--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-03T05:48:55Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"96063735-dfcb-45ee-b685-9ffa1ed46df4"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-03T05:48:55Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 96063735-dfcb-45ee-b685-9ffa1ed46df4 resourceVersion: "2471" uid: 694b352d-41ed-4675-8fb3-e61c06682ddc - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-03T05:48:55Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-11-03T05:48:55Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2466" uid: e1c8aacc-53ce-4d63-94c5-424d9ff1ed44 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-03T05:48:55Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"96063735-dfcb-45ee-b685-9ffa1ed46df4"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-03T05:48:55Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 96063735-dfcb-45ee-b685-9ffa1ed46df4 resourceVersion: "2465" uid: f695b5f6-af8a-433c-98d3-806226c0d86f - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIRv5QYhBtfKQwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwMzA1NDYyN1oX DTM2MTAzMTA1NDYyN1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XvZaLXoDWF9 nh6gUoAy1DSB+enwn21Jb3jkT5o7d6rE/Al00zYJLtGZZJ2ZuFirBpnPlZ9M3qe9 79YLILw6GcnKffw4fXYwWv4FeG6r8xFwTXZAumvQk00OpTOO3I8jb0hmv44UcJFX VqsWui5MgSYAIENiBQzfws13unMoZs7wYdF9vUBDrTklEr++pIMAYFSQB6ZL5OiV 7hAnnr6k1qKgqfBEvJFoLril8qJMXA9MvLrJ78lMU64sL0ay93aATGuvoYIAUJ/+ 6hCB84Nn0yzWdjx9BJPT939W212RV5EMt2nsBm/XzVBG5kryHcutUr8JF89uv6nn SRGI8cNJyQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRADeYKQeBlDqFPkXAqtSF8SYcnCi6HHCpC7zw5HAS4FwaNYQyI 9jBMQbpdnCT0xafzCGcD0x40sT2+xPE1gM+pFjANBgkqhkiG9w0BAQsFAAOCAQEA uI5oblKCN3uySXewIKN1+pTMry5hTuy44ZLFo6W19I3KrAFdcb3PBs9ubcfK7Qrs pz+UVJiMls6XQR8DVo3qckZ7JIvrn4yHy90Zg8msUIYThs11JTQ7I6xcD3mnW48W Tk4oYJn5GrlXGCgevF+iht5TCqj6vpURKlJrkEEK+tM9T3MWUJqxVo8oS8Gpmr+o WjGCascxY601lStZkjm9ZSRAaQO6AOWNGPmM4Mh+hGoUKgAMWDiVQwRJgRllVWC0 Q0lFcmMHvKfT6ppRuDKnNXXp1cO9sL9WuHacDoRc6WxwCPiu1HMS96v3dTLRbtCE ArWPHNurOOL2qYjxftKkjw== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIO/QoWMq1kXswDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwMzA1NDY0OFoX DTI3MTEwMzA1NDY0OFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANE/6WQSJhMXUFQZArFdgSxdBf9onQaNcuSkNmM0ttxTA35FY5J3C5h7emIu7mNZ 2aG6pzASbHUS6aTV3B1UTXOVACob6nj0vxwhSvrjJTvNYKROjeVOhk//Gbv6hR0/ y7KGGfzDOPGffqTQP2pBQCtOF7lkKxcp4xMsbgR1iH7K00+IkZZsSDb/Tm2c4h+o nGW58c6732Z+ypr55lww+FEIxxXVijyK/+hmAkZ9kVzwCFtwDypX910zZMF5xygo Sl0HyaGncp86bq25VagxlVJgzDM+olXDGH5VXFK6oRRq9uKftHeuvZY79CZLH8WQ QjyC3og+5va+TJkgwyIIeBsCAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAtaJgAqspo49BA4VG8U/50WjtsRTCHCmtlYr7Q2TUZneNox+6kMjUoeZE qMBL9m5tRrNLONdeYKGJdJgm2hqaTjBLBgNVHSMERDBCgEAN5gpB4GUOoU+RcCq1 IXxJhycKLoccKkLvPDkcBLgXBo1hDIj2MExBul2cJPTFp/MIZwPTHjSxPb7E8TWA z6kWMD4GA1UdEQQ3MDWCMyouYXBwcy5hM2MwOWNmNzhhMzU3ZGY1ZjI0OS5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAAtsfTH3VNmWG Yz+2Q/w1S1vwEjr0nFgoAHYUNAKU+RjR1ptNLaX6snYE5dXU4PGQbSKC1YE2VkNa tPK9jnaBoqHSzsnpJJhu226AHlN1x/4r0SLjkgaCArwUlRb/RSv287Q86SQbhYQi 2yV16cPDnmNUUhY/4EhdOAjyl4zflaXHvwbnd9W3VkuNexAiQ9ZEgAGq7eGO3Edk BwukuXOvi+duKEWIJ76JkvOxmVjk20p72Tn0vgfl5yZgnB/mUChS9dJyZznmgeqp z2iNIOza5ckuZw4nZSj5K0OF6CwS3rXPNun0k8g8MBRoN/ix80K/BKj9YKImt2ws Nizs8Cd3hg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-11-03T05:49:07Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-11-03T05:49:07Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2912" uid: c6d59951-9db6-423b-b13c-be7d3e43c263 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-11-03T05:48:55Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"96063735-dfcb-45ee-b685-9ffa1ed46df4"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-03T05:48:55Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 96063735-dfcb-45ee-b685-9ffa1ed46df4 resourceVersion: "2483" uid: 64fa253d-9000-48f8-9441-852913347d45 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIdqBbJQATDHAwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzY4NTMwODAe Fw0yNjExMDMwNTU1MDhaFw0yOTAxMDEwNTU1MDlaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM2ODUzMDgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcYtHyt3QIeMZ+Fdzeg4XYg4bqoWVE3D47 XZL+Bi7OzPTeWZ7dhIE1ustG1HYeiRjiVKJj2Aoax/HGssGn4vt5IakeDUSK4lEK YMqqrqco9gjc3uEAyrq4Boz0c+CTdZnYlP2F4AnzRIhkE8j1Oy7IxgZZstsCMoBc F7j5/eVJUIGMrvr0mZcCd2aWe99mKKF3fSgDMPQm2kRY4GrAVNy/F6KKpRNiabJc VQ+Q41BoQV10dbezgxB98ZCd18tzPQwBTE6ppTQrg39v++5/iDD2iWkCQMm1FeZa SN1IZObQb7+mIbkbIM2JQB6ykwc0uGckp2miicHLlFQ3XtmOjhARAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR0TP29 uLob4OMWsic9WKYu3z927jAfBgNVHSMEGDAWgBR0TP29uLob4OMWsic9WKYu3z92 7jANBgkqhkiG9w0BAQsFAAOCAQEATnvLkvcp9zvGl3UlRn1c82EsIgQMk9Gx+ksO iroWjHJfa3itfTid9OZKJSPY24u+lnOZBADxaGzO0wElqfxmpI47Tjb/pifWafYL C69uvyR7fwNo2lJk4gv5IMH8P0MDlWwqdqFOPZg3TKWCIqo0YdHOibYBobG2ua1A uSTgwlLVFQoAkzBB8ozV94TdaYACIAhHjROlRzkBY9FNjDDWQPBMyZqfb2WxuWOW gIHBas/kwRTCndMfX6rJxnY3c4hwNLIHdE0i5QF4OVXg7DHQUASy8QVIy/oi1V1Q Z09KA6sPvHC6Fhd8p1rulk/Ate7+GgkL1Ck5nhXtdFo5RXVi2Q== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-11-03T06:01:00Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-11-03T06:01:00Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "17497" uid: 6206c4a0-e365-4918-83a5-9398c4641da8 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIdqBbJQATDHAwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzY4NTMwODAe Fw0yNjExMDMwNTU1MDhaFw0yOTAxMDEwNTU1MDlaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM2ODUzMDgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcYtHyt3QIeMZ+Fdzeg4XYg4bqoWVE3D47 XZL+Bi7OzPTeWZ7dhIE1ustG1HYeiRjiVKJj2Aoax/HGssGn4vt5IakeDUSK4lEK YMqqrqco9gjc3uEAyrq4Boz0c+CTdZnYlP2F4AnzRIhkE8j1Oy7IxgZZstsCMoBc F7j5/eVJUIGMrvr0mZcCd2aWe99mKKF3fSgDMPQm2kRY4GrAVNy/F6KKpRNiabJc VQ+Q41BoQV10dbezgxB98ZCd18tzPQwBTE6ppTQrg39v++5/iDD2iWkCQMm1FeZa SN1IZObQb7+mIbkbIM2JQB6ykwc0uGckp2miicHLlFQ3XtmOjhARAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR0TP29 uLob4OMWsic9WKYu3z927jAfBgNVHSMEGDAWgBR0TP29uLob4OMWsic9WKYu3z92 7jANBgkqhkiG9w0BAQsFAAOCAQEATnvLkvcp9zvGl3UlRn1c82EsIgQMk9Gx+ksO iroWjHJfa3itfTid9OZKJSPY24u+lnOZBADxaGzO0wElqfxmpI47Tjb/pifWafYL C69uvyR7fwNo2lJk4gv5IMH8P0MDlWwqdqFOPZg3TKWCIqo0YdHOibYBobG2ua1A uSTgwlLVFQoAkzBB8ozV94TdaYACIAhHjROlRzkBY9FNjDDWQPBMyZqfb2WxuWOW gIHBas/kwRTCndMfX6rJxnY3c4hwNLIHdE0i5QF4OVXg7DHQUASy8QVIy/oi1V1Q Z09KA6sPvHC6Fhd8p1rulk/Ate7+GgkL1Ck5nhXtdFo5RXVi2Q== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-11-03T05:49:07Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-11-03T05:49:07Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-11-03T05:55:20Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7142" uid: c872f75f-5e84-4587-bc8c-7ac29a02f594 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-11-03T05:48:55Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"96063735-dfcb-45ee-b685-9ffa1ed46df4"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-03T05:48:55Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 96063735-dfcb-45ee-b685-9ffa1ed46df4 resourceVersion: "2479" uid: 27ea45f7-0848-4c18-871e-7da60a33a747 kind: ConfigMapList metadata: resourceVersion: "68658"