--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T00:27:46Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"21cd1c65-7b07-4036-9d5b-cd2ed09b5687"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T00:27:46Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 21cd1c65-7b07-4036-9d5b-cd2ed09b5687 resourceVersion: "2280" uid: 7ab00bca-0cf3-4450-b930-e3e4df61bc79 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T00:27:46Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-10-30T00:27:46Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2276" uid: bdfc2bfc-ed67-4513-a0c9-e9767b95cafa - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T00:27:46Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"21cd1c65-7b07-4036-9d5b-cd2ed09b5687"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T00:27:46Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 21cd1c65-7b07-4036-9d5b-cd2ed09b5687 resourceVersion: "2275" uid: 1b17d163-b6da-4b52-8eda-6e2e0e1ee51b - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIas/q5rG5KQIwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDAwMjU0M1oX DTM2MTAyNzAwMjU0M1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTn3b3HdOpsx +RkDlxXzhou6sGavWIh+slmqPP1DHUTLXwgdr2aG3Ooq1vZkH4J/uawMlqRNxB2+ gZoJHr1evokushXx3/eH3YBy8fLSDj0gfjIUwiZVmqNuN998HOUZVoJJugb7f1yR SItQU2iJZdN/hBTljx1QV+GMeP2lTltyQN7Y1y5aq6QOnJIgnMEOnp0OzS/TLrgT VbiZjIs1d6ses8uMY+NH1w2KRVy86b9KYeH6az4rtK1OSI/zIVymcpxzDQb75VBf ZiwpAsU7DY7DQOSykqTQZph6Y9pb/fxt81UIXk8vZ2Tsp559qrSmq1LeYmW/mqtC S36IQ0gtNwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAmGCGiJx9yQ7AGy6vuhe1eMtinv8ZNaS3RVzvoYdzdiacs+b2 MPBk8MprDsEcuc1JfcU7FqcWdLlavAXFZaONTDANBgkqhkiG9w0BAQsFAAOCAQEA BACy3hgBNrvIubb2zciJ3A4bNJu6+Xe84jRGsehg/QLezVY7w8c3y6z0xIDpxq3h ISVN/gkIFqOw3FuTOVWnBqdkveOYJNkchD3z9GDbla1K2aI62KX78dZMUzpSsDGd vaBVNW9esvSsSCuh87KSHMOuv0nX/DfRiJR6Ef2I3Xb1mt3KhVe7+c9yvaNVtquU VxpqRrL3Z6VAuzofT6et2aIlZpVyPnGgqanMwAfjHqTqLQ2PjJHTrCoyb/gUJY1M L+/EZKRPqY3DUptNhX5vAJq4/UImMqise3D3rcRCU6fGJ3q8f42ILSMnLIXVd5oE cjIbCAo+67DYvmqbsTxBow== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIZpoTOoS2RMkwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDAwMjYwMFoX DTI3MTAzMDAwMjYwMFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOkuJx5mTG5RgeinWWOisnS1vH0jUOwhuiV9UzYf8rtBbvvPMUNG9yPFASbSCdCU 66B5tHid+EvdOrb7hc3YM7Fxw3GgbXQTyR+WEDTHj983u0V9SwESmuop7DrSgNQn o5aBHIXcgJABfHo6RCaIxC7E+s2QXYzn8FBnGIasAEkNIlny7IJfS46fdPfxB+Pp o5F9Bf/WJCOtENztvWhuoNf7gUuwB7yjXf4vvfSQYC++mrL36rqBvsPqholiqWiK 9tIvHsXTO2FnitRC+22c9//4mz/L+sthqRtn3XQhmCp7L7++UquYsHALQF0nPGYz TjiCUthadXSYzSV6g6Wj/I8CAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRA0B+ux3XzT0Cd80eUiJElbAgiP7ZkUHvqDmXArKGOvL4ddo3MDauoV34N f9lJGOSPaPTrkU5lfYkZnNbZT1p8BzBLBgNVHSMERDBCgECYYIaInH3JDsAbLq+6 F7V4y2Ke/xk1pLdFXO+hh3N2Jpyz5vYw8GTwymsOwRy5zUl9xTsWpxZ0uVq8BcVl o41MMD4GA1UdEQQ3MDWCMyouYXBwcy5iZWE3YjQ1NTIyNTQxZDFlNjFkYS5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAunZ4+HC/fwwE M1binjhJLQSGau+94NQj+/7B9AL26HfQghWrV/Wc3WQAnwZbgG6fB6yT7N0U0bad q2FBFopD91Zl3/5WRT5QjRDJK4UCUuUQ/U0z8qWgXrx7fWZr4I3ZM+COd/L9D5P4 Ae65tOWEjaNrVLFwOO2sSDHLXOCdJWgZ+QAOuwq4boZujud08N5jGfrTlKKUOMre dLKxir2Q3chH+EdpgfRJzbMPXvyHyeaCY+o2lqZ1dfXzYHB/zitOrQ/j20SwiPxR /l8JXqV7jl2Q5/qC1DeiueM2gdZstGLnoQMwBRBp2StCgBIWa2goUs6IyX1Vgqak cgalJzOTKw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-10-30T00:27:56Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-10-30T00:27:56Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2588" uid: e5562cb7-85f8-4507-9703-44991cc19f44 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-10-30T00:27:46Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"21cd1c65-7b07-4036-9d5b-cd2ed09b5687"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T00:27:46Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 21cd1c65-7b07-4036-9d5b-cd2ed09b5687 resourceVersion: "2284" uid: 3919260f-05ab-414f-9798-1502d44090d9 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIPZs3bRGqa9IwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzMyMDQ1ODAe Fw0yNjEwMzAwMDM0MTdaFw0yODEyMjgwMDM0MThaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTMzMjA0NTgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0sFUtA0ZBTs72Ziz3BqVjZSTDCdpK37I5 gvtTxAzjSCG5Utg0hjqh2HzPw9XDSuJT3IZMpAVxonXxsHGzrA7Q6iMNXO0SYuqZ 9iVgE6DOElXb3b3388FkTsmDOJtrcdKUns5SxJgFFr2VjEtWInzh4NT9pE6acE9u OLsrFVwE7yEDZYlKEX1V8zH431Fbxtf6NZY3xelN9cZYI64XfFmprrUqxKFt+WR6 1zetG1WMmcEJDKitdsrPpoLFz5D/RQk5CBG0VSs0Qu+i/GneHp/dA+EhzRPe2kEG iRst3nU2avbKj6bdq9wQtB0B9PxSiKsc6SwIyGk1P9+Otmwp5sFhAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSSxlMx n6FzzV9GzqlLeltka0IbtjAfBgNVHSMEGDAWgBSSxlMxn6FzzV9GzqlLeltka0Ib tjANBgkqhkiG9w0BAQsFAAOCAQEAhyCaqdR5OWDg9p15ParfdUXIB/Z4tzDqkHB8 Ijl4ozDS3MSMcuW+QqDIBSMB73mJLXgyH7g37wX1k1TIXkPn6J047lZ+ZE0KZSp0 3gJ2707hDwSIgDllgsLc0lV2FEvvxUtuKEhnfZyiz6A4TTRA3U7r0HSC8GuYD3HI f6Sbzq9m61FuXTpdDwV0eo8T8c+gciQo3nJpWcGEolsy7leT4k2zTc4djYgvbScv P2FslaDkZd1s2yXJKx/xjuhGjpEfgEHBL3cTBIIdmcwo9/v4Ba8cg32HLaDzls6E e9qCNQ5V1klaId6onnYpa4wb5vn/MsziYVdRBNN8gxLv880rLg== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-10-30T00:40:00Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-10-30T00:40:00Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "13406" uid: 87433eeb-7e15-4ebf-9e1c-168fed6057a5 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIPZs3bRGqa9IwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzMyMDQ1ODAe Fw0yNjEwMzAwMDM0MTdaFw0yODEyMjgwMDM0MThaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTMzMjA0NTgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0sFUtA0ZBTs72Ziz3BqVjZSTDCdpK37I5 gvtTxAzjSCG5Utg0hjqh2HzPw9XDSuJT3IZMpAVxonXxsHGzrA7Q6iMNXO0SYuqZ 9iVgE6DOElXb3b3388FkTsmDOJtrcdKUns5SxJgFFr2VjEtWInzh4NT9pE6acE9u OLsrFVwE7yEDZYlKEX1V8zH431Fbxtf6NZY3xelN9cZYI64XfFmprrUqxKFt+WR6 1zetG1WMmcEJDKitdsrPpoLFz5D/RQk5CBG0VSs0Qu+i/GneHp/dA+EhzRPe2kEG iRst3nU2avbKj6bdq9wQtB0B9PxSiKsc6SwIyGk1P9+Otmwp5sFhAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSSxlMx n6FzzV9GzqlLeltka0IbtjAfBgNVHSMEGDAWgBSSxlMxn6FzzV9GzqlLeltka0Ib tjANBgkqhkiG9w0BAQsFAAOCAQEAhyCaqdR5OWDg9p15ParfdUXIB/Z4tzDqkHB8 Ijl4ozDS3MSMcuW+QqDIBSMB73mJLXgyH7g37wX1k1TIXkPn6J047lZ+ZE0KZSp0 3gJ2707hDwSIgDllgsLc0lV2FEvvxUtuKEhnfZyiz6A4TTRA3U7r0HSC8GuYD3HI f6Sbzq9m61FuXTpdDwV0eo8T8c+gciQo3nJpWcGEolsy7leT4k2zTc4djYgvbScv P2FslaDkZd1s2yXJKx/xjuhGjpEfgEHBL3cTBIIdmcwo9/v4Ba8cg32HLaDzls6E e9qCNQ5V1klaId6onnYpa4wb5vn/MsziYVdRBNN8gxLv880rLg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-10-30T00:27:56Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-10-30T00:27:56Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-10-30T00:34:26Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7032" uid: acaaffdd-02a8-47f8-aadc-4040034da469 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-10-30T00:27:46Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"21cd1c65-7b07-4036-9d5b-cd2ed09b5687"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T00:27:46Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 21cd1c65-7b07-4036-9d5b-cd2ed09b5687 resourceVersion: "2281" uid: 02cb6f1d-2fcc-4b35-9e3b-93240f642c61 kind: ConfigMapList metadata: resourceVersion: "149686"