--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T18:41:20Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"0044ff88-f0c9-43a8-84fc-7d995dbe4549"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T18:41:20Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0044ff88-f0c9-43a8-84fc-7d995dbe4549 resourceVersion: "2537" uid: 43c31870-99d9-4458-8d66-48b7b51f63ff - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T18:41:20Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-16T18:41:20Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2531" uid: 6bc01326-073c-4eea-a62d-fde7e8a9a6ed - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T18:41:20Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"0044ff88-f0c9-43a8-84fc-7d995dbe4549"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T18:41:20Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0044ff88-f0c9-43a8-84fc-7d995dbe4549 resourceVersion: "2530" uid: d94d2eec-eff9-475e-8268-814035fd5b7e - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIcMofO5NOSO4wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjE4MzcxMVoX DTM2MDkxMzE4MzcxMVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn9e1L0kqeMy UWtE35eB4x1LYJ1VmQ70dFqFY8h/t8HlAtdr4jd8BRvp19IdVuancqia2Spjw0WB FO2GyEJ2AUXNgHmvCvctYVF5pxkjiwm4oAlECc6K8hwsRqHY8DXAhgRns1bdjl7M pwHTIynCf38csD6XoJdKdtQVFk/ZlcMMVsk8rjxDpqCQrlT0W7Gpuhe5SJg6oBUv Et73N3nKiVQUQt9VDVyzSpWY7INNiA3bfhs3eVxTPNvKna7SXovF98h6yMJvjRLA /Zm5rwReInyogajbkmQRDYcxdHHfPwO+d4ufrgBFA8ojAMvVkgB4d2yp+Qlrpc90 nle85Ev+ZwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAyMfcAjgqQeI8Y4s/bmTQwdJnvv5Xnh/+ESNR+XnsC4lGtf6K 3tu4+zSdkzhPUVHVE9xuZIZFR4IugnPo7eJfkjANBgkqhkiG9w0BAQsFAAOCAQEA MMuYOkOKV8BsCuzE4pHB2OHXSsK7/iZnjF/sNmKyK5I7ov8G6H4pcT4iwDw+Hi+A YPMs1j9DImjHs0Co/BKc7aMBPuktiPGAidzOHyFKm6RbFa1TqzTVdS2dsy0mtDW1 zGZG3//tGu6k4//TKgzFbwlPnxQ6/vGfB8rXeRSkFqdmz0xmTa0oyAuis0T5EFND abRg3iwk9R38rqCtJqSQuBUjmoxYZN+FLXl5iji4AZHg20TxxtFcStuLcZ1fC4YB KgWvku/K2xN6hrnLAgEme0Jvk5AcQbAsOUm5CYtHNowaIzhfblu1KLd3Hu+U38aJ 3NUVVkkXY/Kccfy5Tpc+BA== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIB3pGba2Y3wwwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjE4Mzc0N1oX DTI3MDkxNjE4Mzc0N1owMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKvVQUodEQnfGcezp66yQC6rHRzuqasD3omL3gi/YdEonEJUSBj13yml6mZ0OIzO SV0NKMJdTGjX+Xf+A+O+H3sL2FpnmMy0KtefmdpZi434D+XfpmwWjVYDMa/iNbV3 266FLx5fSbNgmQqwE8Xc74DBjW1smVfUrGqLOd5Cu0mDe/gM+CCaeR5fqQ1Ng2fa s5CGq86Fps6Gao1kqZIsKGvqWWOvaoVH9LQlYNpQZ7dN6nThtZE8nw7Xs88PK6qW muHGGSEoDZ67PymXteB63OmLak4Wxrr2qal8rMMTNPEfnDcbi6BDIOR6e+p8sFIe +oOPo1Qb+9ZP1sX3OeiFbncCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAmnk3a41+9KvVKiMHYcjM38l8TRGLQHw2WrYeZ4/v1b7JFk+A4Iegbcn9 2ASCXw4ffDW2N1AsmCyBgMclEUA6+TBLBgNVHSMERDBCgEDIx9wCOCpB4jxjiz9u ZNDB0me+/leeH/4RI1H5eewLiUa1/ore27j7NJ2TOE9RUdUT3G5khkVHgi6Cc+jt 4l+SMEsGA1UdEQREMEKCQCouYXBwcy5jMGVlYzk2Zi1mNDhjLTQ1ZTYtODNmMy1m NDg2YjdkODg0YzcucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBABpeoVMTa58afDpEW1Iez0lFe2vXDu929RvpcSm55juthXCDokipOPQdW9bd OoyEoZ5abWtJvZ+HSf3S/P0JaKAkzL3lYIqkJiNRhL6oNxz1eeao6jBjc93Okf8y iTVD1OOfCIN6ioeN3A8M1Lv2zXXhAXks11k6+h7raxJMyGi5DAOyJg0iKSIZfLPm ptkljgHHaKeoke2o/k6IN6ygsqj8tRWaMdavy7OazwEptbUQghnmGQInMGIwapcQ +ak7X69iKlHnsu+7agOUkzDqwuNATjaHc9/x/439h8ESzqxTKE/0oPJ6y5TrkwL8 qWK27A3MOmm2Fdih0gB0Tq9CHtg= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-16T18:41:36Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-16T18:41:36Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4125" uid: 9c3ff686-b887-464c-bc80-db546627fb24 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T18:41:20Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"0044ff88-f0c9-43a8-84fc-7d995dbe4549"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T18:41:20Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0044ff88-f0c9-43a8-84fc-7d995dbe4549 resourceVersion: "2552" uid: bea98556-096f-49f4-81ba-ca93836317f6 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIdaFgkmtQe+UwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTU4NDQyODAe Fw0yNjA5MTYxODQ3MDdaFw0yODExMTQxODQ3MDhaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1ODQ0MjgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Xf+YBOjZubc3enggvBxiiM6CvKWbSDW5 W9lvj8Y9vvKO+I37yWq70nzqPIu4Cy5M3C4HWRMz+iBtsHfU0WJp/9DmF2IpWZiY 5eYkSIfPpY7+OOArc7Jekdc0Mz/htRuy/jha7RZimItP6dvfajEjTcCRnF9fSps9 A5/Id0ZqfmaP7WK+hsbpxF4GnzcLPeshW3I4on8MLqEzSJF+JsIbXH6O3I4eNp+n +9pVOqU1e3Mbi+gpAkZWrTRVndaQ2a0mPlDkOo5Mbv3mdDgCU+I2fE+m3WfdF4Xi zAUqUXWEdJln+0bRM7iGkY2YtL8ui3aG1WdRKdBsGmH1idgcpDUHAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTePu7j N5Gc+omycqAY5iOJ371VNTAfBgNVHSMEGDAWgBTePu7jN5Gc+omycqAY5iOJ371V NTANBgkqhkiG9w0BAQsFAAOCAQEAR421HXmJqySiQ7tWOFepA/SpCWM/7Vlk708w X9TEvL8Z3c+tO9HVI/UO4YTJ6Is8uXtCr62nrynu0IOhTpHOy8bl64Lj5nxulpJV 1e1n/sPvBtLSNhaKTwFWVWqdDGNA/tmYSi16MraBgG5oU+J5DftrEPg6nhUNlloE FNY+Mh7vK2vf+Q1EtnExPTM9g/90+5JXBUN7wJ+P5P02ufvGZGUhj8IFm4vGnNlb xJtjdpwsijdRwk70O+AcYwArVCQ0C9iJp6oXYGwNS3IZLbtYhvJz4JjjfUiyqBkf t+NEzGJpSBVyoxzVK5K76QGIJyW67C9hOPB/sSOWAvvKreL8Eg== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-16T18:53:50Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-16T18:53:50Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "13499" uid: a5ff8899-0e21-4576-9661-20bb2f5ba4eb - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIdaFgkmtQe+UwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTU4NDQyODAe Fw0yNjA5MTYxODQ3MDdaFw0yODExMTQxODQ3MDhaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1ODQ0MjgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Xf+YBOjZubc3enggvBxiiM6CvKWbSDW5 W9lvj8Y9vvKO+I37yWq70nzqPIu4Cy5M3C4HWRMz+iBtsHfU0WJp/9DmF2IpWZiY 5eYkSIfPpY7+OOArc7Jekdc0Mz/htRuy/jha7RZimItP6dvfajEjTcCRnF9fSps9 A5/Id0ZqfmaP7WK+hsbpxF4GnzcLPeshW3I4on8MLqEzSJF+JsIbXH6O3I4eNp+n +9pVOqU1e3Mbi+gpAkZWrTRVndaQ2a0mPlDkOo5Mbv3mdDgCU+I2fE+m3WfdF4Xi zAUqUXWEdJln+0bRM7iGkY2YtL8ui3aG1WdRKdBsGmH1idgcpDUHAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTePu7j N5Gc+omycqAY5iOJ371VNTAfBgNVHSMEGDAWgBTePu7jN5Gc+omycqAY5iOJ371V NTANBgkqhkiG9w0BAQsFAAOCAQEAR421HXmJqySiQ7tWOFepA/SpCWM/7Vlk708w X9TEvL8Z3c+tO9HVI/UO4YTJ6Is8uXtCr62nrynu0IOhTpHOy8bl64Lj5nxulpJV 1e1n/sPvBtLSNhaKTwFWVWqdDGNA/tmYSi16MraBgG5oU+J5DftrEPg6nhUNlloE FNY+Mh7vK2vf+Q1EtnExPTM9g/90+5JXBUN7wJ+P5P02ufvGZGUhj8IFm4vGnNlb xJtjdpwsijdRwk70O+AcYwArVCQ0C9iJp6oXYGwNS3IZLbtYhvJz4JjjfUiyqBkf t+NEzGJpSBVyoxzVK5K76QGIJyW67C9hOPB/sSOWAvvKreL8Eg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-16T18:41:35Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-16T18:41:35Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-16T18:47:22Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8244" uid: 0a7b026b-8820-4075-a837-7f967469e1e8 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T18:41:20Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"0044ff88-f0c9-43a8-84fc-7d995dbe4549"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T18:41:20Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0044ff88-f0c9-43a8-84fc-7d995dbe4549 resourceVersion: "2544" uid: a53e1ea7-9157-43ac-9946-d410738dc00b kind: ConfigMapList metadata: resourceVersion: "39321"