--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-17T15:53:53Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"7a22dc4e-9253-4ecc-8efc-85b5c4251e76"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T15:53:53Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 7a22dc4e-9253-4ecc-8efc-85b5c4251e76 resourceVersion: "2542" uid: 41276634-a8aa-4f59-8861-e41658fc4e30 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-17T15:53:53Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-17T15:53:53Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2533" uid: 10f3c577-b802-45a9-ba6b-1ad0f6d03c71 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-17T15:53:53Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"7a22dc4e-9253-4ecc-8efc-85b5c4251e76"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T15:53:53Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 7a22dc4e-9253-4ecc-8efc-85b5c4251e76 resourceVersion: "2530" uid: 52d640e8-acd0-4c0c-bacb-850ae3bcaa7d - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIe+APsrgIakAwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNzE1NDYyMloX DTM2MDkxNDE1NDYyMlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwXrgjEPZDxB aHdkYSYZYBHsFYeAqqZKYWtOjDOnZUtt0laaENZ6vQ4O8z5vdRO7cwIAPP74whnI dUjAfiPFDgtz8a/C3FN4M337BuI4Wki+KRE4XoVxl5EY59CHIiNRs7zXepLa5HQh iAb46RT2JPI1/fIYkPJAFVnPOfIGXtBFvro0p4OtfAvqLGRIS3XkqxclPjwsBhYK UBWbmMtPd7ccfg1dS3YGLGBetxBZG10zeaN8SzGv7iOwQBl6dPQzYYkbuX81BRUg 3ENNn+3U0mhc2/Fp5S36/UnIW2nOHXpbpYEFG+RzUGGog1E5uqJsPfsOUP43xr3Z +HI6GL2uFwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA9WCRughvgCd+w4V3+ac7ZPiENnDf0FkpRET1uLiFQ70pVFvZ Q4ZVXXQ2W0RPrZjw83dqOA3ZqXSbBNxDzu186TANBgkqhkiG9w0BAQsFAAOCAQEA mHjVKlUmRxqqU8quwAlUE8pWJ8Pq1khcG219NmjFsAX4jGHxu0fYqUCpJf/ATdaA /Cx8cGRj8tHQtWIqiCNRM8/LDwa8lv7KTHLYZyAMn/xrcTGm3YokBSrI7XIh/P7a thY2lxcSu6Ltmsgr9S+FGxaxrFjvPCLAOssDc1tQ0IAPqo1H7xiZ6FIuh9LYhJP7 RuRCIv91CQ06N/2LeYs+bl66bEiicyDucPQpqUlahI2kTLcY6q/C0sv0t2pmV7Qi rboossSMUXrDJ96u0LMyNlhG5mlGvhgmOsfmj+1dxA3rIF0Io+tnRLqOh8XcMu4F ZZ7zsFZ5uWoNTf+FbGkcNw== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIINREcDUiAszYwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNzE1NDczMFoX DTI3MDkxNzE1NDczMFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMACPROJ3N9gmXZPJ0VChjm145P41fEcaknlHHwzOplytx7DcziGQy+98YWGumP2 43W0fZG5Vt4e1jTaCbCfOf5ERkVmBGDPJhuW+YapJUO2Qe8yEswIeDVUS+ws8LTq RRBrg9k/h9SscWhFg8JURmoJMCILA4yFGJffuCqn7uESWbBDUQ6tZinZExDZM61v fWZkWVuvgh1+1vfviG6SqMu7Dwnwb7tzpn/MDhes0mj1opISM7xaCg4qTGYSSwm8 Ch5Zcl5KHp2wPRtAju5EInOd2hKUkaVMvBLLGT9snHmVYXljWG+LCfLaou9JxMWg 4Gc0HUtbEGroGLSbUR0925ECAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRA35ItMwYnFQ8DppKqQdirw+FZ+AwZu8WVTNY3O/9VmupZmhdiDQiSpxqH srMha5AaVJSD2z20Vhj/lv4pp+HQADBLBgNVHSMERDBCgED1YJG6CG+AJ37DhXf5 pztk+IQ2cN/QWSlERPW4uIVDvSlUW9lDhlVddDZbRE+tmPDzd2o4DdmpdJsE3EPO 7XzpMEsGA1UdEQREMEKCQCouYXBwcy45NDliNjM0MS1mNGU3LTQ1M2MtOTM5Yy04 YjlmNTZhMmEwNGYucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBACMCcey2jWYD6SUmBKyzw5pNxJqcUIoN/XfnFa6YXbFuDlrHS0FtH1NUWzRp JqfT6ut+py6FjAhLLInA6n0cE4NmjtY9c8TNB7g3qhNsksxwGb4pXgU/rz43LUdQ bPdL7zSj5D9bvCZyV6PPQihArrW2ahFmUhh+HooRqsbrlFUajRobWMxTJvjC4E/Q mYtkYC4X2JbLWorgvy+yGX/EWXoGOFvyx+d1+782ggZb2g5IzBWHkdxpq5ElcS6A FKFjw88m+0tONVymu3j5Mcx472LcfWSbIwBWo6mGasIvwRKgpFX1jGYXeXbDCqlJ ESJvh6vJk6fVx+VKFR5LNS2FXN8= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-17T15:54:08Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-17T15:54:08Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2962" uid: 3e067e37-850b-430a-bced-f415bde685fc - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-17T15:53:53Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"7a22dc4e-9253-4ecc-8efc-85b5c4251e76"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T15:53:53Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 7a22dc4e-9253-4ecc-8efc-85b5c4251e76 resourceVersion: "2554" uid: 0b2c36d4-6ca8-4b7a-9b2a-510a971d8d47 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIcz7NXsJ0cyowDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTY2MDYyNzAe Fw0yNjA5MTcxNTU3MDdaFw0yODExMTUxNTU3MDhaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk2NjA2MjcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp8CAWuMjGBRLtiyRrjy+BNHnOUeI8yXfa NLM9f+90Rqjis+rK5YDbaAS6TTdXxMrJTGXsLGlr+e+O5zjnFS5oR9OowWXf4T+M lVQ/BA9FQAnL8lxF7IgRnFCdS6f9oRGbBGzqDLe99yQRSqLv2vkrGn9kj1Q//rvL UQY96mChJufKV9N+TboR4TgxP3KNRRGKtdcPEYfi45fmueJ0kTJtcDT5+RWScCvj wZN8udWNGPkxaOnPTD+Tk9Dq/BDgMcncTS5mz+fHV3A80JbIABL8DcdfTTK+q70T shBmqs+3T8pxtASY9wl3achCsIuUOoH6uCmrx1pCUrIgEhUlhLE7AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQyos9B rC7wAMCMVsmF2zNHYEXMhTAfBgNVHSMEGDAWgBQyos9BrC7wAMCMVsmF2zNHYEXM hTANBgkqhkiG9w0BAQsFAAOCAQEAF7H1jgkcAqjwtDTId1CqsDFhCEdLxZdstVhX H46hxSlgnE6pR7lJElv5DIsbWj5ChLqZFJv9B+BE313F7bx5N9VsIRNFvndvCvkX b1NwbXUcwidEwMKAwl8KIjrJMK1lddvm6q8+x7eXM/LnQ7xqJXHiNsWeIzxbZ1fp pngTnPCDEiUixurb4v2z5Oka6C4WnW9PBut5sNovoOWxUxa2qFhs4FpnIbVF3S/p NCJZ6Z2NyzDrf5XKn98BaJWIzdU+pTsYXQI90iteujEos40GTtDD9uHkuP6vCtZp sWSRLltQjp0f4f0uMBqe4A2wMpQz7vnNakeHw+4gzH+Zikw1yw== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-17T16:04:20Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-17T16:04:20Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "13065" uid: c24d0bb3-4f93-4e03-a198-42d2e2babef1 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIcz7NXsJ0cyowDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTY2MDYyNzAe Fw0yNjA5MTcxNTU3MDdaFw0yODExMTUxNTU3MDhaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk2NjA2MjcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp8CAWuMjGBRLtiyRrjy+BNHnOUeI8yXfa NLM9f+90Rqjis+rK5YDbaAS6TTdXxMrJTGXsLGlr+e+O5zjnFS5oR9OowWXf4T+M lVQ/BA9FQAnL8lxF7IgRnFCdS6f9oRGbBGzqDLe99yQRSqLv2vkrGn9kj1Q//rvL UQY96mChJufKV9N+TboR4TgxP3KNRRGKtdcPEYfi45fmueJ0kTJtcDT5+RWScCvj wZN8udWNGPkxaOnPTD+Tk9Dq/BDgMcncTS5mz+fHV3A80JbIABL8DcdfTTK+q70T shBmqs+3T8pxtASY9wl3achCsIuUOoH6uCmrx1pCUrIgEhUlhLE7AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQyos9B rC7wAMCMVsmF2zNHYEXMhTAfBgNVHSMEGDAWgBQyos9BrC7wAMCMVsmF2zNHYEXM hTANBgkqhkiG9w0BAQsFAAOCAQEAF7H1jgkcAqjwtDTId1CqsDFhCEdLxZdstVhX H46hxSlgnE6pR7lJElv5DIsbWj5ChLqZFJv9B+BE313F7bx5N9VsIRNFvndvCvkX b1NwbXUcwidEwMKAwl8KIjrJMK1lddvm6q8+x7eXM/LnQ7xqJXHiNsWeIzxbZ1fp pngTnPCDEiUixurb4v2z5Oka6C4WnW9PBut5sNovoOWxUxa2qFhs4FpnIbVF3S/p NCJZ6Z2NyzDrf5XKn98BaJWIzdU+pTsYXQI90iteujEos40GTtDD9uHkuP6vCtZp sWSRLltQjp0f4f0uMBqe4A2wMpQz7vnNakeHw+4gzH+Zikw1yw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-17T15:54:08Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-17T15:54:08Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-17T15:57:22Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7708" uid: 8b2de625-060f-45e5-970a-c90d0b1b047d - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-17T15:53:53Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"7a22dc4e-9253-4ecc-8efc-85b5c4251e76"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T15:53:53Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 7a22dc4e-9253-4ecc-8efc-85b5c4251e76 resourceVersion: "2548" uid: 27a0f7ba-91ce-4f9b-9a4c-fea548fdd75c kind: ConfigMapList metadata: resourceVersion: "33712"