--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-31T03:21:50Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"5a1679bd-25bc-4b1b-9016-9914c3eaa7b5"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-31T03:21:50Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 5a1679bd-25bc-4b1b-9016-9914c3eaa7b5 resourceVersion: "2306" uid: 8295f72f-216e-4a93-b925-859377d1b730 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-31T03:21:49Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-10-31T03:21:49Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2304" uid: b83ad917-01aa-4201-88e2-2b1c84d84f00 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-31T03:21:49Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"5a1679bd-25bc-4b1b-9016-9914c3eaa7b5"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-31T03:21:49Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 5a1679bd-25bc-4b1b-9016-9914c3eaa7b5 resourceVersion: "2303" uid: 20a53bb4-2738-404c-9d72-ac3420e368cb - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIOv0UmimnVhEwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMTAzMTk0MloX DTM2MTAyODAzMTk0MlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLjoq0D5mEeg tfOH31PbXMq2PlMW+x1GBd8v4nXmf58iqppRecZhbNuiq1lx+2GduvKNP3X7tpCZ Zz+zizSexdJOeT2Zrc1viUNZWyO6N1Lo6lIpb6m6FuDFtVabTrDPk1nkcPNBpHI4 cYI3nFpCZpX9jUTUK+iObZgrtQBGy075yS5hy4J6ulLV6umQHV0xuEwfy+T6+Fno fnxgwXzLe1v0O7158nsrujL7iKpTEIWjIsM/LqOXzSTxXEPc0I9yHCIqjKppAIhK UmZEvqtpgyXycVN9hx2Meya/OtkldzQddQjZOjODyQdNQbclPhfEBIJIuHlZQ1gb qofy9lwuDwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAimvHumputpyB4s56SkspWlY1i+TiXLGHs7fMOOSERR8MEyOd m1+QFXHbn1n2k5vb8OSNfPl27wFBTn/xiUGduDANBgkqhkiG9w0BAQsFAAOCAQEA AYbuL+gkhom0eOZNl2tcc7VMEPDOQPx4X8qvsPTUj8X+m7lk3mcX3wPGLRFAfvE3 Q8nvs/wsEhk3Oz4MG6+qRU57roGGTvcPs9oQ5nf05FDM2DZ55oKTV5ZQ/ZoVQY8w 5l/LesdNp/BQPqnetT2ZLV04c/IhOtQioVdtdhg7448AKwr4VbSL2dDDNN0qrKWi YwEmG2gYYsRZ/KNemZ84YbpLsKw4THI6+f/meGn89ngEfGU8hpLHH4zLSYUK2QrM vGJ29PIY9jeHbEuB+tQoK3KTWLQymM5xs4bqn0c0x1N4EiPFUQ/fqvL9Pkmuh3+M BVSerViJIiw1jJg9sZWveQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIJ9VIDQZUhaswDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMTAzMTk1OVoX DTI3MTAzMTAzMTk1OVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AK9nnSz1dJ0wCQGR0/DG0XmOkGAe5cnMpVQsy5Q2RJwi2ecECW5FCE8b7gOYISPP d3f+qeoMkraCThVairrGFsfZE4dsgHk2HfE6PkqyWoKTqdnk5JdFhDn8xd47n8a5 gq05i2VkNi8XRY/lJ0Ek8MmW/1hwfu2HWsUdcHpSlta1kGi3apqpRQDivCfOCTAm 4n4pEivcNBSmnZTwZ+bp8bY5K+gQvkJmz/67n3Gpqg2yndZmMJYpP2akid3/rCwq S4BIzEKxhGLOVf8DomlObV+n+0fiaNbzWmsN/Bh4mK+xxTjufDFhC8dpX4408Fe/ UI5o29EBGLAVfrjRH3bC0ukCAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAqon2HI9E/Ny+K7PMRaz2GobDQZcELFEwb4xcOnLvPAff8Gtq+ht5HBmj h9Xd1VMfr9QJRd2/seaCJdyTvE70QzBLBgNVHSMERDBCgECKa8e6am62nIHiznpK SylaVjWL5OJcsYezt8w45IRFHwwTI52bX5AVcdufWfaTm9vw5I18+XbvAUFOf/GJ QZ24MD4GA1UdEQQ3MDWCMyouYXBwcy4zN2VjNGM2NzYzNDUyZmNhNGMyMi5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEARAFncZ8DL9kq gQdTQRKaJe170qMZPUnsrwgnJkFmvCqww67vvFQNaMvulLyydFd4ezCVwyOqQvfL fVYOvbLA+QfZb5SFvgexddiVBk0PygJyKCGaz6qgadqXW6HIjJ3BNpyf6u/9A//u dQl60SasJosqxfVSfDYAjg8nxj8Gq13PFFtuQqE2P86AmvCAmbO5rOZ7akFqRl6V K68SgdodJPKsgSsJax/SsQgb5MYILW12E7x8xh9pQ4O5wPVcFz6V+SIe1R1Sz3k3 kQlYAQp1l20aqJ7MCA2jUvInSLM5kWNnDCGY3eQpeiq3geXjE0OFSKX2gHiJ1ql9 d6b+S3JDjg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-10-31T03:22:02Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-10-31T03:22:02Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2761" uid: 637d826f-5bc6-4d50-b9aa-d06816cbfc19 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-10-31T03:21:50Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"5a1679bd-25bc-4b1b-9016-9914c3eaa7b5"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-31T03:21:50Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 5a1679bd-25bc-4b1b-9016-9914c3eaa7b5 resourceVersion: "2319" uid: f717c3b4-0e77-43dc-9379-e4164c8c4301 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIBgyrnLcNiMwwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzQxNzMwMjAe Fw0yNjEwMzEwMzI4MjFaFw0yODEyMjkwMzI4MjJaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM0MTczMDIwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDac/2e7Ejrn7QRsYFEF+Q0bmTNSkQ0L0l8 A5ey8NsCw6pqxthOUTYKJI3BqAwKs+KFN4oAZ2QOzbjmq1UCRFpuMyNosIrKWGh0 G/NumbyMbb+eJ2jhybXkJELooWbKRtaa124HuA0lIbVOWitMl66/cFMM0zjV1THE x7M6kAcf4n7zbCU5pG9HUaS70qqPYGt5h0cfNTdsNC+6r19+rpK8oVE9chqtoS3F PafjZoAHi2qfRvrLbpslSPP8aVfC/CILVSBb5G6d2aOTEX6JHbl29KmV96OhFOj1 29OiDl9tbu9d63vC0s3VQmRGoAUUwk64HNB20cYvCfMfamfUN0iXAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTsMkgT 8PJVhghbaZNPaTQRv1AgVjAfBgNVHSMEGDAWgBTsMkgT8PJVhghbaZNPaTQRv1Ag VjANBgkqhkiG9w0BAQsFAAOCAQEAoD+Z6AotFF3wAqyWVXHQN1ryhfSpkIIiSgYr gvD2m36118VqcxUulKpPtr3Mvn83iSyM6Ls4i42EPwwli7xFJ+JXWtqRDfNSnsJm 9Wh/fmZfCcWRpZ5z4WIiUxxobLTF7Yd88v8dTRF1/AKQWchaVlt2nwikou7b/vTA GwlEe7iepkqSEl//SxxiAb8oG0MhAPDKjtx0KTmLgA/ihhI4/AdqYyLC1cZOuu/X cKt4QCBS7M+0cpezOxLrZGCFCsnhUlAdD8AdY48HhnJCL+h0D9mnHTWx4pWX94VN VId9pIHJYb2DKKyW7vNwmttaqCSAm4nd/MGien1uTZFHxG3POQ== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-10-31T03:38:05Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-10-31T03:38:05Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "18243" uid: f27f55b3-b53c-4741-9e30-153ec84daefc - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIBgyrnLcNiMwwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzQxNzMwMjAe Fw0yNjEwMzEwMzI4MjFaFw0yODEyMjkwMzI4MjJaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM0MTczMDIwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDac/2e7Ejrn7QRsYFEF+Q0bmTNSkQ0L0l8 A5ey8NsCw6pqxthOUTYKJI3BqAwKs+KFN4oAZ2QOzbjmq1UCRFpuMyNosIrKWGh0 G/NumbyMbb+eJ2jhybXkJELooWbKRtaa124HuA0lIbVOWitMl66/cFMM0zjV1THE x7M6kAcf4n7zbCU5pG9HUaS70qqPYGt5h0cfNTdsNC+6r19+rpK8oVE9chqtoS3F PafjZoAHi2qfRvrLbpslSPP8aVfC/CILVSBb5G6d2aOTEX6JHbl29KmV96OhFOj1 29OiDl9tbu9d63vC0s3VQmRGoAUUwk64HNB20cYvCfMfamfUN0iXAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTsMkgT 8PJVhghbaZNPaTQRv1AgVjAfBgNVHSMEGDAWgBTsMkgT8PJVhghbaZNPaTQRv1Ag VjANBgkqhkiG9w0BAQsFAAOCAQEAoD+Z6AotFF3wAqyWVXHQN1ryhfSpkIIiSgYr gvD2m36118VqcxUulKpPtr3Mvn83iSyM6Ls4i42EPwwli7xFJ+JXWtqRDfNSnsJm 9Wh/fmZfCcWRpZ5z4WIiUxxobLTF7Yd88v8dTRF1/AKQWchaVlt2nwikou7b/vTA GwlEe7iepkqSEl//SxxiAb8oG0MhAPDKjtx0KTmLgA/ihhI4/AdqYyLC1cZOuu/X cKt4QCBS7M+0cpezOxLrZGCFCsnhUlAdD8AdY48HhnJCL+h0D9mnHTWx4pWX94VN VId9pIHJYb2DKKyW7vNwmttaqCSAm4nd/MGien1uTZFHxG3POQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-10-31T03:22:01Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-10-31T03:22:01Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-10-31T03:28:34Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7203" uid: 232ae2bd-dd61-47e0-b326-6e2c2ce4a3df - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-10-31T03:21:50Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"5a1679bd-25bc-4b1b-9016-9914c3eaa7b5"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-31T03:21:50Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 5a1679bd-25bc-4b1b-9016-9914c3eaa7b5 resourceVersion: "2307" uid: 6ea54608-0cf6-4e87-ac5f-bd392cf8c401 kind: ConfigMapList metadata: resourceVersion: "104313"