--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T12:43:04Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"0089d745-5446-4507-a8d9-3d4a91b41469"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T12:43:04Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0089d745-5446-4507-a8d9-3d4a91b41469 resourceVersion: "3496" uid: b4b2ecd1-d3f5-4b34-a9a0-0b3324bac028 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T12:43:04Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-16T12:43:04Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "3476" uid: 9069164a-3ad7-4b7a-90d1-73885031f969 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T12:43:04Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"0089d745-5446-4507-a8d9-3d4a91b41469"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T12:43:04Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0089d745-5446-4507-a8d9-3d4a91b41469 resourceVersion: "3469" uid: b36d81d3-6150-4f95-8af9-5a32f7812571 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIdTnftfSB3zcwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjEyMzk0MFoX DTM2MDkxMzEyMzk0MFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pMV2gOGyBlX vRaKTL3uN3ltWbLdxeZyqeFe+jlH3GxYDqYkcYobMuunKmt0m7aImpRGn8StIlEv eYt2fUsyGr8+FbBtVJe1FHddvBJKaf8iDu5c4pNDTlDuxQx61IO9pakBb5lkRsBq UWG5gclo6zVB04DmFGgsisUUKEhxm27UrIH6QbWKS1zoFV2L6wxAaWvVix1D/VDi GyhFNS+L4tSyMAp4FcVI/ly0s2vW9N9p0o1G1epVXHzeO27Wi1m9rKNLVwBYWxPk DGgjatJuffciAevxgiUz2XPI8BMO1puzpjxnr23RKJs6bfuCjxRFSaM7IDthvuh6 MiRiudwglwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAgmLQ1316QS9xp/a0qhXEzFPs8CLR1qGBGPZ8ItdoxS0s+oEf gPVDzjMZa6Fnsw6l4dz7BghQDZP/f7yGgZoMzTANBgkqhkiG9w0BAQsFAAOCAQEA g+OaImhv6R8HLT3a2lXVPg/xckXccRe4gXr7p/zgVH80iR6wGvGWe3RZ1u0iRjqn KpPS8pBFbalCyGSbS/KTdIzAPkma3UeQP6ADtUsAQRN+BDGWJ18xnux4kSyhxHhM qBFIvPcyKg1MhnoUN7mf2ROpxSjtPDT3hBs0GeUSCch8g8lgtLTRsGmhy03q/d5F rqxsa3knGMUm7llr8QIwE0hzG9mPPvG8uk5tpe/TiuTTfgXhO7z88LXhTyi1Wf5B FDttrLA1Bt+cwPfd6R4vTN/R9M++wpffHZ2T4H/B/eSpTDPOnHjYiSqvif9HNMGh 8tsAXPOJcduGU3u2O6DtNg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIIv5krmWbuXcwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjEyNDAxOVoX DTI3MDkxNjEyNDAxOVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALo9KK6RTCfTNAGLwyZ/mJbaHsHbnJMaBh8vxBcTpC0Zl5j+D5cCdGxGNSv9+Muz EeRbLUQrCCW1zNirkdnodCLR4ho0hKTffEC0+5SzYHkSDU+0VU2TDCqVMU2Wl3Xc +xd1Bv8LGJmXyj09K5oImSP4IE2qyYuoadINEOWlvHvMOWpIepmx0Hm36MQD6q2t tCJXgHP0CkMWkCF4DoWdvmDioyKyirGBaHflb5iO/SLudTRpjRXe0i3dZED4HxiC Hz+nE1+yMQz8BZu2nsTf8piUaIwoAs4HR8/uf6t48DhCf+TwabyNtWtMQS1SSSw9 PEOzdc6o6YZChaUgUrjriT8CAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAGkSfaDxj41vjmAByuFGeuAMVY/oMwACnxqpZIjM3FQ4ui1pp+hMFJCRx tTHF9vuNtIj2PY99JGmGWnoKgtfBzDBLBgNVHSMERDBCgECCYtDXfXpBL3Gn9rSq FcTMU+zwItHWoYEY9nwi12jFLSz6gR+A9UPOMxlroWezDqXh3PsGCFANk/9/vIaB mgzNMEsGA1UdEQREMEKCQCouYXBwcy5iYzIzNGI3OS1hN2ZhLTQyNTEtYjM2OS0w ODM5NGZlODA5N2QucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAAPVjWeB1RyHcvTFagA+43uIIlTlMQnFFjnPhgL7JTP08OJ78tl6altXR9lK 1XUkFbHByMFdqI8oj+XvfN5UU7RR8FLRmcckrCnk2RIb2NC1Z60uyv2oDFaR0Hj7 bGMUSzOOMus9ZL7E7rewLEedwGt0WWRYZrSFZ6YX9gRHFwt5wzWLa2KzLLwnGwsK 6LgBMpr1SPyPerhpG1DeSohqfqgMmkWcEr0/ibYTqIKs0hloRb64XSUGk5v9Yvix hjAkEz8gP8VKSv9qhNCzeIG0GWkuGwxcjcx4moCezynZ5djtPTkZRdw3uzULiD3T x5RS8PpuCfid7dmhBWBWtLLwDyU= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-16T12:43:14Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-16T12:43:14Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3995" uid: 22147a33-9f3e-48ad-aaac-ff2e174d6df4 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T12:43:04Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"0089d745-5446-4507-a8d9-3d4a91b41469"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T12:43:04Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0089d745-5446-4507-a8d9-3d4a91b41469 resourceVersion: "3546" uid: 83132a9e-47e0-4edd-b7a7-2c83097fcc0b - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIVCy73nTfFO0wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTU2MjkyODAe Fw0yNjA5MTYxMjQ4NDdaFw0yODExMTQxMjQ4NDhaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1NjI5MjgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGDOKAgaFD+5j0AfTTqlkrVfX93f/0HOvP VIKb+brSH0uk93ylnD4qWY77t3J3tAH6TjDfLuY37ofEpZ3S/1U6s5TLqCYIjSwy 2duKoSFrJ+uaijX/MWr0JX7IvDMBojqOHyoXQml6zNZO5/ZAUFcwzvgU16BYtBb/ K4YXfoXfWjUfpsvWh/Nu9R+x14q5dbA5K+6dIGFX4nXNlUOOC9G7T1+HKegiLiys gb8z6Dwh/0a3Jt5f5EXNaj6xm1NjFC4ViHBGStYictkmzULjlsoWNOf7ogt/9P0h WJ/DLJC5nWq/hr/h1zk4vdFalNOEJkBnoI0N2Pp3khxzIdNxByb1AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSsrLGR +8zNpL8EqZ3ni3C/G9AkhTAfBgNVHSMEGDAWgBSsrLGR+8zNpL8EqZ3ni3C/G9Ak hTANBgkqhkiG9w0BAQsFAAOCAQEAvIzr6MXlbv/aTv464YUpzwoRYvKz5PDGlEz9 D4qOSD/iX1M5bMwU7JAFDCmeq3hvMgzJv/Vd4CyhTYpM3xvKFMH2Uj57y5ceGWAp oW2CuTkUBUHULWl+g2wvEQ7tseyBSSBSpbml1HRF/EhH2iNh/0+ec5EehcXU7MHz RFeu2WZTNsCUd9qTED1lI8jooATo5YfOCfPX1mXOyyUw2PEm8Tmn0ALH1vBUsf2Q gAc+iFu4um5U5Wdj7rnfoD97EOEZWwP3Ccc7wf8jYn92yQo1myV5e0efCTmRZY9E NqCKgBgJskvqUp8v0q6fZ3SslmPMRpWfUTuBbeHPX8wX3lVC/g== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-16T12:56:20Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-16T12:56:20Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "13798" uid: c2bdd9dd-2e4f-458d-a7c2-84043d4c19e8 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIVCy73nTfFO0wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTU2MjkyODAe Fw0yNjA5MTYxMjQ4NDdaFw0yODExMTQxMjQ4NDhaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1NjI5MjgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGDOKAgaFD+5j0AfTTqlkrVfX93f/0HOvP VIKb+brSH0uk93ylnD4qWY77t3J3tAH6TjDfLuY37ofEpZ3S/1U6s5TLqCYIjSwy 2duKoSFrJ+uaijX/MWr0JX7IvDMBojqOHyoXQml6zNZO5/ZAUFcwzvgU16BYtBb/ K4YXfoXfWjUfpsvWh/Nu9R+x14q5dbA5K+6dIGFX4nXNlUOOC9G7T1+HKegiLiys gb8z6Dwh/0a3Jt5f5EXNaj6xm1NjFC4ViHBGStYictkmzULjlsoWNOf7ogt/9P0h WJ/DLJC5nWq/hr/h1zk4vdFalNOEJkBnoI0N2Pp3khxzIdNxByb1AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSsrLGR +8zNpL8EqZ3ni3C/G9AkhTAfBgNVHSMEGDAWgBSsrLGR+8zNpL8EqZ3ni3C/G9Ak hTANBgkqhkiG9w0BAQsFAAOCAQEAvIzr6MXlbv/aTv464YUpzwoRYvKz5PDGlEz9 D4qOSD/iX1M5bMwU7JAFDCmeq3hvMgzJv/Vd4CyhTYpM3xvKFMH2Uj57y5ceGWAp oW2CuTkUBUHULWl+g2wvEQ7tseyBSSBSpbml1HRF/EhH2iNh/0+ec5EehcXU7MHz RFeu2WZTNsCUd9qTED1lI8jooATo5YfOCfPX1mXOyyUw2PEm8Tmn0ALH1vBUsf2Q gAc+iFu4um5U5Wdj7rnfoD97EOEZWwP3Ccc7wf8jYn92yQo1myV5e0efCTmRZY9E NqCKgBgJskvqUp8v0q6fZ3SslmPMRpWfUTuBbeHPX8wX3lVC/g== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-16T12:43:13Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-16T12:43:13Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-16T12:49:01Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8135" uid: 803f2a04-8fc6-4531-969b-68f8f7340a3b - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T12:43:04Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"0089d745-5446-4507-a8d9-3d4a91b41469"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T12:43:04Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0089d745-5446-4507-a8d9-3d4a91b41469 resourceVersion: "3521" uid: 4ae90658-2435-4ba2-8124-096009be42b6 kind: ConfigMapList metadata: resourceVersion: "24682"