--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-15T11:31:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"a2e921c4-8de6-4b78-b338-8898166aeccb"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T11:31:17Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a2e921c4-8de6-4b78-b338-8898166aeccb resourceVersion: "2334" uid: b498c131-40b1-4b09-a34c-8a23cc277e0d - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-15T11:31:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-15T11:31:17Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2332" uid: eb7f7cf4-6bf3-4c08-acc0-352a1898a3b2 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-15T11:31:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"a2e921c4-8de6-4b78-b338-8898166aeccb"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T11:31:17Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a2e921c4-8de6-4b78-b338-8898166aeccb resourceVersion: "2331" uid: 051a0226-c061-4645-b0a0-e4679f36a11f - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIW5QxVcXKlLcwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNTExMjg0NloX DTM2MDkxMjExMjg0NlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX2IG1vzklXI UkxKQXgjESoXxV4vpyn0c7vhe478t+IT8UZnpv96y64fCtUL+gEgW82xPR1Pn3vw xMY0QvD71tRn/zSYI4daXNovVsa0BJMB+N6D0SDDs5GygD463BFV8/tIX/HZ6U+G HgYJpQ7jH6jxUB6LIO5WsJGsVPRBgzuP5VctmyrSg6SJAwy2V4D4UjnOuaXDC7my 54gBGE+VVBU/bzozzfNyDcSDhldjcOYubBY6oWgurauMoU81FqT8vA0TGMIEvRvg +E8U4eheHLekv7erUdVh36wYcSj0AjPIVo9Oy6WDMizaXZriQI+Dnq+vVKZ6PZdo Jv9YxXK5bQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA/y2Md6Ul6sLGdT3ogvM8Y7C5TZY6CIDw0WYBIKdLT16sy+rR nMz3WGsUl5qczZHEG5fwdIU5dJ6HQuCFICZpbDANBgkqhkiG9w0BAQsFAAOCAQEA J/s9cpCbOUxu4dB9HUlZ62Fl8spIP17xZV2TvncoKnzorzmvm1vutmpxfyfiR32i 3qPe8LckIAH1M72Pf6/sEwB1LxdwrwnriTC5LQOOLL7TNALp5Cpvv/I8Xi7E9h0T CusC2VE5hj8MTGZvzjOaHbAN8PXCeNBbJSbD9yfXt6Jqxy0c0VcW7kD3+Muo915j NvHj1vbAj/++yzsh1iwAnD0uqJwQRBjhDtUgKztEcz+ovQcIxpb/bKiK50Z3yJv6 AZr0SWwZfotKSk9NrdHcoU+vaUwVtXR2wkT78VzWI+eqW39sw/BB3BXPt7TEXdKD b2ZelLlwZvsuVNeQ7krzBA== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIW8x/U3PIMl8wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNTExMjkyMFoX DTI3MDkxNTExMjkyMFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANP/icZdHFf/gixVYicJ4G4uCZ8NFjl/X68W+yyxC2p8/LomIQsSUfWyKlnUzzU7 WwFMjN7sFjqm8ghYo+JmkXe4wVcNe/nyO8Dr07CoMGyJE1TaiQUQlVZoRJuWEg9j MkHjjHQkWR0I90+TqMNv5ISq1GixzMM4Odg2ZZjyx16/RlsyZGEdT7209k1eCtdm 9LidzStBDjJ3QigA6g5/TrZdTJEjxk1WgLoocafJn4kcn8860gFijCVhPYNAHCyc r3KujDN1IICRmtlKeYXPdVKYtHirzmxQrI9BJRUxdQSAvEwGEC14v0EWn3bMSduX ggFvDBizVhUAidIf7WOSotUCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAPWkX6bZhIqRgZ8l8Eez82f9rqgDeOl2mibJ45OlfnZ2HLRQoBc/twayE 1RmSXZZXla5SMmZerlhx1vLKjgpARTBLBgNVHSMERDBCgED/LYx3pSXqwsZ1PeiC 8zxjsLlNljoIgPDRZgEgp0tPXqzL6tGczPdYaxSXmpzNkcQbl/B0hTl0nodC4IUg JmlsMEsGA1UdEQREMEKCQCouYXBwcy5mMmQ3YjNlMC05NWFiLTQ5YzctYTU3ZC0y MDYxM2NkZWI3MDkucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAKmJFHDC6fe9/URIafUEwEI4gA4iYj4TXbKPs00Y4JHF1zH9aSu7teauad06 5H9SG7S/XeWspECgt42IRUfg7XqrJPa61i2LKIn/Kqz8hv58JMrDBtn9O/8SlNM0 PZJkpk+7YiJIY961QX6pkxiUYe/dcxRPx/BVAEs1ubgxtjmcBMvE0YHsIqrbUhZM yx0KoMB6/tF2PEWOEHdnQhKjEc1pVIrDKi0DAP9T4Azh86FmTffmqy7iIlBia8/k IlO7NCPBQCh8yYyBe/WRc8xDp7VO8yos0ZnmjDyZkmt5XHE0mLhEI0yU8cilRNqc le6miqYata1AMeICzSDoAGPAI4o= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-15T11:31:38Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-15T11:31:38Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3982" uid: 28a56c3f-6d12-46b9-9d91-a56a6a674e1f - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-15T11:31:18Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"a2e921c4-8de6-4b78-b338-8898166aeccb"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T11:31:18Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a2e921c4-8de6-4b78-b338-8898166aeccb resourceVersion: "2382" uid: 65f3ac29-f041-4746-aabf-a57d26f68b2d - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIHEVSU/ewhwgwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTQ3MjI2MDAe Fw0yNjA5MTUxMTM3MzlaFw0yODExMTMxMTM3NDBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk0NzIyNjAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzl9E+ubI46kQ3IFUfvx4+3uPCOUmRShxy rFHTdX+CibV7qHENlYY10q3tmhqsEMdx+LJYklfPzHCpusO4l7+7NZSiOMzzPkXy 8xIa97AT23w9hPmuexkoeG6YHBnavsabuxJpovUm+nz07Qs6X+D+0PVBMu4XINLK WUXrpp45t4gju4FBY+ZZ6Mf5Ky3TYtLTKmny44LMLM07X+yOVpK3LyQrOLIYjXtN 4Bigez1ngaOt6fPzGvK0BBgef7nxNpfCz30zRbQvIZkrar1ZwHYWzoufArRjKA1V 2tQfmTvjbyKLc/V9xQOexH+Frc3HxyDQ6s6JAOT3cKYKB0BJpEbhAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS2gNXm VL7lHrSsponLeWT6doDwvjAfBgNVHSMEGDAWgBS2gNXmVL7lHrSsponLeWT6doDw vjANBgkqhkiG9w0BAQsFAAOCAQEAj7K00GfeAc0fIHcIUyWBHqcxCZB7yQX4NEFP r3aC4DlyrCXnxpR2OyHimRc5y138ROYUmkQzNHFll9j1t6xJa3iG5sPn+4vheeMT m42iAubkOxZ1Y6FmT9RDrZ7+g7gSD1h/1F8Ld/7FShDvJBn6MrKFH2Gim4Be0XWi VU0Elpe1tR9oWTWK2aY0z1iEZ3OAxSwGE8lZ43vVKqqMXJnwak8w47t3ZbQCq02O Plh6oejkHyOxCDNBFyQoU5tu/w2m7ORhONnoZKvdI5x6uQmOCnLzvI1tdddpVik0 ThHC4Sl7H8qfdwMNNKxq7OZsMBDkV0GaGTWECIFMUsw74eYRow== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-15T11:42:24Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-15T11:42:24Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14763" uid: 2c58b440-8b24-4a3c-9857-423c46ac14e5 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIHEVSU/ewhwgwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTQ3MjI2MDAe Fw0yNjA5MTUxMTM3MzlaFw0yODExMTMxMTM3NDBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk0NzIyNjAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzl9E+ubI46kQ3IFUfvx4+3uPCOUmRShxy rFHTdX+CibV7qHENlYY10q3tmhqsEMdx+LJYklfPzHCpusO4l7+7NZSiOMzzPkXy 8xIa97AT23w9hPmuexkoeG6YHBnavsabuxJpovUm+nz07Qs6X+D+0PVBMu4XINLK WUXrpp45t4gju4FBY+ZZ6Mf5Ky3TYtLTKmny44LMLM07X+yOVpK3LyQrOLIYjXtN 4Bigez1ngaOt6fPzGvK0BBgef7nxNpfCz30zRbQvIZkrar1ZwHYWzoufArRjKA1V 2tQfmTvjbyKLc/V9xQOexH+Frc3HxyDQ6s6JAOT3cKYKB0BJpEbhAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS2gNXm VL7lHrSsponLeWT6doDwvjAfBgNVHSMEGDAWgBS2gNXmVL7lHrSsponLeWT6doDw vjANBgkqhkiG9w0BAQsFAAOCAQEAj7K00GfeAc0fIHcIUyWBHqcxCZB7yQX4NEFP r3aC4DlyrCXnxpR2OyHimRc5y138ROYUmkQzNHFll9j1t6xJa3iG5sPn+4vheeMT m42iAubkOxZ1Y6FmT9RDrZ7+g7gSD1h/1F8Ld/7FShDvJBn6MrKFH2Gim4Be0XWi VU0Elpe1tR9oWTWK2aY0z1iEZ3OAxSwGE8lZ43vVKqqMXJnwak8w47t3ZbQCq02O Plh6oejkHyOxCDNBFyQoU5tu/w2m7ORhONnoZKvdI5x6uQmOCnLzvI1tdddpVik0 ThHC4Sl7H8qfdwMNNKxq7OZsMBDkV0GaGTWECIFMUsw74eYRow== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-15T11:31:38Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-15T11:31:38Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-15T11:37:55Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8184" uid: 53137b2d-3d20-48c5-954f-6a38e37a77cc - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-15T11:31:18Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"a2e921c4-8de6-4b78-b338-8898166aeccb"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T11:31:18Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a2e921c4-8de6-4b78-b338-8898166aeccb resourceVersion: "2336" uid: a13b6c0f-ddfd-44be-a9b9-4f9306a0abbe kind: ConfigMapList metadata: resourceVersion: "60263"