---
apiVersion: v1
items:
- apiVersion: v1
  data:
    cnibincopy.sh: |-
      #!/bin/bash
      set -e

      function log()
      {
          echo "$(date --iso-8601=seconds) [cnibincopy] ${1}"
      }

      DESTINATION_DIRECTORY=/host/opt/cni/bin/

      # Perform validation of usage
      if [ -z "$SOURCE_DIRECTORY" ]; then
        log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable"
        exit 1
      fi

      if [ ! -d "$DESTINATION_DIRECTORY" ]; then
        log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist"
        exit 1
      fi

      sourcedir="${SOURCE_DIRECTORY}"
      log "Copying binaries from ${sourcedir}"

      # Use a subdirectory called "upgrade" so we can atomically move fully copied files.
      # We now use --remove-destination after running into an issue with -f not working over symlinks
      UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen)
      rm -Rf $UPGRADE_DIRECTORY
      mkdir -p $UPGRADE_DIRECTORY
      find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \;
      if [ $? -eq 0 ]; then
        log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY"
      else
        log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/
      if [ $? -eq 0 ]; then
        log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
      else
        log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      rm -Rf $UPGRADE_DIRECTORY
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        This is a script used to copy CNI binaries based on host OS
      release.openshift.io/version: 4.21.33
    creationTimestamp: "2026-09-10T20:49:05Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:cnibincopy.sh: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"725488fe-d3f3-4aaa-b30d-d858dace9155"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-10T20:49:05Z"
    name: cni-copy-resources
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 725488fe-d3f3-4aaa-b30d-d858dace9155
    resourceVersion: "2374"
    uid: eb957d35-3685-4938-a91d-651d13b8adcb
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.33
    creationTimestamp: "2026-09-10T20:49:04Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
      manager: network-operator
      operation: Update
      time: "2026-09-10T20:49:04Z"
    name: cni-sysctl-allowlist
    namespace: openshift-multus
    resourceVersion: "2369"
    uid: ef7759fb-5d42-4e33-8eb6-4528cd876ea9
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.33
    creationTimestamp: "2026-09-10T20:49:04Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"725488fe-d3f3-4aaa-b30d-d858dace9155"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-10T20:49:04Z"
    name: default-cni-sysctl-allowlist
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 725488fe-d3f3-4aaa-b30d-d858dace9155
    resourceVersion: "2368"
    uid: 9c55a5b5-4b69-41ea-af29-cf5c869bfa49
- apiVersion: v1
  data:
    ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDPDCCAiSgAwIBAgIIBgngFoPErSUwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMDIwNDYxM1oX
      DTM2MDkwNzIwNDYxM1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy
      b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyedh+hzZqEoR
      0WmkEGXFV0z1376jVEpKEL5Tup1lZlFhQAk5giM29a+Xn+URJzltCGEnwpaE5b45
      +YUhdarbzvcgLkUk5o4HA84ZDh8m/EZ3fxy4pdQZREm3sYQXVH23fXAYUKTJpod5
      NNLIj+zORJrVfgILbJr9zh4O8qT3suj82grc7y547Olvbuf1CuWiD4bfs9dnVVvd
      9giEDfGPA1Owi+ZnZLtZ+JEvjWSx2rKyyPwE4rwUl34QvQ028c39YgJTE0nkL2ja
      INeXFj6PPBODbNB745GdzNJx9PX6kIW8KvQ0jhWVhBF5Iisa84J9705GnfX1CBn0
      fD7PRu6tQQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB
      /zBJBgNVHQ4EQgRAcq557eopVxLY3iY0ysFtn2NDgbxqhKztoeTYC1FnA1Yx5rJe
      st+QnIwoRUcGdoxnw8+RUFaZV77fLRKoBUK1RjANBgkqhkiG9w0BAQsFAAOCAQEA
      bFSs6ClppAuJ1E/lh1LB6TthpJCz6okbCqmYBkzCia3vVNS7xpBY/0nvHhY6NzC8
      8K0jHVODbMFn9DXHHx5kJXIIe1dbeMj1ZHlHdgkw/qZ4h9oUxLzifxpNWhcHoqUZ
      R9KMCLrdLju6/FH6agYYZXzwVu0fL5Sl+4PdejMFuuKWKvNYkXSZ4RT/En6TVhm3
      +y1bTQpDKZfjMFOiis+VfOaEnXWBAicKGMoAlH7bduDATr1OTFyNknlPmHQzDp0C
      Fnl4KK+iLBeIeARthXwqvPXZsMtxPRGQMspEA7cb7O82mWtjLPAAhXBdPt36gYJB
      7nX4aq5c+H/aeHYaIkxOwg==
      -----END CERTIFICATE-----
      -----BEGIN CERTIFICATE-----
      MIIEADCCAuigAwIBAgIIZ+U6zIeIP+8wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMDIwNDY1OVoX
      DTI3MDkxMDIwNDY1OVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv
      cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
      AOEiCp2//PNKiU2ECWGfv7/gfd4snyZCuBFhae5xGQb6ewsr126T8e63plfevYQK
      jXe6JHbI6aDPJ+59z/wsQO1iCuCqETvOsRVKTyTkhTTn3PTkfhx1BdTKo4n/9z1M
      MVxU3s5y6AbzkJDwRLs68scrLjk90NuWoGclj0JsLpUjR7GBCpBZkuTA8Kx2TMT3
      pXpOaNDZ3X8BoEgkhr9ELkj6MECGcF5e+eGq3VDRTvE4XCjE79d9h6Bbud2Q/e3I
      yjKyuY0A0ZxC28CeCWAg3+RmubqONWEQxHHMg1HHcTo0OM1ZnuqYqWL/Bbj1hjCD
      TmXkpx3ohyVXLX4mljR29aECAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd
      BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV
      HQ4EQgRAuPkKicjzFz2z6uOxt2+kNzAPd8e+KMLYhXAvdJN3BFE8QqfAlCqjhGBT
      8nEXLoFLKg86b5mYoCld0ukhKbReqjBLBgNVHSMERDBCgEByrnnt6ilXEtjeJjTK
      wW2fY0OBvGqErO2h5NgLUWcDVjHmsl6y35CcjChFRwZ2jGfDz5FQVplXvt8tEqgF
      QrVGMEsGA1UdEQREMEKCQCouYXBwcy4yYzdmODNlZS04YTgyLTRhYjYtOWZkMi0w
      YjNkZjM1ZmQwNzkucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD
      ggEBAHFZU9YxSJe/fRbDE0bQWJiDM/lLDwjiwamxyH8Ymo1DhINSNa0JPJOMzQEw
      62c1LYPUFIrb1sKGw3twLXmeFYAvQvS/H/PGeH1vqgADjUHQ2cP0PLCIgbE72axD
      87euQL4VUbWiD9IV72G2vuLPk8c4I8tjNhEWTeisqloFG5sO8tptopjDZ7QZD2E0
      I8ye2vERcutpxNnmScHzy0uYUTE4yyUKtKCBEmsx5SUP28s0cADaxs3ro8cji5X4
      4NTN+pL/N2A++CsATR/l5u4xf9cScMRc3OX4lgA1VsknoJTUCSci2okhtZwxYYL6
      NNddmFLGNfAAceX3ntHX9bZcyzw=
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: Contains a CA bundle that can be used to verify the
        kube-apiserver when using internal endpoints such as the internal service
        IP or kubernetes.default.svc. No other usage is guaranteed across distributions
        of Kubernetes clusters.
    creationTimestamp: "2026-09-10T20:49:02Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:ca.crt: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-10T20:49:27Z"
    name: kube-root-ca.crt
    namespace: openshift-multus
    resourceVersion: "4006"
    uid: a0d66951-bd9b-4205-b300-7133c15177e6
- apiVersion: v1
  data:
    daemon-config.json: |
      {
          "cniVersion": "0.3.1",
          "chrootDir": "/hostroot",
          "logToStderr": true,
          "logLevel": "verbose",
          "binDir": "/var/lib/cni/bin",

          "perNodeCertificate": {
            "enabled": true,
            "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig",
            "certDir": "/etc/cni/multus/certs",
            "certDuration": "24h"
          },

          "cniConfigDir": "/host/etc/cni/net.d",
          "multusConfigFile": "auto",
          "multusAutoconfigDir": "/host/run/multus/cni/net.d",
          "namespaceIsolation": true,
          "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv",
          "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf",
          "daemonSocketDir": "/run/multus/socket",
          "socketDir": "/host/run/multus/socket",
          "auxiliaryCNIChainName": "vendor-cni-chain"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-09-10T20:49:05Z"
    labels:
      app: multus
      tier: node
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:daemon-config.json: {}
        f:metadata:
          f:labels:
            f:app: {}
            f:tier: {}
          f:ownerReferences:
            k:{"uid":"725488fe-d3f3-4aaa-b30d-d858dace9155"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-10T20:49:05Z"
    name: multus-daemon-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 725488fe-d3f3-4aaa-b30d-d858dace9155
    resourceVersion: "2379"
    uid: 4b123f13-155b-44c9-9c7b-52583b86c772
- apiVersion: v1
  data:
    service-ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDUTCCAjmgAwIBAgIIfEklY4PLtrcwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE
      Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTA3MzcwODAe
      Fw0yNjA5MTAyMDU1MDhaFw0yODExMDgyMDU1MDlaMDYxNDAyBgNVBAMMK29wZW5z
      aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkwNzM3MDgwggEiMA0GCSqG
      SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTVrOriA6Kk1iqMcipKo/ifr7xTGBXgy4x
      Mq0xp6PEIsMCQK+sVxmVEr8d4pNeCOOicZGb5YOcrbAbQCtrMA7Znir6SKcxmPJR
      MU+rqCRAwDEnhZPzn1mYbiF5zWaAmarXYiYYKPz4qj3cX+cXzt04DLiuEtjxUyYs
      UWuJzDAJKfndlE+/dJDyZr3TagcBxaTka2On72fzduYbW8+Kk3bsa6R6VSotM3B+
      D3hqjCf5uwTNU3EX4M28dRpk8jERdZs6utpxSjdgE9S64MsgO3D1IgXg0QUOCNnv
      vNCR/XGjVdnXWDrm4wra+9xFRobypLnGZdDZ+ysQphaMRNyA/ToXAgMBAAGjYzBh
      MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQAxseH
      AFL6OTUBwXKKVFe9pQSv5jAfBgNVHSMEGDAWgBQAxseHAFL6OTUBwXKKVFe9pQSv
      5jANBgkqhkiG9w0BAQsFAAOCAQEAw3N/f81xLB4O9z7+k3bXmaku+OZNYuoU19+S
      AFtcuk3G2aOzqTwta6bHcNOG3pXxUU4ou2CbMraXNZmsZdCBoYrByRXV+sRlMU0H
      HuhlwJbmFPEDqiNJo5uzwx0ApGKg5yNwEv6IuWJA9J28fXYP6Bc6J0bm2xPpo9gX
      +1WmyLh+E9ZHZsZtAOf04uWxKDwybEAWIeZ5gmPZvl1Bw/fSfcHdPC38exhhZO+q
      w6uRHebiau4N+r6bsc6w4Sng1UsoR7GdRvRYmsJH1pu6yaKuw18JHn4fdaPL8lXF
      1vgOJJY0OV4SihB5bi7EL0W9TwTpqBZxieTeULm+w1wCpXBhkw==
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      service.beta.openshift.io/inject-cabundle: "true"
    creationTimestamp: "2026-09-10T20:49:02Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data: {}
        f:metadata:
          f:annotations:
            .: {}
            f:service.beta.openshift.io/inject-cabundle: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-10T20:49:02Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:service-ca.crt: {}
      manager: service-ca-operator
      operation: Update
      time: "2026-09-10T20:55:23Z"
    name: openshift-service-ca.crt
    namespace: openshift-multus
    resourceVersion: "8073"
    uid: 5f8e878d-29ac-43af-8a18-0b3dfa1c531a
- apiVersion: v1
  data:
    whereabouts.conf: |
      {
        "datastore": "kubernetes",
        "kubernetes": {
          "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig"
        },
        "reconciler_cron_expression": "30 4 * * *",
        "log_level": "verbose",
        "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-09-10T20:49:05Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:whereabouts.conf: {}
        f:metadata:
          f:ownerReferences:
            k:{"uid":"725488fe-d3f3-4aaa-b30d-d858dace9155"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-10T20:49:05Z"
    name: whereabouts-flatfile-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 725488fe-d3f3-4aaa-b30d-d858dace9155
    resourceVersion: "2376"
    uid: 4c62a70e-fc98-46ff-9ae0-7703bf6ef344
kind: ConfigMapList
metadata:
  resourceVersion: "22069"