--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T18:32:24Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"c5486bf8-7d1c-4d9f-963b-fd70247a142e"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T18:32:24Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c5486bf8-7d1c-4d9f-963b-fd70247a142e resourceVersion: "2339" uid: a7dcf88c-55b4-42da-86e0-91dde6675dd2 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T18:32:24Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-10-30T18:32:24Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2330" uid: 098dd527-204f-4d14-ac50-d1dd1628bd90 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T18:32:24Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"c5486bf8-7d1c-4d9f-963b-fd70247a142e"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T18:32:24Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c5486bf8-7d1c-4d9f-963b-fd70247a142e resourceVersion: "2329" uid: e96c16e2-2431-4ca1-b606-c20fad9bc427 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIcmJ2TcbY/RowDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDE4MzAxNloX DTM2MTAyNzE4MzAxNlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPU+WBOcA01F 4QgOpf4ozEfdPnktc4XCknpOJ5OIp6wKkA+awBrTEV7v1eQPAJjLb/T59DcIgkQt G8FM8HerAjefUuCc2NMSae+hJA0EtjL+3AttIQ3itmyKyIWeLC1/4/I/OvL0BZDx yXjmj3Ki+c5mGCGfiDuC/9wUnxZFhOMZgJ3rsg34XuTFM0OZZH2rsxwQODaiunvR vvA+5JodzVc9kKPpR6e8gia7yy6TsWO38ypeQ6ThTQp1JCIhFKLNqkjww2DuTtYL HOWbo/1fYME9L7k7j7XB/4/dqHp5qB7Rvf6X9YEEmxsgFvV2NfGItYIPODpqgK4i ppdoLrdyywIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAGwTd+lD7zmPxkqIKeNHtRs+n5pxqIPReyRGKaM6P0aoRaDe8 RqvoAsMHiho2+xFgSu7mlxjY7KuGAoHqhTmLrjANBgkqhkiG9w0BAQsFAAOCAQEA MHd/gbHtVac6bRRPS3oLskGVeb39pSC7ILG2m7c30+XgseQCzK88mkQb0tsKgyZ0 lyp9HgpK5GK5+pBlLcPK3Qvlt69793kktQXlY+Bs75iImwKpVNo+XRf87GrPHLVA tY8FEwFScEylEdruN+Eijb1g0CrZVyvrPsMxKsNaIHoEENe7gT3EAIX6Wg/OAg+U pzk/qBJENrm03uwPdtF3DHmLsG8Pxn44UhQ5ecm448jF1xXv33Q44pLR3w0TPTmp xE8JQBwUE0VTkaGTRR80Mx0FogqxdTIEeRa2Y7AtoK6NKHAeg+2o2lM9Cz4ZfmkT 26D/Yd7TGzc1wKN4q+P9Vw== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIVBUFPlOmjI8wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDE4MzAzM1oX DTI3MTAzMDE4MzAzM1owMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMUvPRMuS5GCnFVBBb2c19PbAHFklzMJpKg6yvWFw69/Do+LQ7ntDzUhg+kkJ9Cn 20vNlE5o/VrWmxse34150lCHeAQUzE24lGbANKLR9ZQ/dByMZ/yVwM0YHYxa8O9w Ridx7v8Qnv37Urt5JkU0wPc/mxzDW/WlUTSwN2OJEl4NsK8Nme9gYwjh11a9Jsuz g7PzwrzFnlitwBZDeg2KnLIRZuqGaLX/OlDJ6YgR6eBKCwVbmN1gYGCkaabCLF6a qT0S0ZomLB3CRcTVUc4FRJOsJwXcDOyOVkqqCM8DtYms0zg5FlaKc9Nmv/Gz+5ps uV5lS23brJfi0uTta6aWlNMCAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAKcxSS7Euh36E+E8pSUCmQqCz0pAX++NQ1oxSeciF4jqTZTjgSeV8PT0y jjaEZLk70k4gXtM0mvFjRfrUwGbc7zBLBgNVHSMERDBCgEAbBN36UPvOY/GSogp4 0e1Gz6fmnGog9F7JEYpozo/RqhFoN7xGq+gCwweKGjb7EWBK7uaXGNjsq4YCgeqF OYuuMD4GA1UdEQQ3MDWCMyouYXBwcy4wNDcwY2M2M2M2NzVmYTcyN2M5YS5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAa65kpEdoJnjL pkv9SxTLt9m+jBPYl7c9l6YSJpru2n+GloVATLafNg57RfiV2Jt29idgtn0Iaajt xZY5Ki5Kzst9qXxokX4AI49MXdedKjwHMUa3g/Ft1xxLzRtdPphRvotV2RRQZgGA T2ck4fzc37ucWkprB3lEcHMdoS+g8AGXmvYlMU08yYv9EhYAeQoWCQqGXwe2zZXq xavlcljxGC3FHF9ngzx295KLGwq0iKTwtJxIwSqykrcUrvu3lX1I2kwbMwN/eXAR 0vkZKtEQwsjhoUIW37dnKhbFByoGg1JDh8VAYmN+fjj22RdHHv+TUjgjx/If9MH8 Cs5Oo5I2/w== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-10-30T18:32:21Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-10-30T18:32:52Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4128" uid: 2c87b162-e482-41df-96a8-309bd81709e0 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-10-30T18:32:25Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"c5486bf8-7d1c-4d9f-963b-fd70247a142e"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T18:32:25Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c5486bf8-7d1c-4d9f-963b-fd70247a142e resourceVersion: "2343" uid: 60f3e451-bac4-4979-ba23-d4b7a6e90c7f - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIPTgsT7/YWKwwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzM4NTM2NjAe Fw0yNjEwMzAxODM2MDZaFw0yODEyMjgxODM2MDdaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTMzODUzNjYwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnMOmiXcFqTJtoIJIrtPWf9yWE0izrE9UE qDLkbfqgFHTrlZySHChcqkVrifkmedFKbjFGqx88LROtBHrST2V71Xz26vZqzhFH RwbAb3X/kbReZtV10I6J6Isiq0Zcp7UZdGJvu0Qkx0anTXAQ1CL/Dhyb4SNKntdT c2zsX0Z7ClE+tpw34UdfSBaDfI8UW8GlUF8fLpfUUrJ8uu/IPpAJSX3TFCNFOeOx NXcvKsdOegJh+v+ENGX2vVQSMJjbDgWSr/DTuwyeY/XFYVlrstCiN2NCFvabdV5V b7OzLBePQrWz1WsEJggUoicIkje4ZlQcQPw5mXqWAqwO2npef/XDAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQUZR56 fS8c5s0DiiSOOIPk2XAw0TAfBgNVHSMEGDAWgBQUZR56fS8c5s0DiiSOOIPk2XAw 0TANBgkqhkiG9w0BAQsFAAOCAQEAoqaMGFJCVqpkUYYyZ5bO+dx5ie0NyQCHoi7X aHvh6bxs6JylHj7QN6we5/ng+k7bbXdl7KFJkK4qOTRKU7+QEyRqRWL9IXn1BUUS 3HNWytKeam/poGrJUERHSLj/j26Y7sbWYQBDcnBArdcKVmjyW9E3JEDW9x7bUPw+ z2Va/nGnvjoa8ZyZmasyKXCbZ43bSe2eB8wtlvb2LH+AMfbRAVEPxECRFhOZ3PLi tLOIvbKgxlWF2eIqy+h6gh7oAmoRtHg7WuAeUAYnDAINPlm+y+bQf9BGlaCMUm4H vwHcOaFWqT+EvQDuaUESzFxl5VuJpu9x2jDr92+M9vK7CcsSwA== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-10-30T18:46:08Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-10-30T18:46:08Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "11731" uid: ad7bbcc3-85f4-4016-91d6-6d0495b7b42b - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIPTgsT7/YWKwwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzM4NTM2NjAe Fw0yNjEwMzAxODM2MDZaFw0yODEyMjgxODM2MDdaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTMzODUzNjYwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnMOmiXcFqTJtoIJIrtPWf9yWE0izrE9UE qDLkbfqgFHTrlZySHChcqkVrifkmedFKbjFGqx88LROtBHrST2V71Xz26vZqzhFH RwbAb3X/kbReZtV10I6J6Isiq0Zcp7UZdGJvu0Qkx0anTXAQ1CL/Dhyb4SNKntdT c2zsX0Z7ClE+tpw34UdfSBaDfI8UW8GlUF8fLpfUUrJ8uu/IPpAJSX3TFCNFOeOx NXcvKsdOegJh+v+ENGX2vVQSMJjbDgWSr/DTuwyeY/XFYVlrstCiN2NCFvabdV5V b7OzLBePQrWz1WsEJggUoicIkje4ZlQcQPw5mXqWAqwO2npef/XDAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQUZR56 fS8c5s0DiiSOOIPk2XAw0TAfBgNVHSMEGDAWgBQUZR56fS8c5s0DiiSOOIPk2XAw 0TANBgkqhkiG9w0BAQsFAAOCAQEAoqaMGFJCVqpkUYYyZ5bO+dx5ie0NyQCHoi7X aHvh6bxs6JylHj7QN6we5/ng+k7bbXdl7KFJkK4qOTRKU7+QEyRqRWL9IXn1BUUS 3HNWytKeam/poGrJUERHSLj/j26Y7sbWYQBDcnBArdcKVmjyW9E3JEDW9x7bUPw+ z2Va/nGnvjoa8ZyZmasyKXCbZ43bSe2eB8wtlvb2LH+AMfbRAVEPxECRFhOZ3PLi tLOIvbKgxlWF2eIqy+h6gh7oAmoRtHg7WuAeUAYnDAINPlm+y+bQf9BGlaCMUm4H vwHcOaFWqT+EvQDuaUESzFxl5VuJpu9x2jDr92+M9vK7CcsSwA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-10-30T18:32:21Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-10-30T18:32:21Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-10-30T18:36:14Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "6915" uid: 61efcfe8-6188-4307-a580-74459cf9d50f - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-10-30T18:32:25Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"c5486bf8-7d1c-4d9f-963b-fd70247a142e"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T18:32:25Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c5486bf8-7d1c-4d9f-963b-fd70247a142e resourceVersion: "2342" uid: b13adc82-28d6-486b-a0e4-7ef02d36f0a4 kind: ConfigMapList metadata: resourceVersion: "28303"