---
apiVersion: v1
items:
- apiVersion: v1
  data:
    cnibincopy.sh: |-
      #!/bin/bash
      set -e

      function log()
      {
          echo "$(date --iso-8601=seconds) [cnibincopy] ${1}"
      }

      DESTINATION_DIRECTORY=/host/opt/cni/bin/

      # Perform validation of usage
      if [ -z "$SOURCE_DIRECTORY" ]; then
        log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable"
        exit 1
      fi

      if [ ! -d "$DESTINATION_DIRECTORY" ]; then
        log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist"
        exit 1
      fi

      sourcedir="${SOURCE_DIRECTORY}"
      log "Copying binaries from ${sourcedir}"

      # Use a subdirectory called "upgrade" so we can atomically move fully copied files.
      # We now use --remove-destination after running into an issue with -f not working over symlinks
      UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen)
      rm -Rf $UPGRADE_DIRECTORY
      mkdir -p $UPGRADE_DIRECTORY
      find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \;
      if [ $? -eq 0 ]; then
        log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY"
      else
        log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/
      if [ $? -eq 0 ]; then
        log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
      else
        log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      rm -Rf $UPGRADE_DIRECTORY
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        This is a script used to copy CNI binaries based on host OS
      release.openshift.io/version: 4.21.32
    creationTimestamp: "2026-09-07T17:06:55Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:cnibincopy.sh: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"9474bea4-95e4-493f-be82-c4fb94cd54e9"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-07T17:06:55Z"
    name: cni-copy-resources
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 9474bea4-95e4-493f-be82-c4fb94cd54e9
    resourceVersion: "2638"
    uid: 44045894-fb42-4cf8-8aac-60c7f7e37114
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.32
    creationTimestamp: "2026-09-07T17:06:55Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
      manager: network-operator
      operation: Update
      time: "2026-09-07T17:06:55Z"
    name: cni-sysctl-allowlist
    namespace: openshift-multus
    resourceVersion: "2635"
    uid: efbc99a1-b4da-4898-8829-45e06073b0d5
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.32
    creationTimestamp: "2026-09-07T17:06:55Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"9474bea4-95e4-493f-be82-c4fb94cd54e9"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-07T17:06:55Z"
    name: default-cni-sysctl-allowlist
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 9474bea4-95e4-493f-be82-c4fb94cd54e9
    resourceVersion: "2634"
    uid: 6a299af6-53b4-4bac-bdfc-aa4188cc4276
- apiVersion: v1
  data:
    ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDPDCCAiSgAwIBAgIIAn05EXS9XjkwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwNzE3MDAwM1oX
      DTM2MDkwNDE3MDAwM1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy
      b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eSd10j7v7Ks
      Z+tGKUTTOl2G3NGp4y6klooJ3KyNUQoSLKZvAWvlMRJi0n35xrWwgRFtcb9jsXxg
      /YFxjNEIT3RyOxU3N8/TnZdr7x/tYj4vaQL5fwbsxAx+U5WLUMHrQ9avIWGJeWwu
      QzCydXe+FS0zFtmc1L0UEhVT7vXGISWzbfaBjyVFQxQu2TxpwvgQ5qFQRaVGcS6j
      NGerr9eqjUuKSIUbePxCbNtXlTUTLp+ka1Ja7jd8l7SoMKUTapMzrDnwg37/R/U+
      EWssHC8iYDfFxQN7bvb30CuxJAj95fWkVe0x8iNl5vcaq4a3tBQFFda/BoV5czh+
      oI/lRdqiywIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB
      /zBJBgNVHQ4EQgRA9BKjbZn/oyYoE0QUPfQnDFB5rd2ZrJ2oIqunvIL09ZsHk/yE
      y8eLr4kbobXrJQq1oJDt072L/eDdSfMmqI8NFzANBgkqhkiG9w0BAQsFAAOCAQEA
      Jxf+u2mZfrkz1AkfGpmQvOWRRZeMaXcuHN/4d343ZeounfKpr5fZRNAKzOzMDMDc
      74EIzIUEAccPHo5WnIZhy8k+3bMj8zUw4BXvjon7Ho5nT+BEVr3DVZawaa1NqTcD
      TyGLiYv2cp1uug3UvPT5j5R4aZQc/jBEMxSWXwgZCs247FW/99JrUbgP3HnvGZ/K
      3tqjyv6nXjnO/xy/p28ve4nUEc09TDtLPsVSQzIMgtZKihLXgov8rps67soFRO3z
      0gku5vF5z6S1J8+OelIkXuDgxdBl14KA+kZ4b/lZce6qlmCcTb1y2yB9hAqZxsP9
      QIJVJN+6jUmwSnT4eskaAg==
      -----END CERTIFICATE-----
      -----BEGIN CERTIFICATE-----
      MIIEADCCAuigAwIBAgIIHt66Hy0kRMQwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwNzE3MDE1MFoX
      DTI3MDkwNzE3MDE1MFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv
      cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
      AMXic/9PQr5EeIg8plqn7QZPDcJwO7n0Xh6BHsEyMIOTgJ8bX4hpDqlj8PUYm3Zb
      IPujvjyW3P5YQGPX01xXIDdQBJCdzqUw2Sp4UmCFvVG4/1vM1vtEoOnOjSArxv9Q
      eELl4fJ9haVAZavg89PXpraAlr1ejjOklixn+aMkwsrFSU/0Wpj/1NaAy4BsE08p
      gB9ylgjtqaauzQ9C7TJ8e4zS+OfPLUNDV9CYmdFewF8vij75jRkS26mLwnnjhiYG
      zXDkRqBs19KE6p5dmXNxk1etn6q6R8OuacKppaGLAUMCbwEEakSAGyV6QRT0MQae
      4kZnptvmX3uXl9J6EVI5yksCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd
      BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV
      HQ4EQgRAWzCU89qmNyXRx56qTOBtWen9B8WTkkTc+EQ7nImyJbFHHeaVuasa3+4I
      +OboFY+R5JGmH0+u4k2BzA3pgW7N/jBLBgNVHSMERDBCgED0EqNtmf+jJigTRBQ9
      9CcMUHmt3Zmsnagiq6e8gvT1mweT/ITLx4uviRuhteslCrWgkO3TvYv94N1J8yao
      jw0XMEsGA1UdEQREMEKCQCouYXBwcy5hYzQyODRjMC1kOTM0LTQ5OTgtYTIyOC1j
      MjVhODExYTQzZGQucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD
      ggEBAHvQsWlK/i65iYdpYl2O0PVf+GLQVhm4M1DE/FmHS9NrXWT9TaRnG+ybJAgk
      a2B5LVa9EjbOlpjt1URzb/rpz7Tl8JhfMvBPnLnBTHM7cWbKnxDWOiRKEKDKvt00
      tQ3ZyyR8zN1HyZFtgxmCo1DZByqKhSVqske7sfPEqrpfLFgp0wYiLNRCeRNni7Mp
      frv9hH7y4CG+kmI9qeViffcCP0n/Q3b0mF6Mb7cm84D7lb5ZazrAvoTkop+ubXW1
      wrYoqMxoKXVh0TrsfdoUmjf6X1pOi20OPHCt0VzWVCZMfiYQjBKmLRUxosEjXLId
      iFG7FAfxtiY+Ct7cxILoBRa9jgE=
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: Contains a CA bundle that can be used to verify the
        kube-apiserver when using internal endpoints such as the internal service
        IP or kubernetes.default.svc. No other usage is guaranteed across distributions
        of Kubernetes clusters.
    creationTimestamp: "2026-09-07T17:08:29Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:ca.crt: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-07T17:08:29Z"
    name: kube-root-ca.crt
    namespace: openshift-multus
    resourceVersion: "4591"
    uid: d760d5a0-3ee3-410b-8f1e-336e5522417c
- apiVersion: v1
  data:
    daemon-config.json: |
      {
          "cniVersion": "0.3.1",
          "chrootDir": "/hostroot",
          "logToStderr": true,
          "logLevel": "verbose",
          "binDir": "/var/lib/cni/bin",

          "perNodeCertificate": {
            "enabled": true,
            "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig",
            "certDir": "/etc/cni/multus/certs",
            "certDuration": "24h"
          },

          "cniConfigDir": "/host/etc/cni/net.d",
          "multusConfigFile": "auto",
          "multusAutoconfigDir": "/host/run/multus/cni/net.d",
          "namespaceIsolation": true,
          "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv",
          "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf",
          "daemonSocketDir": "/run/multus/socket",
          "socketDir": "/host/run/multus/socket",
          "auxiliaryCNIChainName": "vendor-cni-chain"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-09-07T17:06:56Z"
    labels:
      app: multus
      tier: node
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:daemon-config.json: {}
        f:metadata:
          f:labels:
            f:app: {}
            f:tier: {}
          f:ownerReferences:
            k:{"uid":"9474bea4-95e4-493f-be82-c4fb94cd54e9"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-07T17:06:56Z"
    name: multus-daemon-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 9474bea4-95e4-493f-be82-c4fb94cd54e9
    resourceVersion: "2644"
    uid: 2d9704bd-9512-49d6-8adb-35a901a42568
- apiVersion: v1
  data:
    service-ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDUTCCAjmgAwIBAgIINy3mwNfIUeYwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE
      Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODgwMDk2NjAe
      Fw0yNjA5MDcxNzA5MjVaFw0yODExMDUxNzA5MjZaMDYxNDAyBgNVBAMMK29wZW5z
      aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg4MDA5NjYwggEiMA0GCSqG
      SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRjmiO6wLxB14thn1eFfzPAQUwqUrNPLd6
      nB592Ib6Dkv1dg7NcP0FDdCIhQKp+z33H4sfRzJmxwa8t4wF/elVh6eTgMpZWpBD
      uucQhQT/yfEue9iGoicUYvo4faAJglsa/LqCDcWwygPEjZTgrBgnQMkWEvkLNUp2
      KkdzhO4nKmrhZMxmeZsG0qSArVor2RD1/wNXGGxoc9+S1jlp/x8xmDHV0WMaguTB
      eEcFGeiqyVWkErQPriPpaNyA4jL2DSYOVSRPGvhFwNC7Zx8coOcbfes/bZzrpIK6
      rvgn4fKvjJKY6P4RevMfltZsGRIDhe0oexD+3CvauIEjSgg2o2PvAgMBAAGjYzBh
      MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT4uhs4
      XJSggQjIkWZnq6fTR+66VzAfBgNVHSMEGDAWgBT4uhs4XJSggQjIkWZnq6fTR+66
      VzANBgkqhkiG9w0BAQsFAAOCAQEAq8hBxn0SlVqiizhZGJYMlHYNLuouxcW+uP50
      3d6HCuzStbeRFT8VkSDTONZL1KybXSvgIMdaZseQ9YfhbntxleEW0gbTmjMCL6QG
      e0WO3gU8z2/RbjhEc0c6ipQ/hV//6k2q4CpMktOq9i6vBcB/NIw9BSQDRFnpZkKL
      Tg0uikFyW34i+PpnrRUv7BTJ6a+mRMW0Dl7TfAnHXz2Pe4BrKuOjuxGbtmGanozz
      KXSXf0S7uxrlQwqXFk7pcFws60HGSZNY1aNkAuQLRwI1LMotTE+s+DY5GXNDunu+
      MuDUnmWmFx1K/6njsCMS3G3uiUmglyNQSYjQ1DjgE7MDnEj4+Q==
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      service.beta.openshift.io/inject-cabundle: "true"
    creationTimestamp: "2026-09-07T17:08:28Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data: {}
        f:metadata:
          f:annotations:
            .: {}
            f:service.beta.openshift.io/inject-cabundle: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-07T17:08:28Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:service-ca.crt: {}
      manager: service-ca-operator
      operation: Update
      time: "2026-09-07T17:09:40Z"
    name: openshift-service-ca.crt
    namespace: openshift-multus
    resourceVersion: "7382"
    uid: 2db04063-5ac8-4a8e-98d5-524e83ad6f6b
- apiVersion: v1
  data:
    whereabouts.conf: |
      {
        "datastore": "kubernetes",
        "kubernetes": {
          "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig"
        },
        "reconciler_cron_expression": "30 4 * * *",
        "log_level": "verbose",
        "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-09-07T17:06:56Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:whereabouts.conf: {}
        f:metadata:
          f:ownerReferences:
            k:{"uid":"9474bea4-95e4-493f-be82-c4fb94cd54e9"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-07T17:06:56Z"
    name: whereabouts-flatfile-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 9474bea4-95e4-493f-be82-c4fb94cd54e9
    resourceVersion: "2639"
    uid: f49b01e4-36af-40e9-8989-2fe6dd258d9e
kind: ConfigMapList
metadata:
  resourceVersion: "17218"