--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T04:36:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"fd60ecb1-7f40-4fa7-9049-4939fd9847df"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T04:36:48Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: fd60ecb1-7f40-4fa7-9049-4939fd9847df resourceVersion: "2343" uid: ba3e0b1c-5284-4555-9076-bce9b450e9fb - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T04:36:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-10-30T04:36:48Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2341" uid: 16ff4832-cb0b-4aa7-8928-73734c1ed4e5 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T04:36:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"fd60ecb1-7f40-4fa7-9049-4939fd9847df"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T04:36:48Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: fd60ecb1-7f40-4fa7-9049-4939fd9847df resourceVersion: "2340" uid: 1224e942-3087-4cb4-aac7-7b654d71d0d0 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIEJP48Buf9wowDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDA0MzUxMFoX DTM2MTAyNzA0MzUxMFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiK1hoZgQO3t EiH2ALr73RUF+FGL4E1YPm34DjlkHNUD8nMEUDlwF1TazsDnJXJGkNwa5Lmj8CdP JvTKaKeeButz7Bei5NUd99Db9PlVFRidqLsDF+54kIaH4f9vgS+PKFTQBfYufzQ3 FDCsbRzlXIBf8+zueEPBEbUQH6ctCiI5g2iaHo3sfnqbcaP2bHdsMCG/r5KlHEvA SApjLFHPWRrfppG6Fjwq7z8me4w41wXEOS1MHdtUrQBbEhMagWxGywz0gLfulKGy bnEOGajKza6BJNuFrUbeat0qY/U3eC6LZsZEfdo9WX6Dt0SGnE6ciUuxGMJRHV+k NmB/WlnG+wIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRALl7tfK7qFne6YPBgd9SwIqhoqvvbWO73FInGtSpw0YoYq1m1 DSj9dNrAIaJTnMPuxTqQoM+tBgKtMrrolPfFBDANBgkqhkiG9w0BAQsFAAOCAQEA KMZLhwitQc1ZXfXpR+hMEiQzZQVYTpBLJJxGnOvIjFQDv8KejO9diAIh+Twkdhwj De/CGX6W0nB8GuDJILRG9XEQs+Lc60e0MPsbYpOyWG0wZr6tdbxR8LSyQP3JlQ6L 3D3fEo/lGKXNeLh7LJ2OKPb/CuLRg4V61y/y0jbyuCDPF/GO1gOMDeKRTAMua3SQ y53ylvtInkaoRHBD4QBp9CND257CYuEopZi0RNHzoON5wJTg9TrifcKn1GgMjvf+ oyXfVYQNo8bpfhHmrSP5WBWL6e3dF7gEUMANtFrpOEoU5/FyOaJsVnD4qg517bdH q1UxEgM7y/XKpYD293kTKQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIYhmXhHm0MA4wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDA0MzUxNloX DTI3MTAzMDA0MzUxNlowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AO1BHApJvh1h0Glg0hKGmT35OrPPZSVxm1Z4mMj0x043t+eAE1FWLBYfkAtI7G4i Mhv+bjeMzLRPuSeqhd8kRa5PEpapllt3Ung8WA3lm/bMcyw9bWAzAXuwjeaHp6jq ykSYD9+lp/J4cRxZ2TvPVP00nAxpCNW+SNl3ziQqw0I7TdFrjAH/pv+ghJnUBUoF hze37KC/a9h4OOZ1Sk/HoeBInEwlaorFMIfXGbnwbHO/7tBBHVSz6mh0t8WrAnz0 1kDY4BYZFnFzFrmDbZcz+/1fYXWWOQ1RIkqWAQ9NDBeTHDshOcflmPYlVxlt+6eM dqa4fMirnEX83ESwxDILDGkCAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRA8T8zYXqZwuFaVU8bfB6vNBX3IWB+Ji4jLK8TZmQFh7dTvPatvmJxbeju n6diYLHfm0ooq9ZOSOG/IgYMOpcZNjBLBgNVHSMERDBCgEAuXu18ruoWd7pg8GB3 1LAiqGiq+9tY7vcUica1KnDRihirWbUNKP102sAholOcw+7FOpCgz60GAq0yuuiU 98UEMD4GA1UdEQQ3MDWCMyouYXBwcy43MDg1M2I0NDMwNGQyZjM1NDJlNy5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAL4t1sxvNWnzY eMsIBW0aAdtBw5WSEB8yU5ecMthmPRUSJ5mMtl+TEoupXjK1eieeEmJ3yTl5M53E HTQb3VZsT2rUux/0UzasT79A3eS7PIpUlmOfMKIHSbitpQzySUQKk89ktqAPsuBp QuylvGY9b7Z6ScrCKCIc6AqVg8Rl0wFBDm8HqN6jbd41Q+Xshb4y5rQ9xorUDIyC G9Pv/yl9C6QFmOfMx3q3ZiZIv4+Ek7wQIH1kzylGuKqY9RvZBYSwyYz1WXD/w2If X1BRtxe6P0CjdsDDLKgUAaXNcz7EmntOMXpDODKdZoeFmILXKKEldofAf3ja+l2j hr5qYohTEg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-10-30T04:36:58Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-10-30T04:36:58Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2600" uid: a46d7778-b175-4834-8f72-446b38d6e6be - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-10-30T04:36:48Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"fd60ecb1-7f40-4fa7-9049-4939fd9847df"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T04:36:48Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: fd60ecb1-7f40-4fa7-9049-4939fd9847df resourceVersion: "2345" uid: 12bb2a0a-ea03-42ad-8863-9c4be3fedebb - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIEkY1GpbJANAwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzMzNTQyMzAe Fw0yNjEwMzAwNDQzNDJaFw0yODEyMjgwNDQzNDNaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTMzMzU0MjMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2rUEdryFViN07Vqp/DymjyUTfopfiwruQ fQp3m8+L1PVZSJQxk6X9ISbJPFzBhVtY7y+XcWMWQ2B8/E6+Y6AycctYYTymIv0Q a6H4gdOYkqRYaqCW4oGnVIjAPt73aGHYdKGLaWGkkm9BbFe6Zmf5cghlGLbIGPjA EyO6bVqOBO7OCA33X1BD5bRxJvlz7bSAQPzRS3jCYHu8IgK0eBoDCPf4Sr+xlRxw QAmS3fhdqJzm3gt5afLKpQQq0SZjmrf328RCSEBED/hWjAidiP+i9jwRMZX2wcQ5 8ecKuAx/dmg3c2SOXjaHaetKoXy1X4cKMOGHFfXqNC6XdT/okK21AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSlCrJ7 K6Tb4p67BL2jKN4P0oh1fjAfBgNVHSMEGDAWgBSlCrJ7K6Tb4p67BL2jKN4P0oh1 fjANBgkqhkiG9w0BAQsFAAOCAQEAFzmgnyaFfTCqsayRJ1UtoYLeWue8Hwkx3htx l++tKTIN+tsoPrpPOzokW8LT6Idw1JHAOkjVl6wkVq6F0tE3gxAZpi/kxLxSuLRP KmHGPjhm4hNpxPU0DA4auhx//0tPcPCalloslX8z8b9GSCzFSQBUdU5JR1cfnFTs n9vBoobSZnDA6tz7IRxlsJf3plZUcPYMQgww34HTDNYihpm2rQg6xmzZvRrIM9Fe 0Dsnr2hxtdIbLAtIWjQVjNrlPsilhW/gQge0IZGH/bx7do0kDFzW1n+jr48+K6DW tCSO2fPOwQ+//AxBaJwrurj64aTks+DvDPBMRiRwDiIx0ykGTw== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-10-30T04:50:25Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-10-30T04:50:25Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "13384" uid: 0a8e7699-0f62-4e9e-9977-e149b12f33f7 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIEkY1GpbJANAwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzMzNTQyMzAe Fw0yNjEwMzAwNDQzNDJaFw0yODEyMjgwNDQzNDNaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTMzMzU0MjMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2rUEdryFViN07Vqp/DymjyUTfopfiwruQ fQp3m8+L1PVZSJQxk6X9ISbJPFzBhVtY7y+XcWMWQ2B8/E6+Y6AycctYYTymIv0Q a6H4gdOYkqRYaqCW4oGnVIjAPt73aGHYdKGLaWGkkm9BbFe6Zmf5cghlGLbIGPjA EyO6bVqOBO7OCA33X1BD5bRxJvlz7bSAQPzRS3jCYHu8IgK0eBoDCPf4Sr+xlRxw QAmS3fhdqJzm3gt5afLKpQQq0SZjmrf328RCSEBED/hWjAidiP+i9jwRMZX2wcQ5 8ecKuAx/dmg3c2SOXjaHaetKoXy1X4cKMOGHFfXqNC6XdT/okK21AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSlCrJ7 K6Tb4p67BL2jKN4P0oh1fjAfBgNVHSMEGDAWgBSlCrJ7K6Tb4p67BL2jKN4P0oh1 fjANBgkqhkiG9w0BAQsFAAOCAQEAFzmgnyaFfTCqsayRJ1UtoYLeWue8Hwkx3htx l++tKTIN+tsoPrpPOzokW8LT6Idw1JHAOkjVl6wkVq6F0tE3gxAZpi/kxLxSuLRP KmHGPjhm4hNpxPU0DA4auhx//0tPcPCalloslX8z8b9GSCzFSQBUdU5JR1cfnFTs n9vBoobSZnDA6tz7IRxlsJf3plZUcPYMQgww34HTDNYihpm2rQg6xmzZvRrIM9Fe 0Dsnr2hxtdIbLAtIWjQVjNrlPsilhW/gQge0IZGH/bx7do0kDFzW1n+jr48+K6DW tCSO2fPOwQ+//AxBaJwrurj64aTks+DvDPBMRiRwDiIx0ykGTw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-10-30T04:36:58Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-10-30T04:36:58Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-10-30T04:43:51Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7000" uid: 3a4a3281-26cf-4407-8dc3-e61a754e210a - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-10-30T04:36:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"fd60ecb1-7f40-4fa7-9049-4939fd9847df"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T04:36:48Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: fd60ecb1-7f40-4fa7-9049-4939fd9847df resourceVersion: "2344" uid: 7661378e-7254-4d47-8ff7-06ffea09fb00 kind: ConfigMapList metadata: resourceVersion: "159208"