--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-09T20:48:24Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"c49e0b3a-367d-434a-b1e7-0ecf31a8b995"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-09T20:48:24Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c49e0b3a-367d-434a-b1e7-0ecf31a8b995 resourceVersion: "2269" uid: 6692dcfe-f2b8-4d67-96f8-589e7237dcfb - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-09T20:48:24Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-09T20:48:24Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2266" uid: bf20eca4-f11f-42d1-bf0a-d7abb8029880 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-09T20:48:24Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"c49e0b3a-367d-434a-b1e7-0ecf31a8b995"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-09T20:48:24Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c49e0b3a-367d-434a-b1e7-0ecf31a8b995 resourceVersion: "2265" uid: 4b4504ec-0fae-412e-a5b0-8c64415472bb - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIf2Qwpg0zzdgwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwOTIwNDQ0MVoX DTM2MDkwNjIwNDQ0MVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1A2QuyXRobsy pcbRPQ8UIyr7D7ywgs/8BGT1XQDds1kIshmdV9sqO+QiCOFmdE2uLfInqC9grUTN MQZWgEwUSFjMDfGA7GtTWXe4uAAzkzVFSLpYCV2vuf00fFMb0QumfgpuzxFSFrPZ VjJfmIqKIVRNuhIKyUZbUUVnbiklI9hQ5sfM0HC8ch6MQot1BhbXWB7oVIe0XyhR Daf++7+JLNblylUaFfM4CyEuH0YA8lTYX+lSnp7l0i7jThEu4iGt8Ysc+cAkLv18 2sl+GjFxrcdXeehTJ+8Pf+4VxipNecVxCTMrIly2y/YPObwVe0IykFttlp+4fyhH 9WgJA+/p4QIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA93RsAVZgOmC0U0CPRLWyPSvXfBUo82E3dHCMZQLYimZgIXc7 r1MIcmPHethU7EO+mhexnpCBPbLqxGxvZryiajANBgkqhkiG9w0BAQsFAAOCAQEA AFpGe4i2yhuHwutWUJnOPT+Xqzg68LFeqkmj5BNHxdyMtdMQ+hxO+C4Fpoc7Mt3B XaswbuqDZrYvTViya2eGD6iUBtGQ64UKWYsOF0u5Gixx8p01UH9bOitlRtqYSk/S sFRjmP9Bi0S+PzmoDa7JSRUGoaFmG9zs95QLf7KIh0AG9fDeU71gDnT9RgpnIdV7 azVQhCZCXvTrL+DT1t2NEGXqOxuY1GnsTl6gEScg3BdIsR9G1cylTTo5UomKmoSV u/rLLnwPMe9axh/3Q3hlRprgCwkCIKxpOm02teDYvgbNwsIQ8QeNQskpGu6adpJu unAT4G+YTUgc8Wmd3FD6qA== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIJC6sWT2xa7kwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwOTIwNDUyNFoX DTI3MDkwOTIwNDUyNFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKpp7ibKMBcDHsOpP2GFdBp3ja9/2eJTytPC3OQhfq+O8ghZr7xWPVkg+ELpgAnn 7VOZ6O+6VQ90bSEM8eEckN+yplrohQqGfXheVLpqlCAegjpUmBKIMtjFcdQXN3N8 smdjITs6DI1eksai41BkHLf7+uARvDce4L7k+nov8Te9QW8/gdCx6OJcMYZgMmqr EXlHXsQtq2syfyDeiVM7Oejg0AE+dzIilaP0Pg0I8GW9odZnxsfbYEMbYcjq5Gkh 1rocOTPQe9tUtrWNCtg60qD55t3tXy8dkPZWUdgEYRv7ui4IGxjSuWzfbFdqxWfD JiNizz85x6RfrSGwq0butx8CAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAd+Hnh47V+E19i+0Y1q1lsxKAvBkF80vphKAu8gxE9y47dHPFag3utQiA ijP25bRAZJe5EXQFwLbP73HPn0cMODBLBgNVHSMERDBCgED3dGwBVmA6YLRTQI9E tbI9K9d8FSjzYTd0cIxlAtiKZmAhdzuvUwhyY8d62FTsQ76aF7GekIE9surEbG9m vKJqMEsGA1UdEQREMEKCQCouYXBwcy4zZTEwMjhlNi0zM2U4LTRiYTQtODE2Ny05 NjIzYTY4OWJkNTIucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAEMqcQjhzvBMF3p+aDlhBaLjpicvtdwpXg0gQaj1Z4v1iqgzE2rL9gAStHoX yjkecKr+9wIKqGZ20yEyx93hSr4ITKihPBKxUt7QtIlWBUQV+4/eKZRpqdfUSMyt BnuHd9lg6hm6gOzclOIOcvN/FL7FNUskBC1uUBmwRqpdi+jWON90tcxjrQAtHRzb lGTR0v1h6BLn/BGj0bIR4cHe7SWAKeFd1PQ8P+tLc4Gco4+YLIlfxi5Y/8dh+k6X waTlPp09FYnGXvnyKvHZ2pUDO/oVqTy7saKkzvB2ukfNTv/qlEzSvPdDzPcn39kz 5WEPFHjT78yHMUPBOPXvkFhCDTM= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-09T20:48:41Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-09T20:48:41Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3538" uid: f69e411b-b81b-43f2-b7fe-5b3ff9039321 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-09T20:48:24Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"c49e0b3a-367d-434a-b1e7-0ecf31a8b995"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-09T20:48:24Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c49e0b3a-367d-434a-b1e7-0ecf31a8b995 resourceVersion: "2272" uid: 26ad9e5c-c73c-43c4-a76d-f35d8da1700b - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIdnz7fXYWGQYwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODk4NzI2NDAe Fw0yNjA5MDkyMDU0MjNaFw0yODExMDcyMDU0MjRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg5ODcyNjQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE/P46ntzVvbGoXtymJpjVr6UON6qECXt/ 0P5SUwEKpOHNbh7Fnj8ZhlhZR7D7zUDuBcK32U294kAMRLFlV65aD7dRIyIRRxMv FDcgRcTIqTJlA9ZEVqnm5/SJeyX+5gNhhHZPQvVJQZarFLaQspy1H35ub2QvNhGi myxDUI4PBioPfjyvkgjn5QF6h5n/F0V/PYwAMtRy06NudDYU69YTOKwAEJ56jZOF isAoYnVV8giSPrXQSoy2lBEB6wfK/whM7J3rBOD67D0a63WouMhT39DUGx2BsNzw XyVAIUeJ20IY385q5nBjaCDzW8VQNjyEAYxKNd+5FshoLqjLeJzlAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQPj1qe VRtbaOnA6vjj7ksHLOciJzAfBgNVHSMEGDAWgBQPj1qeVRtbaOnA6vjj7ksHLOci JzANBgkqhkiG9w0BAQsFAAOCAQEACUyLH/qZv81Ujx6Bj5NDyjiYvqgiMg6nlBIN NutYKT9gSqGWtY4kh7+IlkI8Xxa1hf5RCLlzwT8id3SNGuX0p4Gchexf/D9qAtaq qr+bwsfc074o5flEvXvGgHrJFn799xFSv5FlPv2ucupN0DGx7eSNV8wvKgnxWwCx 55WK9ru8M/Hr99nugjth+RmjddCHtW8TWGozkzGW84LISWqdTsNFzeLWl9b5HyeE Ckmccgz031wNhmQq2rC1yipOkFRQViIHgfHxrzt3VycMtaNRa9mJ0BzG40wIiX9b kRCvCQS94i1mIkqB+3ZQKu7lfwcMf58qMNr21WAn9gdRm+VZDg== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-09T21:04:48Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-09T21:04:48Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "20327" uid: 8d128177-7b61-475a-bd48-c551cd37b355 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIdnz7fXYWGQYwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODk4NzI2NDAe Fw0yNjA5MDkyMDU0MjNaFw0yODExMDcyMDU0MjRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg5ODcyNjQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE/P46ntzVvbGoXtymJpjVr6UON6qECXt/ 0P5SUwEKpOHNbh7Fnj8ZhlhZR7D7zUDuBcK32U294kAMRLFlV65aD7dRIyIRRxMv FDcgRcTIqTJlA9ZEVqnm5/SJeyX+5gNhhHZPQvVJQZarFLaQspy1H35ub2QvNhGi myxDUI4PBioPfjyvkgjn5QF6h5n/F0V/PYwAMtRy06NudDYU69YTOKwAEJ56jZOF isAoYnVV8giSPrXQSoy2lBEB6wfK/whM7J3rBOD67D0a63WouMhT39DUGx2BsNzw XyVAIUeJ20IY385q5nBjaCDzW8VQNjyEAYxKNd+5FshoLqjLeJzlAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQPj1qe VRtbaOnA6vjj7ksHLOciJzAfBgNVHSMEGDAWgBQPj1qeVRtbaOnA6vjj7ksHLOci JzANBgkqhkiG9w0BAQsFAAOCAQEACUyLH/qZv81Ujx6Bj5NDyjiYvqgiMg6nlBIN NutYKT9gSqGWtY4kh7+IlkI8Xxa1hf5RCLlzwT8id3SNGuX0p4Gchexf/D9qAtaq qr+bwsfc074o5flEvXvGgHrJFn799xFSv5FlPv2ucupN0DGx7eSNV8wvKgnxWwCx 55WK9ru8M/Hr99nugjth+RmjddCHtW8TWGozkzGW84LISWqdTsNFzeLWl9b5HyeE Ckmccgz031wNhmQq2rC1yipOkFRQViIHgfHxrzt3VycMtaNRa9mJ0BzG40wIiX9b kRCvCQS94i1mIkqB+3ZQKu7lfwcMf58qMNr21WAn9gdRm+VZDg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-09T20:48:40Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-09T20:48:40Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-09T20:54:38Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8189" uid: 4f193ad7-b7f5-4bdd-ac46-bebead6f6cd6 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-09T20:48:24Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"c49e0b3a-367d-434a-b1e7-0ecf31a8b995"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-09T20:48:24Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c49e0b3a-367d-434a-b1e7-0ecf31a8b995 resourceVersion: "2271" uid: a3493823-8d62-4043-8069-8ef9db7297aa kind: ConfigMapList metadata: resourceVersion: "88228"