---
apiVersion: v1
items:
- apiVersion: v1
  data:
    cnibincopy.sh: |-
      #!/bin/bash
      set -e

      function log()
      {
          echo "$(date --iso-8601=seconds) [cnibincopy] ${1}"
      }

      DESTINATION_DIRECTORY=/host/opt/cni/bin/

      # Perform validation of usage
      if [ -z "$RHEL8_SOURCE_DIRECTORY" ] ||
         [ -z "$RHEL9_SOURCE_DIRECTORY" ] ||
         [ -z "$DEFAULT_SOURCE_DIRECTORY" ]; then
        log "FATAL ERROR: You must set env variables: RHEL8_SOURCE_DIRECTORY, RHEL9_SOURCE_DIRECTORY, DEFAULT_SOURCE_DIRECTORY"
        exit 1
      fi

      if [ ! -d "$DESTINATION_DIRECTORY" ]; then
        log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist"
        exit 1
      fi

      # Collect host OS information
      . /host/etc/os-release
      rhelmajor=
      # detect which version we're using in order to copy the proper binaries
      case "${ID}" in
        rhcos|scos)
          RHEL_VERSION=$(echo "${CPE_NAME}" | cut -f 5 -d :)
          rhelmajor=$(echo $RHEL_VERSION | sed -E 's/([0-9]+)\.{1}[0-9]+(\.[0-9]+)?/\1/')
        ;;
        rhel|centos) rhelmajor=$(echo "${VERSION_ID}" | cut -f 1 -d .)
        ;;
        fedora)
          if [ "${VARIANT_ID}" == "coreos" ]; then
            rhelmajor=8
          else
            log "FATAL ERROR: Unsupported Fedora variant=${VARIANT_ID}"
            exit 1
          fi
        ;;
        *) log "FATAL ERROR: Unsupported OS ID=${ID}"; exit 1
        ;;
      esac

      # Set which directory we'll copy from, detect if it exists
      sourcedir=
      founddir=false
      case "${rhelmajor}" in
        8)
          if [ -d "${RHEL8_SOURCE_DIRECTORY}" ]; then
            sourcedir=${RHEL8_SOURCE_DIRECTORY}
            founddir=true
          fi
        ;;
        9)
          if [ -d "${RHEL9_SOURCE_DIRECTORY}" ]; then
            sourcedir=${RHEL9_SOURCE_DIRECTORY}
            founddir=true
          fi
        ;;
        *)
          log "ERROR: RHEL Major Version Unsupported, rhelmajor=${rhelmajor}"
        ;;
      esac

      # When it doesn't exist, fall back to the original directory.
      if [ "$founddir" == false ]; then
        log "Source directory unavailable for OS version: ${rhelmajor}"
        sourcedir=$DEFAULT_SOURCE_DIRECTORY
      fi

      # Use a subdirectory called "upgrade" so we can atomically move fully copied files.
      # We now use --remove-destination after running into an issue with -f not working over symlinks
      UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen)
      rm -Rf $UPGRADE_DIRECTORY
      mkdir -p $UPGRADE_DIRECTORY
      cp -r --remove-destination ${sourcedir}* $UPGRADE_DIRECTORY
      if [ $? -eq 0 ]; then
        log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY"
      else
        log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/
      if [ $? -eq 0 ]; then
        log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
      else
        log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      rm -Rf $UPGRADE_DIRECTORY
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        This is a script used to copy CNI binaries based on host OS
      release.openshift.io/version: 4.21.23
    creationTimestamp: "2026-07-08T23:26:38Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:cnibincopy.sh: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"655ae6f4-6a59-4260-b18c-b1a8460bde5c"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-07-08T23:26:38Z"
    name: cni-copy-resources
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 655ae6f4-6a59-4260-b18c-b1a8460bde5c
    resourceVersion: "2336"
    uid: dc15d994-5a8a-4412-a5a6-6ca072bca52a
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.23
    creationTimestamp: "2026-07-08T23:26:37Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
      manager: network-operator
      operation: Update
      time: "2026-07-08T23:26:37Z"
    name: cni-sysctl-allowlist
    namespace: openshift-multus
    resourceVersion: "2330"
    uid: a27d56d1-5904-4154-be49-ab2d8ab10074
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.23
    creationTimestamp: "2026-07-08T23:26:37Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"655ae6f4-6a59-4260-b18c-b1a8460bde5c"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-07-08T23:26:37Z"
    name: default-cni-sysctl-allowlist
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 655ae6f4-6a59-4260-b18c-b1a8460bde5c
    resourceVersion: "2329"
    uid: e9b771c1-baac-4739-b4f6-22eed0931ffa
- apiVersion: v1
  data:
    ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDPDCCAiSgAwIBAgIIUfPG3iC65YkwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDcwODIzMjQyNFoX
      DTM2MDcwNTIzMjQyNFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy
      b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWIDwhBljV5F
      CiMcvXfDC5cl3V9NUEdhrph4ks060Cb8SJPO49KLzz/Vh7Jb4/8fEXuInz2eASxM
      IJylLt1pIvMxbxUKpjrdCL4TrNoivz/afkv3RUSBYK4NmrBHatv5HMgLL4cNdzVr
      hOaP1Qm5fyf6EFpIbrZBz5hbBQFW2wXp+5yCySgdQxsKSZ8LEO9XawtCmoY8EXw+
      Xqgw7NxsiwggswU91G0XdHFxiz3gIxi66v1AwzsGetZpFPI3bGZljs0u0xekCqGC
      6VpA1cq+QQ6kXmdD7TnNMyElaUZ1c1eoemz6k+jxxxJITf7McS1eJ/sugtX0qhRV
      reVuPmAbqwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB
      /zBJBgNVHQ4EQgRA6fW0ITuvR5KHIZr9he9sHV4EEamwuXvNa3YPFUx+Li8XjL4M
      O2FBHRrMs4khO5Dnjpe/fRStiKgmZVD1m4TKyDANBgkqhkiG9w0BAQsFAAOCAQEA
      Cm1DiRI6rcAvUx0uijojScGjiKz5yk74xoJcO5gwvuYvMn58TKSkMrItoTCugKwt
      GySO1E8vKMn3jRcLNTTXBFMjVbSosUwALPWntXU2tEYvhn7hJOTVQk1ZzNJjWUvD
      cQOLuuL+ft3Of5wAHm/LapKAM+9DA4Gast0paUTbbSscH1ulZoOv58yrwIwAit8n
      r+5knhLLrtTB2AgjbvgZt+N2RxKyPB9tpkZfmgq+vsUjhzNmxbCF3yi8uMEKU5Qj
      hcbScTQy3Gw+cmgp7pDqPYXBYrItzm9fs1/VpOOeaefBlAohqqsp3POsuzIhUzRt
      d+uIJy43TRWy6JdunGmVgQ==
      -----END CERTIFICATE-----
      -----BEGIN CERTIFICATE-----
      MIIEADCCAuigAwIBAgIIcJBv2zGua4AwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDcwODIzMjQ0OVoX
      DTI3MDcwODIzMjQ0OVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv
      cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
      AO2/Gq8PcAfgPU69OXn0DCmyJoH5kis5J0lgA7OIZ0Pr9uVAH8pVgcYUBZI6u4ia
      pUOMK+XB0fXs2Mj1RZn3d8dHbNoSiqGDH4i2TMDgWobDN1qnxHARG05z3fHV0coJ
      dBF3Ynzn/rYLsqXyU13LRV/shMapElKgjpPYzJVFFFQYUyJBhys5FZroCuBAHabg
      b+zKXwSe2mXSkDo+HYnzlJcQUjDmOAeK5qceZ8gtEWH4dZ/yoQz8BjnTeMeLF881
      /LJTlWGsGvJ8YOdd5lArwjaXJHkmycWhVTK7LmS+NhhQlV2Gli9YaIsCbWcsg5HH
      Z7iL0Z4N71V0ZNDlhmtBCMkCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd
      BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV
      HQ4EQgRAgSCITHldwrouY1XyJXjCyEQ8uHY9KOhqDg6x+XbD/BZElLxJ2FqLLsah
      jCn9uv+0bfNKcckJ6JxrtCsrYI4aMDBLBgNVHSMERDBCgEDp9bQhO69Hkochmv2F
      72wdXgQRqbC5e81rdg8VTH4uLxeMvgw7YUEdGsyziSE7kOeOl799FK2IqCZlUPWb
      hMrIMEsGA1UdEQREMEKCQCouYXBwcy40MDVmYjRhNS1lMTk1LTQ1Y2UtYTkzMy1k
      Y2U3NmNmZGI3MjYucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD
      ggEBALCaExKOC2QlnFzwVP1XnzT07omnJj5199ctaBr73Tekf6mhsWvmZxal2qCG
      GSPJq+R3wk/rLXlh14uuiXAkkJsb1hmsgEmzIOt4wvK48y8ccSBfN02lhsjhJT9D
      8Koc3XK7s5jRnAcb3OQm18lrV5fpk7WHqdNiuuOC0ISWDwydZKNOq9k0b9gIXM66
      9Vvwxnz+iH5pBrnN4pKNGrjn3IXvnlI3U0KNWSEqtH5yGEIu9TUd0A/hnp9i0xLU
      m8ytNmvqmI+QxjuHU7ef9BW+4OKZLSiFSs8yVnryALq7HQ8Cq34GY3Wbzz/cnJPl
      PmyQ2cHkDs0Tfz/6xkjFKSsyNtg=
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: Contains a CA bundle that can be used to verify the
        kube-apiserver when using internal endpoints such as the internal service
        IP or kubernetes.default.svc. No other usage is guaranteed across distributions
        of Kubernetes clusters.
    creationTimestamp: "2026-07-08T23:26:35Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:ca.crt: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-08T23:27:49Z"
    name: kube-root-ca.crt
    namespace: openshift-multus
    resourceVersion: "4433"
    uid: 1b9bd27d-fb5b-4e80-9b7d-99448bd18b36
- apiVersion: v1
  data:
    daemon-config.json: |
      {
          "cniVersion": "0.3.1",
          "chrootDir": "/hostroot",
          "logToStderr": true,
          "logLevel": "verbose",
          "binDir": "/var/lib/cni/bin",

          "perNodeCertificate": {
            "enabled": true,
            "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig",
            "certDir": "/etc/cni/multus/certs",
            "certDuration": "24h"
          },

          "cniConfigDir": "/host/etc/cni/net.d",
          "multusConfigFile": "auto",
          "multusAutoconfigDir": "/host/run/multus/cni/net.d",
          "namespaceIsolation": true,
          "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv",
          "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf",
          "daemonSocketDir": "/run/multus/socket",
          "socketDir": "/host/run/multus/socket",
          "auxiliaryCNIChainName": "vendor-cni-chain"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-07-08T23:26:38Z"
    labels:
      app: multus
      tier: node
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:daemon-config.json: {}
        f:metadata:
          f:labels:
            f:app: {}
            f:tier: {}
          f:ownerReferences:
            k:{"uid":"655ae6f4-6a59-4260-b18c-b1a8460bde5c"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-07-08T23:26:38Z"
    name: multus-daemon-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 655ae6f4-6a59-4260-b18c-b1a8460bde5c
    resourceVersion: "2341"
    uid: 256ede4e-64f5-4d0f-9ced-937ab647f549
- apiVersion: v1
  data:
    service-ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDUTCCAjmgAwIBAgIIBw+0OxJ3azowDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE
      Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4MzU1MzYxNDAe
      Fw0yNjA3MDgyMzMzMzNaFw0yODA5MDUyMzMzMzRaMDYxNDAyBgNVBAMMK29wZW5z
      aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODM1NTM2MTQwggEiMA0GCSqG
      SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3mqYtYUuNkXqOn/ovtQe3dgOjY9HVBr0R
      nATJtnts0tJU4DFJyGBLHi0z6RRg7tj4O1whW7TBD5kCPZEczvAiapMegNPD6bHt
      lt6JDvBo+4ZJjMfHlv3nNqgK5Iq5eAPjD9lVCOjypIhe9r252sltZytvomJkByir
      xhmT1Xgfndd5I0gzsgGPKvH1xUQqrIbg8ado6mLzeDlu8xLhefCsPr/e1FRaEvWE
      yNKVyKqkQjSOVyz7wcsvtyiH7PUIvVjvBB7YEj7UHo9g2vXXaHG3DqhGZEGnb7Qr
      n1fwkfi8xQifPk0mkGvExQEh/IGi7URM7PGe3Jio/8Eqm8Q/Yvk7AgMBAAGjYzBh
      MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRkvEfy
      oUgClcAj0ejZE5OdmzmImDAfBgNVHSMEGDAWgBRkvEfyoUgClcAj0ejZE5OdmzmI
      mDANBgkqhkiG9w0BAQsFAAOCAQEAssTiYUQUeH9+SkR+Qa7qHjDBq2UURmSWYROv
      hAx9oEiw67S5KP+RyEmSucjI8VbDmN9gyR7APt3MQns4Tpp4c1+dIw/gpTpw8zgv
      WbJWnANRFZEtVDNebJGUH6IIoCLvHpQspltH1kD8zeQiTI7xsFIffg0RvCCr9FH4
      T0ov9t5uFF4SRxXLhNwQW+Psf7kdAe7ruUDkK0d/9aMfK6mz8HW81SYBU0uPtfu+
      GWkXBF5KKAAdUAhHYavwTJRypCUI02uuIK7q/gL5mGArcG9rdae1CelFxdoPpVI3
      sTtF1704g4ix+Mjht5T/JOaE0o4Sz22X2CuBxksRNIIkVbaGJA==
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      service.beta.openshift.io/inject-cabundle: "true"
    creationTimestamp: "2026-07-08T23:26:35Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data: {}
        f:metadata:
          f:annotations:
            .: {}
            f:service.beta.openshift.io/inject-cabundle: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-08T23:26:35Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:service-ca.crt: {}
      manager: service-ca-operator
      operation: Update
      time: "2026-07-08T23:33:49Z"
    name: openshift-service-ca.crt
    namespace: openshift-multus
    resourceVersion: "8284"
    uid: 5dc90285-256f-4ee3-b961-c3ad11043966
- apiVersion: v1
  data:
    whereabouts.conf: |
      {
        "datastore": "kubernetes",
        "kubernetes": {
          "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig"
        },
        "reconciler_cron_expression": "30 4 * * *",
        "log_level": "verbose",
        "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-07-08T23:26:38Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:whereabouts.conf: {}
        f:metadata:
          f:ownerReferences:
            k:{"uid":"655ae6f4-6a59-4260-b18c-b1a8460bde5c"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-07-08T23:26:38Z"
    name: whereabouts-flatfile-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 655ae6f4-6a59-4260-b18c-b1a8460bde5c
    resourceVersion: "2340"
    uid: 81e36e72-d836-46fe-9938-9629cdeef9fe
kind: ConfigMapList
metadata:
  resourceVersion: "11439"