA== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIUsaPc4koc/UwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwMjE3MzEwN1oX DTI3MTEwMjE3MzEwN1owMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AK8fu9pOxi1LCMtVe0dXuWwJ4CsqZZNxPz9R2cjL9BAvTZ5Od0BRNUd9H1Dwkixr nZkdGL6nu/VnVCCM3RelinOeRtFkjD7cAv8ZHI7DPDgdcvyD48vL0b21eqoEYavw IUpv8bzQ2G3ZJ5an2j1rj7Q/1EjKZljOdJROcyKXhHJByjGwh7lKnNSjRMCo6J8V ee8z2oQilLbkWbziAhv/xQawB2lma/SYIzgYq1Tn2jWuMRHZSXQOpE2qlE97Fnpg DQL+asesftFlyR7VcsfAfiw6O4hrgyUq0ztMUAWp0PCxLlaXETe/7Ya8zodwWONc vc6ZJsnVLX13mctu5uxKWW0CAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAifOptdaLJy6dHIaLooU6M/VwEs78qEP9LQ2N+/JZ4X8drdXqqbnmT9WG qibwjuHtQ6tZGorTXH9YiiSoBwZ7FzBLBgNVHSMERDBCgED3H4Nwjyq0juVEOBVO WNwlmyLohbC+uzqrRIJWw3HHvRI3k0VM2JPl13i/joCnzJxKwc+lNG/rZJIAYXGQ XLOcMD4GA1UdEQQ3MDWCMyouYXBwcy5kZjQ2NWYyMzlhNGY4MWU2NTQyMC5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAGEBBSjgqYKhM nAUvD/LMXRsnRlWo3QEsXvgxhdPbe9rQVCiB/yRK8uIk5cMfwfaxSo0fZBqSygFa yLTBruzWBm9mCj8ZKAAzH0bfI4g5J7oOXgVu/iRMV2MiE55Dyvcr56Yo7uRrI2eA Q9KU+6xzJ2zN0H5dkjJ4XJsGhe9uJgN+3YKja48/euB2KByzjkX7fWjZGkKUZr/p JvXIfdWg/cMtDQg3Ws4xbJutKRjojdMTSmZIO2kuROlVwzbKvzngBFp+cb0tv4hj j9sywjTI2h328tfz4W7ZqQJ3m8bLSeINKEs1zm0n2B0SHGhgyHVAxJL37f+hWVG0 GQgWENjzbg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-11-02T17:33:16Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-11-02T17:33:16Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2658" uid: 54b4f235-dafe-439c-9964-f0563180abe7 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-11-02T17:33:05Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"ecbdc5e2-3326-4a43-a0e8-9856da3d4f82"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-02T17:33:05Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: ecbdc5e2-3326-4a43-a0e8-9856da3d4f82 resourceVersion: "2296" uid: ab607ae9-d8a6-44d1-a304-2fde14e27d21 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIcsrUlDA0FS4wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzY0MTE5MTAe Fw0yNjExMDIxNzM5NTBaFw0yODEyMzExNzM5NTFaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM2NDExOTEwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOlG84jI5SCuLklIPe7s8CuENlMPZ5ayxL DLVWouEDKc3C3KkeTP1lz5+5ofQCQbNiE511iMNHuwMai+dJ4VwYIA8+BaIKQeej LcQTrDhMBozDVUal/ukcIy9wWtNS3NVLXCYudZVkNFoSv3YEA1tew5z5g+ELdccw Qh4WT6xeMQMXGIRXCWhr2HljqOlMOdzQQh8GDIXV2fuOOi8dhSLcfZSsaO1sZDOs be/LNf24d1KmSEwYlntmmC7oF73gpQX4p0+A3P3lBOKv6gNhyVPyUv2UCIoWyEjA 1Bo90QZMWCj/hT9eI9cq2RKhXj1qzmeJ1A3e6RLw69QoVqCbrH2HAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvtGjs GA6ct6twGn4a/QL/sxoumjAfBgNVHSMEGDAWgBTvtGjsGA6ct6twGn4a/QL/sxou mjANBgkqhkiG9w0BAQsFAAOCAQEAjWadmxthG62y4h37L4BrK6Lyd1V6t16w1hAh tn1yNP+UjEVY5xRBd9DVGT4KtR+6USgH6C9UfyLyFIFORQDkXEbahZKWOOBIjroX tuF40v96E/sYqA9Z791PXf/2gGzHdxKaR4x6/AmJ1Bpe/Q8CAM0q3MZTwibj1DoK 9VIF9/Tj921MAj4L592IVKlRzESB7PqKVe9++n4nW3AUuqIZVsfS9WmwJrUXQSv3 sTzp9tYgBmk5Z6QcR9KOFft7drJsSVPIaxkAjo9lU0jOZFa4FRjrZ0EdnsOcBMrg aeIJEmND9GUW1xFB9PdMesFFSWTYJFeqppiMGg0Gw6z++FnNbA== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-11-02T17:45:38Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-11-02T17:45:38Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "16595" uid: 10c40c37-d850-4bb4-bc49-17f0448ebc72 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIcsrUlDA0FS4wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzY0MTE5MTAe Fw0yNjExMDIxNzM5NTBaFw0yODEyMzExNzM5NTFaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM2NDExOTEwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOlG84jI5SCuLklIPe7s8CuENlMPZ5ayxL DLVWouEDKc3C3KkeTP1lz5+5ofQCQbNiE511iMNHuwMai+dJ4VwYIA8+BaIKQeej LcQTrDhMBozDVUal/ukcIy9wWtNS3NVLXCYudZVkNFoSv3YEA1tew5z5g+ELdccw Qh4WT6xeMQMXGIRXCWhr2HljqOlMOdzQQh8GDIXV2fuOOi8dhSLcfZSsaO1sZDOs be/LNf24d1KmSEwYlntmmC7oF73gpQX4p0+A3P3lBOKv6gNhyVPyUv2UCIoWyEjA 1Bo90QZMWCj/hT9eI9cq2RKhXj1qzmeJ1A3e6RLw69QoVqCbrH2HAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvtGjs GA6ct6twGn4a/QL/sxoumjAfBgNVHSMEGDAWgBTvtGjsGA6ct6twGn4a/QL/sxou mjANBgkqhkiG9w0BAQsFAAOCAQEAjWadmxthG62y4h37L4BrK6Lyd1V6t16w1hAh tn1yNP+UjEVY5xRBd9DVGT4KtR+6USgH6C9UfyLyFIFORQDkXEbahZKWOOBIjroX tuF40v96E/sYqA9Z791PXf/2gGzHdxKaR4x6/AmJ1Bpe/Q8CAM0q3MZTwibj1DoK 9VIF9/Tj921MAj4L592IVKlRzESB7PqKVe9++n4nW3AUuqIZVsfS9WmwJrUXQSv3 sTzp9tYgBmk5Z6QcR9KOFft7drJsSVPIaxkAjo9lU0jOZFa4FRjrZ0EdnsOcBMrg aeIJEmND9GUW1xFB9PdMesFFSWTYJFeqppiMGg0Gw6z++FnNbA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-11-02T17:33:16Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-11-02T17:33:16Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-11-02T17:39:58Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7118" uid: 28ffd72c-d02a-4bca-9117-58c39611ea1b - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-11-02T17:33:05Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"ecbdc5e2-3326-4a43-a0e8-9856da3d4f82"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-02T17:33:05Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: ecbdc5e2-3326-4a43-a0e8-9856da3d4f82 resourceVersion: "2290" uid: 46f86b3b-d272-43b3-881b-bc52377cd3f0 kind: ConfigMapList metadata: resourceVersion: "91575"