--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T18:39:54Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"e529b634-2f9a-48b2-97a7-b093379d67e2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T18:39:54Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: e529b634-2f9a-48b2-97a7-b093379d67e2 resourceVersion: "2347" uid: 01cd15fb-50d0-40c2-b7f8-97045bca850c - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T18:39:54Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-16T18:39:54Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2340" uid: fbe64977-db90-488e-a24d-f692e9f1faff - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T18:39:54Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"e529b634-2f9a-48b2-97a7-b093379d67e2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T18:39:54Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: e529b634-2f9a-48b2-97a7-b093379d67e2 resourceVersion: "2339" uid: 96ac453c-bb68-4594-93fb-7adf842ca884 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIVY3RAFpWhZMwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjE4MzY1OVoX DTM2MDkxMzE4MzY1OVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQOaPba3yr9q 8ozyapjSlF3bD2lELPNFcEvQXmngorGNvBHNz9RZCcB5U3toLvLn/8tsZIUnYdw1 pWDEkfGBYeMqcMmCTxRTfg3+oVOu177k91GsD6FiMoRBo2UoqG5F3IONlkWs5hgI 3GFWD3b3aUCwzxgopOjP/dq1Qmp7fyMFG/OMf/9A0dI+Tg6+BuIN4HytZqJ3+p// yuZ6lH/Pay9gxreE1qFBnqKV9e/as0dkhz0iVvDbLt1J8whFpD6t44q7M6P9pIxm GPGrOnCXPa6cnP9QmZIfJJfUT2F6VD1n+wQckDqQacF7z3T6vpwCz/jqd34tolD7 ePwqjYmF6QIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAV65Gg5gVRqUhmemm7tHGZ8QhGH9VqLvdaS0/SpUsl01nOQxH gLNVJuL9seiIFOaaDJI9/oSJSiSG+aK0VuvvQzANBgkqhkiG9w0BAQsFAAOCAQEA avRD1SSZC8w7uLWZm0bG5LMerzWs6F8dNnzk1isglBUAdqLjlcu2Tw+mdkuGq/ka lGNxr8ZZB8x8SwRObHAguR1PQzqBUol3HQdOjES9ggAqKqYUA6RmGEe7GMgE8d6D jRlcRwNAPkee5r8DjVIrufR8n4a7M/1BStue9fYU9hxn/cvYRw9aYYEeWNPVXAdh aJxvve6RsZTvUO5rgDihWJ4WWEcOJLI75s9ZT9zDRsibaWBCtl3vN6EoIchsNcpH hynCG61kU1s8Oh20wwkBaUoRaQPHAIHRzRw4CRlCV4FUZPZtxadn/V2M2htff9LM 9PTi3mHwc2VFfDFULKsNEw== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIU5lhdOLpf7QwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjE4Mzc0MloX DTI3MDkxNjE4Mzc0MlowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANAuiD/HxMY3PJwcDMbQV0p9+7IoF46LCQUb9wuA1mWtgbu840pztaCp0q//1341 sDWhCq1Wcco69f0AJK9cYLwgxwPAY59aT1gMTAFIe/1oiqUaCgrr8meFk+Aj66Yq vxx8ZFxEt2IP3Eu7OWkgbPyIpiK3w+Yc20iVC25E38sVKjCZojCMXTrkYUk2FsOF LoMoPv4Jdb4alkeBO46bVnLGBE/TcoSGcKu9NqybVa4Gn+M/Ovcw127hqYm8dMwb pX4nsd9D8GAF35xJE+wMn62LdGLE05lZN9ZuIt3BSuHpFuqtGSS0S8EMZKDXdQUx txDhGFM6N4OzvSx9AL3VMNECAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAphvaIrcqe4mwnel1dbGz8K/eqhcBFSuWCx7j747FsHg1rX3JGipYY4p9 ZH79HOgGUTJIOq6h2y2sFedcKNtruDBLBgNVHSMERDBCgEBXrkaDmBVGpSGZ6abu 0cZnxCEYf1Wou91pLT9KlSyXTWc5DEeAs1Um4v2x6IgU5poMkj3+hIlKJIb5orRW 6+9DMEsGA1UdEQREMEKCQCouYXBwcy4wMTBhNzY4My1jMjNhLTRhNGYtODVhOS03 MTI0MTk2OGNmYTUucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAIpZzCPEaoxDOqobJeHQiYN2t/ROsn+8Fsim3HwyF8ppO1BJV6whgAYnKzj+ 8RU8zR2XEVScOf8bQEHFV5btxoSYaWBH2fX0b1syho8nIqH6gfz3ynuG1Nh+C+mc R+pbDgtjv2RQEAsgeMsofhcANvQpJrlA+oWB0/39aCV8TrYqQ0oqKuL724CxN12J 6eHnDC4/ISoBBx/PpA8mq0hDcF572ZoeU3dy/PM+gnC1AYKix7wqSPPucTKGaJIJ m4JraNPi5WOHJcbTSJnElj2IwX/cr1nJuwWnsia6AcIF59f0RxH65r9W3h1orHcZ /43wWdne2U7ky+v+DoujweJ4l6Q= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-16T18:39:51Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-16T18:40:48Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4338" uid: 971aa6d7-95ac-4457-bc9f-d75fa1947420 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T18:39:55Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"e529b634-2f9a-48b2-97a7-b093379d67e2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T18:39:55Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: e529b634-2f9a-48b2-97a7-b093379d67e2 resourceVersion: "2351" uid: a93a8f42-9db8-4b6b-8cc6-a24dabc40739 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIAOY/WGPMxD8wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTU4NDM4NDAe Fw0yNjA5MTYxODQ2MjNaFw0yODExMTQxODQ2MjRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1ODQzODQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnVwoJjJ/5udVtrVr1rIpHW7OogyJZ13zm gf1/EQDwzv4GLPyHYBDgT8GeN0R+jfO3FSXYXdn9o92wIXmmaN+Q5r9dDa08V5nr UYD/dRPHyQQSR81r0Hwy45hl4Xuoohc5gJtmMYzDuLnJsUhSCgNU0oPvnr4Sb1aY /dGHw8WipMOXtL2FWP3sxmpbse910xvZymhAB714L02m2sSCh5P2ut/YwjRdhFLu xHHKtj/zVR4U1z4ETL0c2pVa+v+H4IztEYC5XYXsUE2wT9ZkfZmySc+r5FDzeb3I xehdpH9FgQQ5Yv19YKrStKsVmOys8KkvrlelzlyUjq2prGsOt1NDAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRizbZb xsjhhPWHrsnZmQtkE+6E0DAfBgNVHSMEGDAWgBRizbZbxsjhhPWHrsnZmQtkE+6E 0DANBgkqhkiG9w0BAQsFAAOCAQEAT1okpTfeR7p0Q/HRBLpYrPRB2CiDwVc/H7JS Y8PVyBgpKK3UPHKRWbYvLHW+sHUyXQExtmR5KQewNbXFH5wpAg0IBHhz3uTvuAop JfEz/l4H0fsTa/2Xkg/34rbab4HguXk/sPW81eQikIVqulsivOlOvrRtdduyFLWf 9vAXMMo8/shFjRQy0Tzxv4R7Q7IAmMFMef3Jt9LXz1P1/V21wsgBvxMeg3cxO4uf fKj7vHaUIjWOg3HuqcYqAJ48vRnzHo0it2VsazV98ImeTefG+by/NZqzVxhsH8Ft VEvJEQZPtbyUStSviBGTpqk7sSvmY7xF6lW5VZKOPvxvSjeEkg== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-16T18:56:34Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-16T18:56:34Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "20494" uid: da9456d6-a895-485a-9091-0e0c2ed20692 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIAOY/WGPMxD8wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTU4NDM4NDAe Fw0yNjA5MTYxODQ2MjNaFw0yODExMTQxODQ2MjRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1ODQzODQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnVwoJjJ/5udVtrVr1rIpHW7OogyJZ13zm gf1/EQDwzv4GLPyHYBDgT8GeN0R+jfO3FSXYXdn9o92wIXmmaN+Q5r9dDa08V5nr UYD/dRPHyQQSR81r0Hwy45hl4Xuoohc5gJtmMYzDuLnJsUhSCgNU0oPvnr4Sb1aY /dGHw8WipMOXtL2FWP3sxmpbse910xvZymhAB714L02m2sSCh5P2ut/YwjRdhFLu xHHKtj/zVR4U1z4ETL0c2pVa+v+H4IztEYC5XYXsUE2wT9ZkfZmySc+r5FDzeb3I xehdpH9FgQQ5Yv19YKrStKsVmOys8KkvrlelzlyUjq2prGsOt1NDAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRizbZb xsjhhPWHrsnZmQtkE+6E0DAfBgNVHSMEGDAWgBRizbZbxsjhhPWHrsnZmQtkE+6E 0DANBgkqhkiG9w0BAQsFAAOCAQEAT1okpTfeR7p0Q/HRBLpYrPRB2CiDwVc/H7JS Y8PVyBgpKK3UPHKRWbYvLHW+sHUyXQExtmR5KQewNbXFH5wpAg0IBHhz3uTvuAop JfEz/l4H0fsTa/2Xkg/34rbab4HguXk/sPW81eQikIVqulsivOlOvrRtdduyFLWf 9vAXMMo8/shFjRQy0Tzxv4R7Q7IAmMFMef3Jt9LXz1P1/V21wsgBvxMeg3cxO4uf fKj7vHaUIjWOg3HuqcYqAJ48vRnzHo0it2VsazV98ImeTefG+by/NZqzVxhsH8Ft VEvJEQZPtbyUStSviBGTpqk7sSvmY7xF6lW5VZKOPvxvSjeEkg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-16T18:39:51Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-16T18:39:51Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-16T18:46:36Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8332" uid: 4e4dc4b3-72e8-42b1-855d-6280030b9f86 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T18:39:55Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"e529b634-2f9a-48b2-97a7-b093379d67e2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T18:39:55Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: e529b634-2f9a-48b2-97a7-b093379d67e2 resourceVersion: "2349" uid: a7a49243-0cf6-42e1-a069-f4f66c21b731 kind: ConfigMapList metadata: resourceVersion: "94176"