--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-15T15:38:00Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"2d3f9cac-c059-4600-af4a-935157f1c73d"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T15:38:00Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 2d3f9cac-c059-4600-af4a-935157f1c73d resourceVersion: "2387" uid: 01e4258d-122c-465b-95f0-719b52007e66 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-15T15:38:00Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-15T15:38:00Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2381" uid: 3edbd11c-5a83-4b7d-bc13-8e6b34b0d8c0 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-15T15:38:00Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"2d3f9cac-c059-4600-af4a-935157f1c73d"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T15:38:00Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 2d3f9cac-c059-4600-af4a-935157f1c73d resourceVersion: "2380" uid: e8b044a2-662c-423e-a5db-769f5146d8bd - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIcOE1yzzY0TswDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNTE1MzUyNloX DTM2MDkxMjE1MzUyNlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy31DwBmpTV+/ e2xV8iTcOPXYANNUxBQ4itGi/CLCsiquOi8GMpIYYwxFmVCJ9C+iI7sOVb1Zj1FF OCUctfh+SBcz872pRFwwbCux+MfZ5RKJrLu669XJINnOepLsWCO4ul6ifoAmqsKW L9njnrM1z1Iyqv4iE/p4ekFAm0TKWKwTfjVr7YfO3oEzvabnmQGbIHrxONvyOvSD yyCniKTxXVBpowL7TyWzSteTMxkGzRDbZ2i3nOaTh5DJxzZ8auxy9kyL+qGjdMuc jiDohXhlX4xo66ckuAd7JrUa3u83ouHZW8CYT5GyVsoJpeIK98s8CtK2eeXtqX/y T0ZLJNgUcwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRANqgmMFBtcFMw9n/wgTeg+Ac6KUkaMFae8mobibMOf1y6Jnmn YbFjEXwqmq65+CNg44piV6nrRBhyYF7e7oTGWTANBgkqhkiG9w0BAQsFAAOCAQEA hHzrL2WvNGCHWMn3wWBF2lXpT2Qm/O53newCPYRQ86PNVrtP5DzPMbfdpoa+Zxx8 GkUqiWnRI+CSu93bKKB61tP2wngN06gLlsg/jbnwFhYQKRqXcsgFJoWd4ulWnybS Eq4hPhuvtBUDfngvglGEVBh7wEEWJXO678LJHgg/6VxAqg2EaVht2Fc8bMvnqeUl vkDeP6Yl81JBSdBezMjCAcWP6R4HTydyygBuCnsk0sXh0JfPfOQjh/c547yzxzNt ALhsqnxjUaWqVp5BsphFu0mDeF6zIJWPA59hzQ+Vwd64f/xh5A1QjcIB7pozQEBL xoipYA+gUwmaiNHCJKClsA== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIILWdmQldDhi4wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNTE1MzU1N1oX DTI3MDkxNTE1MzU1N1owMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AO34vhfrqZBeX1zOz714G2Wxc0ZX7kQq7RHqblHt+2N1Tri4d3J96e5iYjUEwdJW mLGFaXC/+jTU7832rVWQJU6jsqowSYrGzGTJLgmQ+FRKUhhKetLVSbqEUi2l8jHy zz/R1c1134XRKn/FHs7f1qdld67uX2L+c3/4ojiiTVw4vxnDv6IGsU5jKTXmV4xZ vHLRtBoxKThHN8rEUYLkI+GA96cipkCJ+0VKU5BzAUwrAaVFzsDJNfRfV2xgqSW9 C6F3MeEuDVjaek0et6QkT4HUb4zobmlYPNAAcySkRtXBeO+J4ECZpkHTJvbuYlQ1 GBIhq9avDPDCpe5ccLU9KlcCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAnlJYruJXAqcVYM0VY6dt0YfilxnzkuMLLWKvJLKaAfe3cken1KMtXYrE 2KA0iPPV2BvPCO6gu1M4EZoo8m0frDBLBgNVHSMERDBCgEA2qCYwUG1wUzD2f/CB N6D4BzopSRowVp7yahuJsw5/XLomeadhsWMRfCqarrn4I2DjimJXqetEGHJgXt7u hMZZMEsGA1UdEQREMEKCQCouYXBwcy4xZTViZmEzZS1mZDQ2LTQ0ZDctODQ2MC04 YzY0YzQyMTUzNWQucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAK9NMkV5bb6OI1IGqd3uZYzsHtcJfbW/nyC96ZKR0DBS2HclyxiM4B7NZT3n 9eBcYHKhz36DrODQC7wmahU0OBHIIK3qngxBp7yAwkc93UXvSDq2rx7MxBRZLtCO +KlFqa4wDz1AtZLX+10eWiok4O+9QhduspM0CD657SUqAqbp0OttL0Hh0183ieZQ GBZJZaiDsm5pLjMdFW28tMXId5zc+624atWJ8xqC+Dura2sigrC/UQzM2KnETQMo q2IaqL73iNGU0ZYeP6hflkxlKT5Ih8CHS9rtHNwshv4xrbz/V0eer9a3rQCXRnXr k95OdQHosrrXAZIhXjBGXBGyBiI= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-15T15:37:57Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-15T15:39:02Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4448" uid: dea16ed7-f528-4c49-b3e2-b0ac97c87ad6 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-15T15:38:00Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"2d3f9cac-c059-4600-af4a-935157f1c73d"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T15:38:00Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 2d3f9cac-c059-4600-af4a-935157f1c73d resourceVersion: "2433" uid: 690c0c3f-6226-46d6-a8b7-da72420c4a80 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIRSjgr/50HhkwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTQ4NzA3NTAe Fw0yNjA5MTUxNTQ0MzRaFw0yODExMTMxNTQ0MzVaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk0ODcwNzUwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZovJ5NfuTVxf2FC+gBXpZi1mK6+GHKFo H5fvqcQjtQj7mJAimq8fcLGPk6YxHgU3VDnD9FHxBDa0N2TIiylL/4x29ggp3zOR mSrmmqv/EQFhgE5eH2+XJJpZM5Zx6mcYmmwr/ho6pmGsipg52pge8kQKwT2awASC vAXfY9af4VrlcZspULP6Gvc5tpwnow2NVpfMfk9ECImkxQpz9w8VmhYKWD8Cn98z +JSXOTWT8+0tMP4okWnsBp3bO/0uk6fZT6K9+p13uaKyFT6xIuHS/DmB48ZMAWcG +j7F5W/D7hLQbPD32dwp2SCgq+oJRKbo9gsIwuO3pMFvAGyyUSVxAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRZXlv1 +xU5n6j6XBdGCBIIjz92CzAfBgNVHSMEGDAWgBRZXlv1+xU5n6j6XBdGCBIIjz92 CzANBgkqhkiG9w0BAQsFAAOCAQEARgk9bXpjMrxcjMcD53WRSCv2dPGaCtVWMD97 a0LoYnDeKjKYfCMIVvZXsUVUY3ByQOeYRIMprtpzma3whef823QJNc+wCHJ1AyCE GrYPdBuv3Fu1SoYaEkZOc5VT2lzDOMz8IxMC/oB5fhSBqnWTslqm48DYUh/FNSY/ Go5z8ZboOfB4H+xdFfHXBCEomi28o/SGsIE1zPn3GPdh8SiYNkrTXfvR6AyssIv4 K2rBSbicH+DNNCEYSr+bF60J0b7ZgpaHSqllYUvJoyJZJDESI7J2c38MQsJ98wJI LYHSupIw2tKScj7cSYLQi5Dj3/Y7D4BODjY3WVz3+gog2PSLpw== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-15T15:49:37Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-15T15:49:37Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15308" uid: 5e18e19b-8c65-4008-b782-aa147970371e - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIRSjgr/50HhkwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTQ4NzA3NTAe Fw0yNjA5MTUxNTQ0MzRaFw0yODExMTMxNTQ0MzVaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk0ODcwNzUwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZovJ5NfuTVxf2FC+gBXpZi1mK6+GHKFo H5fvqcQjtQj7mJAimq8fcLGPk6YxHgU3VDnD9FHxBDa0N2TIiylL/4x29ggp3zOR mSrmmqv/EQFhgE5eH2+XJJpZM5Zx6mcYmmwr/ho6pmGsipg52pge8kQKwT2awASC vAXfY9af4VrlcZspULP6Gvc5tpwnow2NVpfMfk9ECImkxQpz9w8VmhYKWD8Cn98z +JSXOTWT8+0tMP4okWnsBp3bO/0uk6fZT6K9+p13uaKyFT6xIuHS/DmB48ZMAWcG +j7F5W/D7hLQbPD32dwp2SCgq+oJRKbo9gsIwuO3pMFvAGyyUSVxAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRZXlv1 +xU5n6j6XBdGCBIIjz92CzAfBgNVHSMEGDAWgBRZXlv1+xU5n6j6XBdGCBIIjz92 CzANBgkqhkiG9w0BAQsFAAOCAQEARgk9bXpjMrxcjMcD53WRSCv2dPGaCtVWMD97 a0LoYnDeKjKYfCMIVvZXsUVUY3ByQOeYRIMprtpzma3whef823QJNc+wCHJ1AyCE GrYPdBuv3Fu1SoYaEkZOc5VT2lzDOMz8IxMC/oB5fhSBqnWTslqm48DYUh/FNSY/ Go5z8ZboOfB4H+xdFfHXBCEomi28o/SGsIE1zPn3GPdh8SiYNkrTXfvR6AyssIv4 K2rBSbicH+DNNCEYSr+bF60J0b7ZgpaHSqllYUvJoyJZJDESI7J2c38MQsJ98wJI LYHSupIw2tKScj7cSYLQi5Dj3/Y7D4BODjY3WVz3+gog2PSLpw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-15T15:37:57Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-15T15:37:57Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-15T15:44:49Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8243" uid: 1d455e4e-0874-45b4-9504-91515fedad6d - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-15T15:38:00Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"2d3f9cac-c059-4600-af4a-935157f1c73d"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T15:38:00Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 2d3f9cac-c059-4600-af4a-935157f1c73d resourceVersion: "2430" uid: 5fb6d420-d56b-4baf-99dd-15c0776641fd kind: ConfigMapList metadata: resourceVersion: "16459"