---
apiVersion: v1
items:
- apiVersion: v1
  data:
    cnibincopy.sh: |-
      #!/bin/bash
      set -e

      function log()
      {
          echo "$(date --iso-8601=seconds) [cnibincopy] ${1}"
      }

      DESTINATION_DIRECTORY=/host/opt/cni/bin/

      # Perform validation of usage
      if [ -z "$SOURCE_DIRECTORY" ]; then
        log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable"
        exit 1
      fi

      if [ ! -d "$DESTINATION_DIRECTORY" ]; then
        log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist"
        exit 1
      fi

      sourcedir="${SOURCE_DIRECTORY}"
      log "Copying binaries from ${sourcedir}"

      # Use a subdirectory called "upgrade" so we can atomically move fully copied files.
      # We now use --remove-destination after running into an issue with -f not working over symlinks
      UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen)
      rm -Rf $UPGRADE_DIRECTORY
      mkdir -p $UPGRADE_DIRECTORY
      find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \;
      if [ $? -eq 0 ]; then
        log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY"
      else
        log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/
      if [ $? -eq 0 ]; then
        log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
      else
        log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      rm -Rf $UPGRADE_DIRECTORY
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        This is a script used to copy CNI binaries based on host OS
      release.openshift.io/version: 4.21.34
    creationTimestamp: "2026-09-17T16:00:11Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:cnibincopy.sh: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"9ed75d24-f403-41ca-b75e-ef45da44d4f6"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-17T16:00:11Z"
    name: cni-copy-resources
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 9ed75d24-f403-41ca-b75e-ef45da44d4f6
    resourceVersion: "2274"
    uid: 3585863d-a798-4418-abdc-188b7a08e289
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.34
    creationTimestamp: "2026-09-17T16:00:10Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
      manager: network-operator
      operation: Update
      time: "2026-09-17T16:00:10Z"
    name: cni-sysctl-allowlist
    namespace: openshift-multus
    resourceVersion: "2272"
    uid: 931af959-9e93-4e69-88a5-9e1a77ffd45a
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.34
    creationTimestamp: "2026-09-17T16:00:10Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"9ed75d24-f403-41ca-b75e-ef45da44d4f6"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-17T16:00:10Z"
    name: default-cni-sysctl-allowlist
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 9ed75d24-f403-41ca-b75e-ef45da44d4f6
    resourceVersion: "2271"
    uid: 3e4a905b-c4ad-47a2-8c4e-2caff356d97f
- apiVersion: v1
  data:
    ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDPDCCAiSgAwIBAgIIWyOLFmQujyMwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNzE1NTY0NloX
      DTM2MDkxNDE1NTY0NlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy
      b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwGlgzUiEqGK
      VCYo7wurMfk7JDJQq6Y2BGAXQKUjt+zOUICOo5fh54PncaV4ntXEWMkDl00MVK1+
      CVQ38ciJEKGqvhPQgJZrsemG6lBQcTMLb4Ku4/i4WsSsyEEttgwK5EaWEF1zmsFP
      tZe0aLZkE2sHkXA15ioaIxbljtrlIo2K1biy+zIPi/Sj6Mk9F9KhEBjgvbLab8RT
      eT8XTB3/bgwxH/Fvgk1I2T4NfaLTSOE7v3STfKqmgPamwhVTiD+ubMa6x/WsepR7
      3EYzBfHq0BlyN63RLzc9uAFgs7xE6B8k+BJ4WGqiV+tjpquByoDSqZNeK3nTcbD9
      KKS6XRxPtQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB
      /zBJBgNVHQ4EQgRAqexr1Ybk3YbqjC8mf/VZr4BraBtZ1Ul9BJEtlsEZ/v06A/ze
      paUXpw5lNbCghPCa57g39j6KHgZVeOhDDIDPijANBgkqhkiG9w0BAQsFAAOCAQEA
      K6NjTbskh9bss7DQHLbu2b1r18gsXyqD5jKPnNVaYwTf4EkOBrkI8FuTfxcmkV2u
      o2RmjG+qbf85hJcQUT0QocgskaDs8HNOqgvmiaQwfOC+PS5GKj84sKgp0ohfKf0J
      jUlV8QpW4d9rDUHkghyrjLESdQf2y+86nMHfyku3TX7MCzvO6s5wti8+42sDbZmj
      6bSdAi0GZUYEOBLjg1rUm7R9/Hik7ZR3H2hEGjreZtbwZbDI0Ibrj3Q+Jpe+XjKX
      iduSVY3A9ua8Yzo6y7bY4bt7UMJ22u4lKMLCu5+1PrA7NRnflK2PZCACMZNDTJzh
      0cK+Dga8Sa7I7iiZiiMfZw==
      -----END CERTIFICATE-----
      -----BEGIN CERTIFICATE-----
      MIIEADCCAuigAwIBAgIIMDHHyXJ2Q3gwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNzE1NTczNVoX
      DTI3MDkxNzE1NTczNVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv
      cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
      AJhL2iUoEfgPBB2BVQlDzL4jCGmV86Y2gIw6Ut3Pu4/DKhMN1O6JNgLOkCzhtBdr
      qOqlm9GNopyQjW2qxYL9U4/NotMrMstlep8ga/uYkNcmExledZDSUz7lsepfYNjz
      erhhWJZv1vagmh3L7jJw4FAbkMvm7IWZJQznP3HLRW/wNwMaNajP3q7Aze6Pn2Pk
      xYeGtJ6GNacxnN4U7EFxEk+jUScVgeiLBKsfbip0/QPh5WF3ZMsNkS54wj+aBFYo
      QUjZwB/orchRPZL40uAvk3HRrbneBMqhaUI+19sOml6zIUX4qL+SGIshfGlYur6q
      dKWpd0mAlHdoBnWQHnQhEU8CAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd
      BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV
      HQ4EQgRAjPlCVFoFDo31HtZIWq1xX7o2pw/REAVepaNzy1rPDJkgItE8C6+hU74B
      4IK49fWzR7vPNqOfZdX1rcUjlLAuPzBLBgNVHSMERDBCgECp7GvVhuTdhuqMLyZ/
      9VmvgGtoG1nVSX0EkS2WwRn+/ToD/N6lpRenDmU1sKCE8JrnuDf2PooeBlV46EMM
      gM+KMEsGA1UdEQREMEKCQCouYXBwcy5mNDExNzQ5YS1hODMyLTQ1NTYtODI2OC0w
      Y2FjYWI1NzFhMjMucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD
      ggEBAHWvUB2t6VgUM5WVhD7l2UTEB0SHN7BDjSy3pblRAvEycf1W2ec1J9oKp70O
      prSpeV9r6ga7vw04ZDXiaIK5lPPLD4XHvM86CH/hbmpzOwladfS8J3WwnMutuWfS
      acFvTCeCxVKTHrvXctv6njZ6wCHu2WuvK4kq0LGf2CvBX6VxiAUaSzx8M2n89TbJ
      1sJSScHl/a2EscgXx4A5KqlkvwcH0aWgz6tgOjfgdTRKkmk461QYBQ9mCBZpyu2f
      19v0/6Vdtluysl/q9Pxtjw/aor7JIy2L9nDoOn7DambWyAZnMixeBIBuyj33X15P
      RVUqkSJV1Sv8JkN5gzfjuqMJEx8=
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: Contains a CA bundle that can be used to verify the
        kube-apiserver when using internal endpoints such as the internal service
        IP or kubernetes.default.svc. No other usage is guaranteed across distributions
        of Kubernetes clusters.
    creationTimestamp: "2026-09-17T16:00:27Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:ca.crt: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-17T16:00:27Z"
    name: kube-root-ca.crt
    namespace: openshift-multus
    resourceVersion: "3752"
    uid: 1d538a60-7ac2-438d-9d8e-893c2e1c0f14
- apiVersion: v1
  data:
    daemon-config.json: |
      {
          "cniVersion": "0.3.1",
          "chrootDir": "/hostroot",
          "logToStderr": true,
          "logLevel": "verbose",
          "binDir": "/var/lib/cni/bin",

          "perNodeCertificate": {
            "enabled": true,
            "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig",
            "certDir": "/etc/cni/multus/certs",
            "certDuration": "24h"
          },

          "cniConfigDir": "/host/etc/cni/net.d",
          "multusConfigFile": "auto",
          "multusAutoconfigDir": "/host/run/multus/cni/net.d",
          "namespaceIsolation": true,
          "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv",
          "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf",
          "daemonSocketDir": "/run/multus/socket",
          "socketDir": "/host/run/multus/socket",
          "auxiliaryCNIChainName": "vendor-cni-chain"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-09-17T16:00:11Z"
    labels:
      app: multus
      tier: node
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:daemon-config.json: {}
        f:metadata:
          f:labels:
            f:app: {}
            f:tier: {}
          f:ownerReferences:
            k:{"uid":"9ed75d24-f403-41ca-b75e-ef45da44d4f6"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-17T16:00:11Z"
    name: multus-daemon-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 9ed75d24-f403-41ca-b75e-ef45da44d4f6
    resourceVersion: "2278"
    uid: 88713cf2-c31a-447d-9f18-867f900b1c35
- apiVersion: v1
  data:
    service-ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDUTCCAjmgAwIBAgIIDuU7N9gGORkwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE
      Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTY2MjAzMzAe
      Fw0yNjA5MTcxNjIwMzJaFw0yODExMTUxNjIwMzNaMDYxNDAyBgNVBAMMK29wZW5z
      aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk2NjIwMzMwggEiMA0GCSqG
      SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFUP1SM2yhDyb/VRsqNC0kvATL1Zutd0a5
      6OkInVamH0yn3KVOgxqwdsNlp4NkOy/Ntc8v3SCh/WH5ZhFdtSs3QgOuEXFIqXQz
      lYIUWc3fsAdkQv71+Ux/9yhpXka0hOtZYE/BbNEiN3FUGIIdrnUfHLAd6C5w6o7j
      fZCwt1tbc7Fesei6flLi/VEQUwanjV5XgtyP3zcNEHbqP1v34sas+kIP1g88C3wM
      4GBZEVn6aOlvQWZq+NIJ8Mpasz0e3NjoqQskzkvnQS1+GKrc2n0mEtr7he3Zp7Dy
      8Q93OdmFqMCOV9OKJVz9usrnRPmrbcDgKn9A5qRdbYlnKNuPK1rHAgMBAAGjYzBh
      MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRRCA+a
      0EreH4hdA3nLgFFUxbL84TAfBgNVHSMEGDAWgBRRCA+a0EreH4hdA3nLgFFUxbL8
      4TANBgkqhkiG9w0BAQsFAAOCAQEAMQvEU6mExDUQDX58GfIWm2RnLeSetekHEBWr
      NOFvHaz9eXzCFg23f8lKGPrQPOzudWDFgYJ8cddfEgcTx1RmRgtUWgnTpNBCl3xG
      jHVoC/SQlfNR4I8Dne0cgWuvzgD7mNcL3azg0mIjLWuL9mSsDkGR7b/2URUqEfXN
      BOlDe3y3H/9cU8mepKF/8RCcO2HVDr24+XeK9piEMu9naPUWh2gYXmNiwzARpWXa
      A9dXEQcAdtyLOwV6+lQdNwPZc06bpNklrRmq16naW44JaKT4zXjLtnX+zS0cFI6o
      tpBe2jYDxLwB+h/gjC5lrOJrFvHd6HKBZmoikKl0ubKQkVUxQA==
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      service.beta.openshift.io/inject-cabundle: "true"
    creationTimestamp: "2026-09-17T16:00:27Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data: {}
        f:metadata:
          f:annotations:
            .: {}
            f:service.beta.openshift.io/inject-cabundle: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-17T16:00:27Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:service-ca.crt: {}
      manager: service-ca-operator
      operation: Update
      time: "2026-09-17T16:20:46Z"
    name: openshift-service-ca.crt
    namespace: openshift-multus
    resourceVersion: "11591"
    uid: fa37a1cd-2ee5-4f8e-ad66-558dc3c6c1c3
- apiVersion: v1
  data:
    whereabouts.conf: |
      {
        "datastore": "kubernetes",
        "kubernetes": {
          "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig"
        },
        "reconciler_cron_expression": "30 4 * * *",
        "log_level": "verbose",
        "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-09-17T16:00:11Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:whereabouts.conf: {}
        f:metadata:
          f:ownerReferences:
            k:{"uid":"9ed75d24-f403-41ca-b75e-ef45da44d4f6"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-17T16:00:11Z"
    name: whereabouts-flatfile-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 9ed75d24-f403-41ca-b75e-ef45da44d4f6
    resourceVersion: "2277"
    uid: 426907f0-9046-4431-9e6f-582e1e194c68
kind: ConfigMapList
metadata:
  resourceVersion: "25633"