--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-10T11:44:43Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"cfeca71b-bcc5-4e83-84f1-a62448ef7e1c"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T11:44:43Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: cfeca71b-bcc5-4e83-84f1-a62448ef7e1c resourceVersion: "2383" uid: cd958a7e-7ce9-4c8d-a3ea-5cacb24e55c2 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-10T11:44:43Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-10T11:44:43Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2380" uid: 6f30d917-bb63-4c34-ba7c-c8e5a7763c53 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-10T11:44:43Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"cfeca71b-bcc5-4e83-84f1-a62448ef7e1c"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T11:44:43Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: cfeca71b-bcc5-4e83-84f1-a62448ef7e1c resourceVersion: "2379" uid: e5aa51e9-a497-456e-8874-0ca61781b9c0 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIKFyuSOhAJVkwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMDExNDIwOVoX DTM2MDkwNzExNDIwOVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLs5M9WVYuWn oM3LftS3LAMPDMkUosieNDolB2OKFdn3azc9QfSVFiWdp7knNHh+XVhwme3kg8aO OEeg5W+L9CxAaxdlCMQxzibXzzvvJS78PaafCMtHYDLK30LuExomQU5pRX0QKOEl m6RukcNZEKzEQoiNH4o+U+oEn8R53J40/gTTMbyMXuplHq3NsxcemymnQ1yOKNwy 2Ikql8y3vjXdklwb14JBBn4y3uVWl46rKREzJcJcHwos2tNQmMTD/GlCwko8/oor Wl/nDbV+gCZkZc9QPwYSmkIsrtpavmX3B0kTKK8/byMy+0lzaxbb5gHNDHtWz2Rm AeUsPLM4FwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAU+ZMLErQ6n8BwIeB6iKxaN1jY+CNlpFgwRW6jcKxroqSRhMq P0mjmp+x64S9VLMpPnaHK4lKXfpDDXtrXjfmbDANBgkqhkiG9w0BAQsFAAOCAQEA MMoSOokYa0/gKvMwxuIM25wIZuIk5cYQfl4GbYWyf38HmrK2XUU7tO5mUQoElVme AHXB7btfQ6WD6XuNJdN4gw7yhb5gGzB0E34m9tOehvJigHYeYd0jO6GyVSnMy32e 4xE6ligId2Jwh+ex8wfwb+Yz69zjKjnq0Vqlm7+nrILviMbARAtE/JQbO3ykmea4 Qb74my1FRStB0/XffAxx/+IKH0SDjK17sNA1MaYURow+FxPzRGDlXDWumjMByWiP kIJ6dcsmM0Aa94k17CuGnDKIZ2q/YZG/qTzedPkedlY2or2zd7wM5DGARyt3QwH3 r+VwtlwmOXWePZ2k4Q4i8w== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIXeZROJ6gLN4wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMDExNDIzOVoX DTI3MDkxMDExNDIzOVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMiZFu3B9xZ03o01Y+vh013pSFwyYl0QnvpbI4J3KbWibVse1MTbtQHR7cujmTdb dDDC0h206g4HO9HH4T6n2GZMxduwNFyeaS7G9fYWluHJt58OnUQh5fwjELtQ3TLb tC9l/Z5BioS5c8XhbGXWAdUpKImM2GN/inAmDGjX7yfwFZipporJ+PLcjOkgqXhK bAETulHBNODYZsYaTBUh4axmIG1tSKwo153CUb4TBGhRSSVkrwF34mkZolKKwZXp 4remGYlWzAUR3fZZyLdKo2RvFuLYNfbWQAWwihKXnm0IvLcBBCwU0P+z+YufRaW4 EbJD5WYo36icKtf/QVUrKNUCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAVq75mJ98FTqxBIAVqq73wC6w34pVk8zo+oM1IYur1qx0O/rEYLaOdzkZ xqfexa8WEUHpHbtHE7WpAfSzLCA3KDBLBgNVHSMERDBCgEBT5kwsStDqfwHAh4Hq IrFo3WNj4I2WkWDBFbqNwrGuipJGEyo/SaOan7HrhL1Usyk+docriUpd+kMNe2te N+ZsMEsGA1UdEQREMEKCQCouYXBwcy5mYWUyYmMyMy1hNGM3LTRjOWUtYTQ4NC1j NjUxZmE4NjI4M2EucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAFuzKcsxxuMTHr/tAV1iO914GPzqgjgCznIoHShn+4SHJH217stbDphEd3Uq gjDn9ZYtHA/Mpq7XkGF/3R6HLirEpOe0AWLQEafH1hS9fYFdbf7Er+GhaMd23GIn Gf5CnkJVVIFge3D3SZmd+IeXOcv78hir8co1f2Uv9M9H/bXLwBfVeBkCzruk2a3O n+rVKvkgPzxGN/8mQLTDF1iplynvYajko+OlaXJfYoKMcr2KCF9OSAsE0HhNUtCF wF4nuk/tYQ1tNnzurfXHodisuyimAGeMuIPT19YtbXlV2ASyPOosrhQsNzIY9qst ic/Cr2SIFMA0wAMYi1Cf0gutn48= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-10T11:44:50Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-10T11:44:50Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2544" uid: aeed483b-445f-4a90-9178-0e6a5090ab7d - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-10T11:44:44Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"cfeca71b-bcc5-4e83-84f1-a62448ef7e1c"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T11:44:44Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: cfeca71b-bcc5-4e83-84f1-a62448ef7e1c resourceVersion: "2390" uid: 30758eb4-4448-4b1c-8ee6-35fb773c8517 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIQtZVw/qweHUwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTA0MTA2MDAe Fw0yNjA5MTAxMTUwNTlaFw0yODExMDgxMTUxMDBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkwNDEwNjAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL/fQVcc11f/dItHGZQ1oD7OVL1ktUhoNX WaoOvwNjXQEmtjzFy0VzFMegbd5GNExT7dfTqh8jht0mxFmoJj/LnB3RE20/dHXV AIeyPkViuvbPLzTg8mgyOuuhxGxt4JJF2JbP2fPgQfs1HCfbB1lWG+qrD+gkWB46 jJ1HaF1zJXCi2cuKZp2jJcxLIl52XEXFzJP/c5KTL9My9yaM1UsPrppyIcM1EoaF g9IpTO5O/g9l1SkVRq8aqI3zfVz/ez4R8gBwvilYV8E692bAFnxeV2GLrZH+3hs+ faVb7BdiSOlqgjqhBpVnVnTfhU61sG+LGrxUylg80IaJx0bM9t3NAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQIMAJP 4cfm1nLg44EdGD3e25X+HDAfBgNVHSMEGDAWgBQIMAJP4cfm1nLg44EdGD3e25X+ HDANBgkqhkiG9w0BAQsFAAOCAQEAfADiE9Jr/LQeykEFxRnLuc+eKvz5hR1J2Z+t 6ywCJ81GxR9LwQ2ek1/w3iXqcaKkKxLM3XTTs9wvWsTnsu+SgHAvHPiVjj0bu2O+ gsPSw48gtCw/g060LGHR0VFui4VSl62vNfRn3kOaSGQk+a7MwdL2PZGS3AnUhQJ3 dJDUAkdu89P8xY5C5c+g0E3zHez2G7ydtGkC4rkwayWL3upUofGgVZrwRkvxe/Rg T08aN8K56gAzxEx8Pzz42ujeNeUb0n65zk4Ro6PnBywZWcNl4wZUhBHUEyHl5uoq QBBSRDyJl7jp14ePutgVHGwK2zge88NfLnwRn7uxTupP8u1XGg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-10T11:44:50Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-10T11:44:50Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-10T11:51:12Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7972" uid: 2e3afa70-fb99-4af4-aedc-badb11ecab8e - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-10T11:44:44Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"cfeca71b-bcc5-4e83-84f1-a62448ef7e1c"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T11:44:44Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: cfeca71b-bcc5-4e83-84f1-a62448ef7e1c resourceVersion: "2387" uid: 6857516a-212b-4b37-9f01-b6c3a91abb30 kind: ConfigMapList metadata: resourceVersion: "11725"