--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T18:40:03Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"ad1f4960-3efd-4d6f-b191-ec95c98672f8"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T18:40:03Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: ad1f4960-3efd-4d6f-b191-ec95c98672f8 resourceVersion: "3793" uid: b8238c6b-b7ba-43d0-b3bc-d1bc34a044c9 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T18:40:02Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-16T18:40:02Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "3791" uid: 17438a35-3955-4578-a355-664a055c4c4e - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T18:40:02Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"ad1f4960-3efd-4d6f-b191-ec95c98672f8"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T18:40:02Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: ad1f4960-3efd-4d6f-b191-ec95c98672f8 resourceVersion: "3790" uid: 3e155d02-c92d-4ee2-8925-933744356c60 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIYcqSi90XjF8wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjE4MzYyMFoX DTM2MDkxMzE4MzYyMFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/pMP11BnO7k iT/p8Iy8QZ1DQf854G8LF9pR78Ta1XfvhXjDttzfEHJil2rfeU2rS3q1c98o5aks SjvOvxqFcpyzYrvQWKMAr9uNUQiVLsUh6R6dA59yUHHjAm74eLKROD0hoedNsQNn 45MMYlohGABEl3/f4fzLG0GKuTiC9BvLhSplEameofNVjfGZqsjH8/E82sMGhlEL orcDY/mC+zuyw0KFdc355tQOcss7Glz9CXQm+3rni/Gj8qkY1u0QwI8jsN0OpQIQ X7q7fQ2dDnifkz4HvgCxP59334oq/jqm2R+8jfZ58gvbxVgklM2x15yR0cDmZeWw aq3M41Gk2wIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAXvzUZP0GNAd3B75fCEn0lWyeAdVYJn20xihPgenX/zVXul8W huzmHZ6TGjsXRdu6RsBWFPnXNiT1UTuvM6dQdTANBgkqhkiG9w0BAQsFAAOCAQEA sni2KrQK1MDkePUWloAm9G8okn6rU6ZdvS0XXkn8yPPDKapCHYSK+WbcGk47NySs ojPQ/o2Zul8hc0WRqcxwL7KoIkobwAwYPI4MaE9RDoO+2kf1ee0/lq+qOmdah4id 7AL4O2pIf5uJsYxPUBk2m1eOayFSocdNFn78grHpQNiqeTdTnDKpik8msKCcfqrL UUt2HNZYgJdsvggm72YEQ0gyRejqRNxRa38PQQlC4oNxlZ2msTUY+u/35BZ2gs7n iOqom241+GgK5e/a0dh1Lcm92ytDPZWb89J1Uh7ZhA945qfDer16A/ciS6tmooZD T6GMgnhDKpw8vXj2KXivhw== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIZC3RXNJj0OIwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjE4MzcyMVoX DTI3MDkxNjE4MzcyMVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AJx52WjM3fyGExn09iSKHH9cxAEHBb6seBbW2xTHZWrWc0KOLOGNdrzSuAOPI0jk t+w0apzr05hGt92ag7WcyEnshAIw7mKjh9X+TdZPUnA9m8AmOzDsVz0WpgM0Lz/B LkGxh2kQoiA2JS8s1C6uUXpLQZIuq1OpHyCk/azc+pVtqOzqpKvz6gPI9pcUyPfH MyjboNbD4Ms5516BDLNTe82wB2itJu2CPGPQodc5qR71SmigZBxbdZ1Nd59ISHXq +HZA/81+iUDhw4u6j8UN2reUsnS/KwVb2NcXWujB1unXqbYChoo5hDRNucg9OiIv 3E4sqblvNA4R3lfA6RYbN0cCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRA3t4uLZafLV8/1en3Q8bzWwQLC3N+etnVcplP0sOHUpdDkflbcD918zrs A0YoNOcnCbn1lJMw8sUtLt3T54RN5DBLBgNVHSMERDBCgEBe/NRk/QY0B3cHvl8I SfSVbJ4B1VgmfbTGKE+B6df/NVe6XxaG7OYdnpMaOxdF27pGwFYU+dc2JPVRO68z p1B1MEsGA1UdEQREMEKCQCouYXBwcy5hZjU3Yzk4My05NTQyLTRiNjQtYWViYS1i YjhlNTM0NGFiY2UucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAF+J1OCQOyqL9vEvCu1PZGr0dhh5msITcdKspKjAn6ICzyrQE+F+lWhyQ0tn kjR+LOZ+RPqlGgODy/7z4we8xFf1rcF32IDt0getw8QPxlN8ufYfnI1Sad3gyBYC /VOTQKMN/+2r41yE2tzuXQEa0Hfl0VTwPc/ohFJncRaW4CMFji3pqaaMfSo4KMol M9piVyTEXXSXYvLcklMaA7w3gN1/TqtbPlzx8b3gaR42BNdj/L8WX6kfwJ6/VH/r yzO9BpPrx91xt926m+ZFvXzkVABwtY9rS8aoCZuAjtyaYScvLlgUolzA7N/G71rD nKcJ8f6rivJLi7RqtFH6VDv3di4= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-16T18:40:16Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-16T18:40:16Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4187" uid: f630a2ec-87ac-4b31-a2b4-86ee3306e69a - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T18:40:03Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"ad1f4960-3efd-4d6f-b191-ec95c98672f8"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T18:40:03Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: ad1f4960-3efd-4d6f-b191-ec95c98672f8 resourceVersion: "3797" uid: 8b5a188c-f330-4297-9a61-90bc777073d8 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIRYeqKpQSXlwwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTU4NDM0OTAe Fw0yNjA5MTYxODQ1NDlaFw0yODExMTQxODQ1NTBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1ODQzNDkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW3L5mk+y8nv5w0CTSpF+2V/U/Zg2juhgc OW58o4+mljxGnB/PDutq/kswuqFH3Ni/eQ7s8bOeGRLsWilH18y60EnZ/dHXoKI6 WIyB/5e0L8OZVaBryDEreEId24S5N/YFJu/dG3+q2nIlRnKu0bWStmb6BHEVlPCQ Itxhn4tpQL7GLCCwwI0/VTqlTehvE1j/nlvtANgziAwp4KMm1MQ3fXU5F0i6opLW cEkUjY4SG81w5eyfrTMNryw2wyYnlJBAM8/ovxrjE/cSMJ477nl4hcn+U9FjjoNZ lvc/0hAkveMTwmT/PxT84ctKzJs4rfVy47PQ8wPViyW61GGCESejAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR7ok+x iwH3MkQrK0dh0aSH3XLOWjAfBgNVHSMEGDAWgBR7ok+xiwH3MkQrK0dh0aSH3XLO WjANBgkqhkiG9w0BAQsFAAOCAQEAWr/9D0zTQQqV4J57icidbOZ0pXXsy8o+be6k 6ppzPxqX4Plo5VDpLZiVjKNB2Xc2B2z7k9GUuy/B01AXr/GGfFZIGPZ7O6JJXSSZ Jrtaxqhw2GNpS9JGSG6l6J8shFbXfAE0CPezr9cXr2WSqi7L8LyBDpEWftYn3DHg 38xzm1CJNNI4iR/p9ldxHJjZqclHyu93f90hF8BVBUmsTJjp0IROm9BAJNWunJSV 0ua/xIi3pAYf4gkDLX0GkKeafHtGI6XawAy53/XbJhUj9/pJNeMIXpgOgxFz6UVW Trx2zLuH+LiHhpHx1VevwErp1LVm4QdNzcp3NE+bAwbTTZc1/Q== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-16T18:53:29Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-16T18:53:29Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "13806" uid: 2caebf5e-5aa2-46b9-9f32-a08582cad548 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIRYeqKpQSXlwwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTU4NDM0OTAe Fw0yNjA5MTYxODQ1NDlaFw0yODExMTQxODQ1NTBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1ODQzNDkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW3L5mk+y8nv5w0CTSpF+2V/U/Zg2juhgc OW58o4+mljxGnB/PDutq/kswuqFH3Ni/eQ7s8bOeGRLsWilH18y60EnZ/dHXoKI6 WIyB/5e0L8OZVaBryDEreEId24S5N/YFJu/dG3+q2nIlRnKu0bWStmb6BHEVlPCQ Itxhn4tpQL7GLCCwwI0/VTqlTehvE1j/nlvtANgziAwp4KMm1MQ3fXU5F0i6opLW cEkUjY4SG81w5eyfrTMNryw2wyYnlJBAM8/ovxrjE/cSMJ477nl4hcn+U9FjjoNZ lvc/0hAkveMTwmT/PxT84ctKzJs4rfVy47PQ8wPViyW61GGCESejAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR7ok+x iwH3MkQrK0dh0aSH3XLOWjAfBgNVHSMEGDAWgBR7ok+xiwH3MkQrK0dh0aSH3XLO WjANBgkqhkiG9w0BAQsFAAOCAQEAWr/9D0zTQQqV4J57icidbOZ0pXXsy8o+be6k 6ppzPxqX4Plo5VDpLZiVjKNB2Xc2B2z7k9GUuy/B01AXr/GGfFZIGPZ7O6JJXSSZ Jrtaxqhw2GNpS9JGSG6l6J8shFbXfAE0CPezr9cXr2WSqi7L8LyBDpEWftYn3DHg 38xzm1CJNNI4iR/p9ldxHJjZqclHyu93f90hF8BVBUmsTJjp0IROm9BAJNWunJSV 0ua/xIi3pAYf4gkDLX0GkKeafHtGI6XawAy53/XbJhUj9/pJNeMIXpgOgxFz6UVW Trx2zLuH+LiHhpHx1VevwErp1LVm4QdNzcp3NE+bAwbTTZc1/Q== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-16T18:40:15Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-16T18:40:15Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-16T18:46:03Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8155" uid: 083a028e-0865-4d84-9f31-16bda18c2a99 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T18:40:03Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"ad1f4960-3efd-4d6f-b191-ec95c98672f8"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T18:40:03Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: ad1f4960-3efd-4d6f-b191-ec95c98672f8 resourceVersion: "3795" uid: 1a21328d-a919-444e-916d-5120c9c16ff7 kind: ConfigMapList metadata: resourceVersion: "41157"