--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T00:37:03Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"e715ca3d-36bf-474c-8017-d1df2eb2f7ae"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T00:37:03Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: e715ca3d-36bf-474c-8017-d1df2eb2f7ae resourceVersion: "2279" uid: f1acfe5d-6fa0-49b2-8917-5862b29c4560 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T00:37:02Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-16T00:37:02Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2277" uid: 0e9a300c-ddd0-4dbc-be85-e5a4aaecfd09 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T00:37:02Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"e715ca3d-36bf-474c-8017-d1df2eb2f7ae"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T00:37:02Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: e715ca3d-36bf-474c-8017-d1df2eb2f7ae resourceVersion: "2276" uid: c9a44237-0244-49ad-b383-3047a90bc0c0 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIU8l5r/XuSh0wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjAwMzQ1N1oX DTM2MDkxMzAwMzQ1N1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wQniof+ppp8 weOkWO/ONnK+QSzCJBNyLrfN3Mu7dsfFAx0TXGSH+bSJUDyGXqM9PfHsDxkbXsZ1 tPAtvva5uH9Ygl2YOIxWVwDlhURa7jzmUgWBdbOcuEyqocSt7IkXyEOsuQfamKBd pEvmN2OBmFxqRPwWCJduPK2VB2ewZkLuWAW3dki+zfrFxW8mtJWUmJmbnONpiE0u TAJNucL5qCoTd3qX1LcJfFYxMCYCRfe8J2sDLH9TARca2JTQ8qFDKJbic6xcwgUl iuLwCtn7TFAgyIKdJu7BRikaGMcGxrTfVi9/bFRt2kJ6uWZ0AgL7bunqRtehHq5e 5idikFmV4wIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAR7ZmYbhC4Z/oAIl7Uun14M1+QQVFkIAtXiByrqrTZazhhNRQ EMbJ0AwFVyDeV6qKtvWQ7R4Mb4QYSi6o7CtyCjANBgkqhkiG9w0BAQsFAAOCAQEA HzUlgSJFpx17zqGXC254sgGNPWNXeNSx0KfHt405hxtfDr+lsAqlUdtiZ4YNuwc2 33ottzZ5cI4e0rv7MlYe8OJmHV3pwMLJxc7xhV4eyHowwSKLZ9bo1g2ggoslCEld MSeiU2u9l719XGH4rVeP6KFoCtDt8fy/S/+nqW5p+nMC13pZSatnQayc9ZMxea7H CM1zcOY8z1VgloopeINs3eLonW8tdXWERJRsOTp3S/Qgl4Nh28TYmEvULzG/mcMK TDKktuV2JzcB0v+gxOpzCzorc6BcuI0/6eASYN6pF6IimWLltvJJOPsMHzqqKRlX Q7XsS3oXiO1+pvUUBvQE/A== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIIHFijFMhReowDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjAwMzUyM1oX DTI3MDkxNjAwMzUyM1owMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMVGDC0M0sk3zL5SNaPbR2idOKTSH9xdyRMWRzDhvEQ2dYB9FUkB7k0bwmE3YyuR cn7y6lc7DTndpUD+H3h8HzKOUVYy3OhPQU1A3BouYIdqvqWPye9vuQ2WDKzTMSQ/ zyh5LlnFdHXmyo8IXAkyz8J+aGbgVuxMVnvA50wsuZE/WzeRiQwIfJBsAn1tAlVD ZSgiGOHBUEFqMWGf+55V1zsqy2uVfruLgUyZ7Rgrcz7PHPsZ20hAiHGibq5yjB5v 86WqAY18lA0W2Q1fpfON48nsLsHjx/k9z0Ac2y42js48ddy6CGsXUod0fE1WZBZ6 Yrrm00K6yMkRDiPc3LjhSXECAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAkY9gKyeW47h2SUtT9K/gpro7/W39aFTEqlv70BPJroacuJ5HC9NaYDi0 XaIrI/QcQFQF+U5ixtd4M9lHAkGAWjBLBgNVHSMERDBCgEBHtmZhuELhn+gAiXtS 6fXgzX5BBUWQgC1eIHKuqtNlrOGE1FAQxsnQDAVXIN5Xqoq29ZDtHgxvhBhKLqjs K3IKMEsGA1UdEQREMEKCQCouYXBwcy5mNzA3ODcwNS04MzBhLTQ2NTUtYmY4OC1i ODZhYmYyMTM1NWEucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAGwpBgSLot+XeFajbCX2UeuPOzJMWPFsbLkCZL889Ka6GcKPZJOsgh68DB96 MlIXJaw7OdNgQn0Z+YQTgGE2ZJU5enPsB+Jok1MQesQkn3qPe7ViLZ5v1jEVtbXd CtAQlzb6vG/aTZ2arDZ6KiNtF4U4imdycMTPQRbJwN1PBGUi6EfhFNfhGyxqL08G Ornb/GyzvoNWWLYDmnYIv0/nfjtiDiIPfCacHGzxnwn45LWKLhwteUMhtd3AMFI+ SWGZdIM8FqTa7KWwv59cqv/1ejgMg9+yLHdNopijFiEac80LNUR3DYiLjG22bTvq JDB3HO7TwNZ40t3c61nqmHSaevs= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-16T00:37:16Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-16T00:37:16Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2631" uid: 959b150d-9ac6-46b1-9815-950d3e2b6f99 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T00:37:03Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"e715ca3d-36bf-474c-8017-d1df2eb2f7ae"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T00:37:03Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: e715ca3d-36bf-474c-8017-d1df2eb2f7ae resourceVersion: "2282" uid: 9adbc629-eb84-4ce3-91ce-234418f23a4c - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIILr1NAUWJ6TowDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTUxOTY0MTAe Fw0yNjA5MTYwMDQ3MjFaFw0yODExMTQwMDQ3MjJaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1MTk2NDEwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9XAM0yH+14xEvngIYpF5oUjV7sRuOrbxb RqQd0r78ccs4fPy5H0RMzNHzP7ypA46sfVhc0FreaPR0bSf9kgb+CsPOftaqwN7H UQ1F4zXXtswPjusEAr5g9boaNJkkjDBGQdSe6SX7MZKqAHwn4h3sm+nDAg+aOETR Abq3QCJiJwmQxqcNhr3peLKJ0E+ev+/65sulqynUMF/dCtuJbETclBdb/7uzOcXs yqOsdDUZsDGMIJy7ODGGOkXdNEdoSNm1DNLBDj6O/up9iq5ZoJRr/Ug9h/8UzBGz JgBcamWLvrB0bzW6/qmnanzColyBPziJgoguTQxm//vIBqu/OQ4ZAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+7+qw ipEQ4frW5+bDca6CCB3yZzAfBgNVHSMEGDAWgBS+7+qwipEQ4frW5+bDca6CCB3y ZzANBgkqhkiG9w0BAQsFAAOCAQEAaExwk8iNqBiRMOkwdHUjDHyQx1YHCQBisf57 Jzu26EVnxkPDaOqk3oR2dVAb6p6Z3pwt8d4plPbyOpVKiTzuMF7cZwJjxaOUeNmo WTvewQ0ugOr2SDoBGkD2+jc578COTkibjXrbA9EEO+pzF7Q31DMadrDMRJ7tdx+o obt1yxw1CsUiznemTixRKlCUaLE3s4VSIE7s7PHaBLojbF6O56KmfeaKkwsxPcvp mq4gzVYR1Mb6XUBVZ3mG+5PtSnJLOfJwqNRk64HcCrYgsJX7HjYgHNSu6X63IhIV VKVoz6d1VYe6WYrz7bFVxaeo9YOgfE3orkOn/FfPRIfcV1Onfw== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-16T00:53:00Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-16T00:53:00Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "16465" uid: 7e752a19-4241-46eb-bb6e-d53e7af18321 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIILr1NAUWJ6TowDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTUxOTY0MTAe Fw0yNjA5MTYwMDQ3MjFaFw0yODExMTQwMDQ3MjJaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1MTk2NDEwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9XAM0yH+14xEvngIYpF5oUjV7sRuOrbxb RqQd0r78ccs4fPy5H0RMzNHzP7ypA46sfVhc0FreaPR0bSf9kgb+CsPOftaqwN7H UQ1F4zXXtswPjusEAr5g9boaNJkkjDBGQdSe6SX7MZKqAHwn4h3sm+nDAg+aOETR Abq3QCJiJwmQxqcNhr3peLKJ0E+ev+/65sulqynUMF/dCtuJbETclBdb/7uzOcXs yqOsdDUZsDGMIJy7ODGGOkXdNEdoSNm1DNLBDj6O/up9iq5ZoJRr/Ug9h/8UzBGz JgBcamWLvrB0bzW6/qmnanzColyBPziJgoguTQxm//vIBqu/OQ4ZAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+7+qw ipEQ4frW5+bDca6CCB3yZzAfBgNVHSMEGDAWgBS+7+qwipEQ4frW5+bDca6CCB3y ZzANBgkqhkiG9w0BAQsFAAOCAQEAaExwk8iNqBiRMOkwdHUjDHyQx1YHCQBisf57 Jzu26EVnxkPDaOqk3oR2dVAb6p6Z3pwt8d4plPbyOpVKiTzuMF7cZwJjxaOUeNmo WTvewQ0ugOr2SDoBGkD2+jc578COTkibjXrbA9EEO+pzF7Q31DMadrDMRJ7tdx+o obt1yxw1CsUiznemTixRKlCUaLE3s4VSIE7s7PHaBLojbF6O56KmfeaKkwsxPcvp mq4gzVYR1Mb6XUBVZ3mG+5PtSnJLOfJwqNRk64HcCrYgsJX7HjYgHNSu6X63IhIV VKVoz6d1VYe6WYrz7bFVxaeo9YOgfE3orkOn/FfPRIfcV1Onfw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-16T00:37:15Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-16T00:37:15Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-16T00:47:33Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "9284" uid: b32bd0c5-08f0-439e-a46a-e26ad39b179c - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T00:37:03Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"e715ca3d-36bf-474c-8017-d1df2eb2f7ae"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T00:37:03Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: e715ca3d-36bf-474c-8017-d1df2eb2f7ae resourceVersion: "2281" uid: 2d5d981c-b5bc-4533-ad6b-883bcb00701a kind: ConfigMapList metadata: resourceVersion: "70009"