--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-18T19:09:41Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"bed24163-9847-4ee2-abc5-b6162a69d8c6"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T19:09:41Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: bed24163-9847-4ee2-abc5-b6162a69d8c6 resourceVersion: "2562" uid: 1f067675-57b3-4a67-9bae-5ab8c2cd7627 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-18T19:09:40Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-18T19:09:40Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2559" uid: c5089018-0e41-485b-947f-8636c32331eb - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-18T19:09:40Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"bed24163-9847-4ee2-abc5-b6162a69d8c6"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T19:09:40Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: bed24163-9847-4ee2-abc5-b6162a69d8c6 resourceVersion: "2558" uid: 248509ab-767f-41b2-950e-528a78b443b9 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIJOQ7aJYsP+8wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxODE5MDU1M1oX DTM2MDkxNTE5MDU1M1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue5WeVspjLoC rwQ0rztXLYpLfUtAAA/IGq+PmCFywI5mBBXoyohFfzP7mWq03SdSJcU2f72fCBha zEKQZpx6Xe1TpD9lc+p/v3hR5G5DpqLn27rHN1/nO9ujmRweLRHEoI782HMZ78Me 6auYEjGewcFHt9OMPVfsfU0hlCKNUV+gXSvTW+wR+zNbm3BZVY/RRKY2vdHlO0cV UGSM8sAMZrFSWkeU7SRnYfVi0VfKL+f+dDIy2MTLl1+qkUsf898JKLovTG+dJ3EE MMtiesGlXXfryjwmSe+opzGtuR3FJI3OmC+9zAA+KIJfyqwXm8FtGq7iagdThHGQ ego6bWT3AwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA3nc5kWVXzZd2SM0JGimfcPGwYj9wETcW+lcWzhuJysJS24L2 qDreaLqg6F1AZAP2BtLoCsgdZBnVJQ99eQ9C0zANBgkqhkiG9w0BAQsFAAOCAQEA c0yXrFhvV8gkt4938PYZo2Qz5hX5lrUR3QZZogkeIm/M06R1gcZz9lDj01vx0xn+ K+3N18ZSgutcij07XOJe55TguZg73A+0r/nO9rUYf8y0KqSF1h2YZuQiID5nt1wq oJPsbmXgBHtUZNQBavPLYh0Z5RRbXf5HaewA/gXREK1zCZsR/waP3m62Gc7uSlac 9yEYEDUmp3PPC90GgAofclvD4E3K/Gr/TEb765/U8jNMHwyQG+7tQKjkTWKCmlbr 9c1/CgsFXFuhrJOBYbj4ieGH0Oly5lIhBafKb439l+P88ke0aGEZaoWbm5A0cVI0 Q+I4pEnEJpBU+d7RHGXwSA== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIch4hvcEbsEUwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxODE5MDcwNVoX DTI3MDkxODE5MDcwNVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMEls2yH2o3usZTUWcG4iExl6pWH16N00ezjV1epPgcyrQ8Qx1vBH94dm4cOrHJk rw87M1v8cJtZ86hceqqOdjw8XlMhR96CI2sZLRFkm3JA4VIIVXHnfT5cNd9x3ESt 3EvYTnuVzmi9AuDhbg0cIIZNmjqJz8MX9PY0iH4vRwYscY3gtzgSzAcdFhYXFF4W /ENWi6u4CBoeZ2hkzcaxahfxeDkLxdeMHmay2xMcP+fSAq1QHsJLLFCcf/vgyQ1F RLqZiIIZqy+R0ODnskCBHg78rEU//9LNdB5oCmGBKlFMp4MI1FLcqTz3mgWF0D9b nfCwTh2762uUQfJM9sml3YsCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRA+svydPf8W4BRlkyUnMcxFn16xW7vOHxlC2SO9tavaYWN89H5DaYNM50O 43VJMRsm/tr3My5ncDpuVgmrDguSYzBLBgNVHSMERDBCgEDedzmRZVfNl3ZIzQka KZ9w8bBiP3ARNxb6VxbOG4nKwlLbgvaoOt5ouqDoXUBkA/YG0ugKyB1kGdUlD315 D0LTMEsGA1UdEQREMEKCQCouYXBwcy45NzcyNjhhNy03M2VlLTQ0ODEtYjFiNC01 YzM4ZGFlOGY0MWIucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBADB29Y8zfN/9sFxp1YvJrvEcmvI+BxRuWdhslodskxLkyBZyDbeLqx7FHjp/ jbB8YwVQj4joFh/ajqzHuwyR0/glXWW4oGxKyLEr7bgC0oURxCVgHHfUlRSWnFqm Gp8GuQUJcf1pNuTU6E8i1OtMTkgSABGuzEZ5Cpkr4x37td88Eeo+ukRoHcAJ7HND yZvXTU+7YIw8hOp8xcSZfTWNgAjeVNw3qU8U30p2RYLw/xQ7XkuQiAYul1iKWp+d nnqFvythd3t3YMMOlZIG/faXfmk64fQIM+IBfB3oLruqCVlwizy17j77p+Cphu1O I9ey7o3ce0uSH2HdEGJGeuo5GhE= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-18T19:09:57Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-18T19:09:57Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3584" uid: 9fd4e23f-fd22-4091-8e1b-d4e08b94ba95 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-18T19:09:41Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"bed24163-9847-4ee2-abc5-b6162a69d8c6"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T19:09:41Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: bed24163-9847-4ee2-abc5-b6162a69d8c6 resourceVersion: "2566" uid: efd3ea45-ee6f-4172-8e71-3634a5ee9eee - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIQXl7i5dE5KswDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTc1ODkzMDAe Fw0yNjA5MTgxOTE1MjlaFw0yODExMTYxOTE1MzBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk3NTg5MzAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxGNJ8DD5rqL2R8QJTjHv/A3/qW8rlFKC2 eYj28R2/ve/cYbbDafJmjIqtUzI1+08dUUw1GbU4y5p2MJVPn4qw40TAqOFNTf0o +2xlF7e8DVP46pDUYlgdcCONOD6ZjVOOjnfH6JwmIDx+o8Yti5tiTQQg3t/9Z2Bl zVsR7hL1CrEqXWxen2mhqFIJmqarW8BryAvD9k4cdcEYG8HbZD5gLZxx5vG8BVNB 9sMYlS4HChydZdZ3N+dgi6uj5c/j2zBM4UmkfOd/hE8oNiU7V2N824zRhsMaFyKL htzcJEjd1kEbk9u95wb3+n5a3+mK9o4OCMuWPQ7hlXMGPWn/WZH5AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT0v+W3 zURvZgPaSSTJa4p52rNeBDAfBgNVHSMEGDAWgBT0v+W3zURvZgPaSSTJa4p52rNe BDANBgkqhkiG9w0BAQsFAAOCAQEASCebVRWYqR9yrv02KRqILvYcmgzd8Vti2Ror 5C8dTZaxTeGKDF8cS9rYvkZv72/GskuUOVGz3bKGCmgFPZftQg9PshszvP71t61X oA+bDVgeOOMjLIR+cgwOtSskFaZmyA59mIT7mogZSIx2fRn54IyvmSOTexT+G8+g ss7W4ECM4ODTmgEjqU0wCqNnqw9lboEx4SuqnLwvu7u4RDomBDC3OINAl54NLD0D SncgiB2pgbYP5LhczbGBl7E5kx8emE2YtmP/UMupqGDY1HZyYqCB+tXLsXMMCskq 55P242fkBGRFzhD9pJ7uYboz954Dsic0+2yl1L7EAUGG4u/P7w== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-18T19:27:18Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-18T19:27:18Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14268" uid: 9888c0cb-152d-41e6-91db-ee2d108a857d - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIQXl7i5dE5KswDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTc1ODkzMDAe Fw0yNjA5MTgxOTE1MjlaFw0yODExMTYxOTE1MzBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk3NTg5MzAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxGNJ8DD5rqL2R8QJTjHv/A3/qW8rlFKC2 eYj28R2/ve/cYbbDafJmjIqtUzI1+08dUUw1GbU4y5p2MJVPn4qw40TAqOFNTf0o +2xlF7e8DVP46pDUYlgdcCONOD6ZjVOOjnfH6JwmIDx+o8Yti5tiTQQg3t/9Z2Bl zVsR7hL1CrEqXWxen2mhqFIJmqarW8BryAvD9k4cdcEYG8HbZD5gLZxx5vG8BVNB 9sMYlS4HChydZdZ3N+dgi6uj5c/j2zBM4UmkfOd/hE8oNiU7V2N824zRhsMaFyKL htzcJEjd1kEbk9u95wb3+n5a3+mK9o4OCMuWPQ7hlXMGPWn/WZH5AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT0v+W3 zURvZgPaSSTJa4p52rNeBDAfBgNVHSMEGDAWgBT0v+W3zURvZgPaSSTJa4p52rNe BDANBgkqhkiG9w0BAQsFAAOCAQEASCebVRWYqR9yrv02KRqILvYcmgzd8Vti2Ror 5C8dTZaxTeGKDF8cS9rYvkZv72/GskuUOVGz3bKGCmgFPZftQg9PshszvP71t61X oA+bDVgeOOMjLIR+cgwOtSskFaZmyA59mIT7mogZSIx2fRn54IyvmSOTexT+G8+g ss7W4ECM4ODTmgEjqU0wCqNnqw9lboEx4SuqnLwvu7u4RDomBDC3OINAl54NLD0D SncgiB2pgbYP5LhczbGBl7E5kx8emE2YtmP/UMupqGDY1HZyYqCB+tXLsXMMCskq 55P242fkBGRFzhD9pJ7uYboz954Dsic0+2yl1L7EAUGG4u/P7w== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-18T19:09:55Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-18T19:09:55Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-18T19:15:45Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8087" uid: 8eee718f-3a8d-4c61-bdf2-de351e0f7097 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-18T19:09:41Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"bed24163-9847-4ee2-abc5-b6162a69d8c6"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T19:09:41Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: bed24163-9847-4ee2-abc5-b6162a69d8c6 resourceVersion: "2564" uid: 45075be4-6c2f-4515-b79c-1edf9f400163 kind: ConfigMapList metadata: resourceVersion: "22628"