--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T23:12:08Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"d32b53d1-e202-47a8-bcc6-f700ff660c09"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T23:12:08Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: d32b53d1-e202-47a8-bcc6-f700ff660c09 resourceVersion: "2527" uid: 487f0960-6e6d-484c-9c6d-7ceb6f5ad2fe - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T23:12:08Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-10-30T23:12:08Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2521" uid: 3303cfa9-bc83-4919-a771-988f4037c7b2 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T23:12:08Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"d32b53d1-e202-47a8-bcc6-f700ff660c09"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T23:12:08Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: d32b53d1-e202-47a8-bcc6-f700ff660c09 resourceVersion: "2520" uid: cfed9ebe-b613-4604-9f47-cedfe5fff7ed - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIILKfqnVIqymQwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDIzMDk1MloX DTM2MTAyNzIzMDk1MlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRAYU7hBDR9h oxq63Jd+2bSLWqHvaenHk4LS4oXINeZCeP7XLYdnkoR9twYkT3mLmFfUIWGKeef7 u16eBeKBxL8xT7nxn/cPOfRJpRxIsttsWzg568B0J9rfd0kEjdFeYByUsygq3Ne4 SwErkWXj53IcfkcbSGqSkzpgKfrszrXYBbLVIAnNdoZni8N2EebLm+lXdqAB8yES RanktWinOZN5SKXgQUlSfcdoRXmDQ/k0YdDzEHfojRyTuWBMFIPy+yNRvpR0JOGo 75e00Jn89diZloandLg545Mc8z5RaBzYmHc6jcVK6pDsOpLNgJ2h2XuvmG6YJ+qN 6V5k+mBAGwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAI8rNkX0ZndIz2edHwJ661DGClSpxTeuJto/2ysuaXbOoDYfu oZ/pXpEm7LMpeOZZLu8b93EIuxTyPSSPwH3VrjANBgkqhkiG9w0BAQsFAAOCAQEA w6GuBg4NyVOdtwpykwF8Vkr1iqAhzswrCyZoDmsgBexOj7ftW4+jkegRyjAWcFBV Z8iX439YM4n/kong57ynvZ8l1dzqglukt4+V6WmhAPyE1zLpce/OJ9xmmA2yKk1L xcL4yGv6w7CaRYthy6Mxy2VsJYM34hPjJ44lr2o+j+Yp+Z9YYbRilfOjc1q5Nq7W 31Msax+1vIClpkhsqiYqHv72ifTp57yDVlgIt72m1mrQsyVscKav8ha1E++ZRLWG 7hAqxHji2K3jtqeogAx7gsoT4j+w28/BrsWYYLG7DqfQUxZiuAtnFAE1QuJi6APy uaFVi8NVCH6NJHXqdHwGUg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIB67eEq3LGgEwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDIzMTAxMVoX DTI3MTAzMDIzMTAxMVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB APeJUuXVnZ8ss1R+ba6tvpDHo/6MX/AwF0PemXG1G2zFgYVLCRmKhPZi54G9YSFU NCKrmdllDpjWVgleN3BWMD3uNHoG3lygG6928RK43xOmClnhHNEzSjmxRJsdRjoq eYvHJl7s3I4u+UnBj9/zogj/Onf4Nnw3tXcsncXb+O3da3MiFbMqwXx/BN2sTVO/ 9MeXXixZtPX8FUVkUN+AmoNPsjGzBtw8F1ZbHt/pZaHKzxkNIp5+nz3sm4h3itZl KXXSOoOoiUVHDRrcsw6HMX4of5VjZGhD+M5gpeNaESU7xLPtFusntvjt5uI4snJe nhxAEjV7/V8vVZazFWkixGMCAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAnQfDG87b+ETRodQsJhL8kZJ8lvC2rSMzh7/WFA6OYHsiMDkHHhmknEDq GqprX499qo5Hu9IacZ5n7TtyqzqsPjBLBgNVHSMERDBCgEAjys2RfRmd0jPZ50fA nrrUMYKVKnFN64m2j/bKy5pds6gNh+6hn+lekSbssyl45lku7xv3cQi7FPI9JI/A fdWuMD4GA1UdEQQ3MDWCMyouYXBwcy41NTY4ZjRmMjFiZTAyZWYyOTNhNi5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAWM+/0dB7POAo vpjdoCnyeR2cycdmw0t6WSyVygkrTARqSJztyJ8oAvz8L2C78RpVglLtugzh/IJk wBwRgD3fxkYTfwy/0gl9UZAhIFhtbDmNwPxg7T4KP/CO8448rbJGZkuZ2KUTD6O4 BboL0tHzmmQ0a1yxMna871jTSOGLG+kaJTEez8ZeEXi0Rk0ZJeiDLBAR7NXlyVuC QhRVBdOc9y4o1O616pZTPiKSis6rjq9Ydn4zDaEUiKsAKE6rGao2c/pC51gbt6VX 1fZGE9NQ6qeLjJIFc/0ZfVMSQnMXdNLdYAofkHu0LWFDVDkcYiIvXoBx/e+LzuC6 bs+w+3ZTOg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-10-30T23:12:16Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-10-30T23:12:16Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2847" uid: 14226610-582c-46dd-bf10-21dcb16a0ac6 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-10-30T23:12:08Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"d32b53d1-e202-47a8-bcc6-f700ff660c09"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T23:12:08Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: d32b53d1-e202-47a8-bcc6-f700ff660c09 resourceVersion: "2538" uid: c9f0cd00-2323-4345-a82c-ae0fee3e7c41 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIX3aWe0giGiYwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzQwMjMzNjAe Fw0yNjEwMzAyMzE4NTVaFw0yODEyMjgyMzE4NTZaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM0MDIzMzYwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxXiPLImQ0fgSotual5p+yi843ZSldqv1 eF1S/29osGUrZ+oFXuTavFt9ioo6DA6OdyUg3H8D3Km/qdatt4W22D63rceFlPWu dzhforc8camFxx5jUI7OIHRBgG9Qg9v/zjNWksJEa4G2uSruJcED0BWlkcsCAcw8 6dAy8z/xyM1Ah9br/8+cz4XSsXJZAX0GP4Vrv3H9Rn1WqH8aLndMFno3xoil6orV QrGtN+/8YItSmhjpZyn/OPAZoCXGenNow9E26QVRU3zredWlC5FiexaFRH8aMT2L +fbJNhVcCgbgfehuMvkU8uTvykLh3K5e4DpP9Gs2ROG4NjX5VKONAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSsArtO GPCGbfvQBdQECOMCB/wsjjAfBgNVHSMEGDAWgBSsArtOGPCGbfvQBdQECOMCB/ws jjANBgkqhkiG9w0BAQsFAAOCAQEAAQSUgGrTvpGUoZgNHAjfP0C71KNZH0Qen9rT qtNZCnwq43LQsS/QQT2ZXjaEK25AtMLgHFA1Vwx1hkIq2pEavtP/JfUF8bhcaFRh tfsR6LhK++fW+cz84Sck+4xpqeJvg3hDaHFUbQPkgPnWstBwAHR6cLMv3Sl+BYdy ZVxYOCzdGiBC040oLfPh4lYii7eMKGRzbCql6yf/dctmWO2tpuEUJFdK0WwKsYNs SN5QVa8UmJ3IUFxaIrA/nxFqSW5CF6UkWtKRdLErNKCqlDzGOPs7rOlrI4veXd5G EQu2faX7da5LYQ6TDVtFcswIPk7uyHA6hj0Apzba8+zjGoQ5bw== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-10-30T23:24:05Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-10-30T23:24:05Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "16387" uid: 84bc8183-3a2e-4ed5-b574-ac9271ca4769 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIX3aWe0giGiYwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzQwMjMzNjAe Fw0yNjEwMzAyMzE4NTVaFw0yODEyMjgyMzE4NTZaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM0MDIzMzYwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxXiPLImQ0fgSotual5p+yi843ZSldqv1 eF1S/29osGUrZ+oFXuTavFt9ioo6DA6OdyUg3H8D3Km/qdatt4W22D63rceFlPWu dzhforc8camFxx5jUI7OIHRBgG9Qg9v/zjNWksJEa4G2uSruJcED0BWlkcsCAcw8 6dAy8z/xyM1Ah9br/8+cz4XSsXJZAX0GP4Vrv3H9Rn1WqH8aLndMFno3xoil6orV QrGtN+/8YItSmhjpZyn/OPAZoCXGenNow9E26QVRU3zredWlC5FiexaFRH8aMT2L +fbJNhVcCgbgfehuMvkU8uTvykLh3K5e4DpP9Gs2ROG4NjX5VKONAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSsArtO GPCGbfvQBdQECOMCB/wsjjAfBgNVHSMEGDAWgBSsArtOGPCGbfvQBdQECOMCB/ws jjANBgkqhkiG9w0BAQsFAAOCAQEAAQSUgGrTvpGUoZgNHAjfP0C71KNZH0Qen9rT qtNZCnwq43LQsS/QQT2ZXjaEK25AtMLgHFA1Vwx1hkIq2pEavtP/JfUF8bhcaFRh tfsR6LhK++fW+cz84Sck+4xpqeJvg3hDaHFUbQPkgPnWstBwAHR6cLMv3Sl+BYdy ZVxYOCzdGiBC040oLfPh4lYii7eMKGRzbCql6yf/dctmWO2tpuEUJFdK0WwKsYNs SN5QVa8UmJ3IUFxaIrA/nxFqSW5CF6UkWtKRdLErNKCqlDzGOPs7rOlrI4veXd5G EQu2faX7da5LYQ6TDVtFcswIPk7uyHA6hj0Apzba8+zjGoQ5bw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-10-30T23:12:16Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-10-30T23:12:16Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-10-30T23:19:05Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7115" uid: 91a9b8cb-b536-454e-b1fb-2dca0d4d56ff - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-10-30T23:12:08Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"d32b53d1-e202-47a8-bcc6-f700ff660c09"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T23:12:08Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: d32b53d1-e202-47a8-bcc6-f700ff660c09 resourceVersion: "2532" uid: 82adb8d6-7f75-4a8d-8667-b19dad9dc536 kind: ConfigMapList metadata: resourceVersion: "142206"