--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$RHEL8_SOURCE_DIRECTORY" ] || [ -z "$RHEL9_SOURCE_DIRECTORY" ] || [ -z "$DEFAULT_SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set env variables: RHEL8_SOURCE_DIRECTORY, RHEL9_SOURCE_DIRECTORY, DEFAULT_SOURCE_DIRECTORY" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi # Collect host OS information . /host/etc/os-release rhelmajor= # detect which version we're using in order to copy the proper binaries case "${ID}" in rhcos|scos) RHEL_VERSION=$(echo "${CPE_NAME}" | cut -f 5 -d :) rhelmajor=$(echo $RHEL_VERSION | sed -E 's/([0-9]+)\.{1}[0-9]+(\.[0-9]+)?/\1/') ;; rhel|centos) rhelmajor=$(echo "${VERSION_ID}" | cut -f 1 -d .) ;; fedora) if [ "${VARIANT_ID}" == "coreos" ]; then rhelmajor=8 else log "FATAL ERROR: Unsupported Fedora variant=${VARIANT_ID}" exit 1 fi ;; *) log "FATAL ERROR: Unsupported OS ID=${ID}"; exit 1 ;; esac # Set which directory we'll copy from, detect if it exists sourcedir= founddir=false case "${rhelmajor}" in 8) if [ -d "${RHEL8_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL8_SOURCE_DIRECTORY} founddir=true fi ;; 9) if [ -d "${RHEL9_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL9_SOURCE_DIRECTORY} founddir=true fi ;; *) log "ERROR: RHEL Major Version Unsupported, rhelmajor=${rhelmajor}" ;; esac # When it doesn't exist, fall back to the original directory. if [ "$founddir" == false ]; then log "Source directory unavailable for OS version: ${rhelmajor}" sourcedir=$DEFAULT_SOURCE_DIRECTORY fi # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY cp -r --remove-destination ${sourcedir}* $UPGRADE_DIRECTORY if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.23 creationTimestamp: "2026-07-06T20:44:04Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"3b940a90-f2bc-469b-8b58-7051df6a92cc"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-07-06T20:44:04Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 3b940a90-f2bc-469b-8b58-7051df6a92cc resourceVersion: "2559" uid: 5620895a-8cd5-44ab-98c0-5e4dfb37360d - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.23 creationTimestamp: "2026-07-06T20:44:04Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-07-06T20:44:04Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2552" uid: 0db6744a-9908-4eeb-84c5-7c926e5315bf - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.23 creationTimestamp: "2026-07-06T20:44:04Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"3b940a90-f2bc-469b-8b58-7051df6a92cc"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-07-06T20:44:04Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 3b940a90-f2bc-469b-8b58-7051df6a92cc resourceVersion: "2551" uid: 71474bd9-672d-4642-b8d2-dbbb6cb61459 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIW6VAAm/fd68wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDcwNjIwNDAyN1oX DTM2MDcwMzIwNDAyN1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN4nEXjVv8Qf OuxaaXS66hfkbTUSWfRLMXEaQ0wR1ERTyP7+0uQ35okv4nD9YZ2VwUpJlcGRMvi5 3ekOH/rtg3rzaqmrMzoqTOT6Fjq0LLlIAb7W6ogVmll0esRpJMucGL402/FrOWkh 2gLCjIQiVK8REE6cRZMsQPjCmHvvGRLum1+r81KWbbiFFp8hEXjgHzaN7ydPOwI/ u9b2SavruXqMgCubY509ucyM70Lswn0BADFqlHlT+6rjJkc/jZScq69byf/a6TNr USZBpbrzxzR11g1oc1AGX+YE7ObftI++UTdQ6QmCNEC03lnVpsiaXw03DL+aqUjn NGnYQ48ONQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRArLNfOJ+87MtOSbpw86uH3LUujSzOzUbvwyl7GBDVcP/rzoxy 6dGeaLDTQNjv47vfP0pvoEZZtFi8JDSbkVbTLTANBgkqhkiG9w0BAQsFAAOCAQEA xC/QaeelzJWvTZ42mIXJf6e6NipToLlArglMYbcpMl72Tf5KbeMfBSsS7yBUwTLQ q+GIMhZYcEqye/zC3MEfwJ8wwmgrgwNQUPkTBMpup+DtN98tE1HN4uLBTbjGo7aS 1bvI04NCFFRCPRvytyX6DZiAgFvwGThLW/4ErLpHaAmNoVtc5dDfzaI4nYNnN0Ye 0W5EeeL2W50L+doOE+CsgranJBBhNsNoS5rQdZZDC5G5y+qBbROaxgh2zgnd3F7h iuVmyGpBP6mQX+Io522mKUKlhJojlvED8RdlNhiNKSa/UEd0cqFY5ZJ+mehveNnJ doHj5IRtQ7qYI9+6OYtPaQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIaaB9SmNBiccwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDcwNjIwNDEyMFoX DTI3MDcwNjIwNDEyMFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALxSgaBKaipOnQHRo0zm0z7YI3ng+nJcxUMpHP0ZF8LU5lWYL5/8alZx105yooOz 2csdfgaybkhOPNwsDIhgJytw9MIBhFaMqRGYUMJ35kQgWSbaqhVnre31qPOqgE25 Xt1hTimfE6jNyUcMuOSSJzj9E1mbUZSTsQ0bvc9GCZPoqwcuvEda6MS7CkZuxF7e RkUWDItuXX/WMGxhh4AmmyBEqs9JO35gTWhj5Ggj7A7NVL4niqBS9BAfLQu+xE/L df5dkNPoOgDcU3DXtbJxKK0bTKth4pTakZEN/uD6E4JKJNZQbvhIQofN41y3WBc4 YOKJWUObRmla9diFuThlHvkCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAzQcP8f4MRnnw3LWU6/bXBbP6qRhNeo3xoo1nsp8V4LxZkVawen9V4qUi B6PDeBDJ98t02lRfFvwzhfzkeCyiCTBLBgNVHSMERDBCgECss184n7zsy05JunDz q4fctS6NLM7NRu/DKXsYENVw/+vOjHLp0Z5osNNA2O/ju98/Sm+gRlm0WLwkNJuR VtMtMEsGA1UdEQREMEKCQCouYXBwcy4wMjk0YjFlNi00YzliLTQ4ZGUtODVhMS0x Y2QyNjQ3MzE3M2YucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAHxKRIkDjqETfcTEQZgwdUZ/Wtw8DnGZgjIFafnh3XyNqkSHzbwRg8hlWLlV t6OR6cs0WkOi4le2atzOr4nM19WEfxXWSs/IcLLgNQpbWPKUbtsO5A3MgCeDiznX pSfOeOY9Bk6TbFNuYhUKVxS48U8eF46xXYewKXJzob6sVqwcPqTwayf6Z1JXtswx cLCh/YflrSZT37Ts6fZRn8G6DBTwXj2otspCjQbtDR2ySWYu44o0SZ33EYQcYQIO gEeUNKPrp/WUU6ELd0hm5KPr3GuTaEsVTRxg5hVTooPtaE+koUzCFLnyt0ymcFq0 Sil4086gzM2InSUZAe4tfnvOIrQ= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-07-06T20:44:16Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-07-06T20:44:16Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3997" uid: 2af9d390-5186-4034-846a-daae679f9cb4 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-07-06T20:44:04Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"3b940a90-f2bc-469b-8b58-7051df6a92cc"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-07-06T20:44:04Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 3b940a90-f2bc-469b-8b58-7051df6a92cc resourceVersion: "2569" uid: 97dfe459-33ec-4205-bb89-b671af86e729 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIICxxryzuIzAUwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4MzM3MDk5MTAe Fw0yNjA3MDYyMDQ5NTFaFw0yODA5MDMyMDQ5NTJaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODMzNzA5OTEwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCamgLC+PM2MmVQn/9wUtnmCUDc8VmzuX02 JB+cML+ZWi1xZWWSFI0ZrPuvRAQsFzcUSPNzRi90dzvEHXseAsKqCk1Do2fNZg7P ojkyiy2nFTAWuTrMKXO53FbIo1jgcXNEfZUc2Et+HpejnoIwKS5nUTCcKdUqfMGf U/QKE5bj2Yb8s2Jk+Nir32POMiy7WcVwcFFME3UK7HBEKuRO3G2peMgL5yMyGBGC rDGfzpXiL+cMTzD+JdUNTndYvv8PvJ0wBRR2IPE/vHD3mtPM5X8+Z5EHpZsGLXVF vPqY6YRHcavUSSilTnYaVqRSVy+ambh4UZwkYLo4ovulPD71m0FjAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR76ICe k61jWjoT2HH1xLAjuVt/VzAfBgNVHSMEGDAWgBR76ICek61jWjoT2HH1xLAjuVt/ VzANBgkqhkiG9w0BAQsFAAOCAQEAd7w1lh7HPivZNBaDUdLTG8zZGNDnm3BTb44j qCbsYtPFFq47DTximwooQ2xNswv2iDGw2+IQAO+ZTGhcDAuKM2diBBWXPBpqW1SA zKPHMz1RfC1InJZvjKfLcVw+JKWJtBf6WjkJSN0C0c8mH9jdlZ6IDojWdKOKqPkR 3fg+lIU9UBpqjZAIlfMiBPkdY5IX1WzpG++8486AMYg31TUTQjqaV/Ym/m/uof2i X1dH+oSGqgpzYF8PiHXSAyWIhGieAQkpbA58bxT5UJtr0skPY8OON3l3C1tti1va sNK/zfXhhP9SQv5HXS3MoyipCmxXIRi2SiAZ82GyAiHiFmTsug== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-07-06T20:57:24Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-07-06T20:57:24Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "13530" uid: 88f46a39-d673-4629-9296-82421962913b - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIICxxryzuIzAUwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4MzM3MDk5MTAe Fw0yNjA3MDYyMDQ5NTFaFw0yODA5MDMyMDQ5NTJaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODMzNzA5OTEwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCamgLC+PM2MmVQn/9wUtnmCUDc8VmzuX02 JB+cML+ZWi1xZWWSFI0ZrPuvRAQsFzcUSPNzRi90dzvEHXseAsKqCk1Do2fNZg7P ojkyiy2nFTAWuTrMKXO53FbIo1jgcXNEfZUc2Et+HpejnoIwKS5nUTCcKdUqfMGf U/QKE5bj2Yb8s2Jk+Nir32POMiy7WcVwcFFME3UK7HBEKuRO3G2peMgL5yMyGBGC rDGfzpXiL+cMTzD+JdUNTndYvv8PvJ0wBRR2IPE/vHD3mtPM5X8+Z5EHpZsGLXVF vPqY6YRHcavUSSilTnYaVqRSVy+ambh4UZwkYLo4ovulPD71m0FjAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR76ICe k61jWjoT2HH1xLAjuVt/VzAfBgNVHSMEGDAWgBR76ICek61jWjoT2HH1xLAjuVt/ VzANBgkqhkiG9w0BAQsFAAOCAQEAd7w1lh7HPivZNBaDUdLTG8zZGNDnm3BTb44j qCbsYtPFFq47DTximwooQ2xNswv2iDGw2+IQAO+ZTGhcDAuKM2diBBWXPBpqW1SA zKPHMz1RfC1InJZvjKfLcVw+JKWJtBf6WjkJSN0C0c8mH9jdlZ6IDojWdKOKqPkR 3fg+lIU9UBpqjZAIlfMiBPkdY5IX1WzpG++8486AMYg31TUTQjqaV/Ym/m/uof2i X1dH+oSGqgpzYF8PiHXSAyWIhGieAQkpbA58bxT5UJtr0skPY8OON3l3C1tti1va sNK/zfXhhP9SQv5HXS3MoyipCmxXIRi2SiAZ82GyAiHiFmTsug== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-07-06T20:44:15Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-07-06T20:44:15Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-07-06T20:50:05Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8087" uid: 186d39ea-5287-4a39-9cfa-91b0757feb64 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-07-06T20:44:04Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"3b940a90-f2bc-469b-8b58-7051df6a92cc"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-07-06T20:44:04Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 3b940a90-f2bc-469b-8b58-7051df6a92cc resourceVersion: "2563" uid: 8dd1d9e0-29dd-459d-a496-a46df570012e kind: ConfigMapList metadata: resourceVersion: "14917"