--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-17T18:34:01Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"c788b6e5-113e-46f6-b55a-f67f1b110a7c"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T18:34:01Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c788b6e5-113e-46f6-b55a-f67f1b110a7c resourceVersion: "2303" uid: 7f8c7a8b-62ec-4790-abac-7091d2f4ec7f - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-17T18:34:01Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-17T18:34:01Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2290" uid: 3d59a261-b51e-4b3e-8ec7-b7d7a1987276 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-17T18:34:01Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"c788b6e5-113e-46f6-b55a-f67f1b110a7c"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T18:34:01Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c788b6e5-113e-46f6-b55a-f67f1b110a7c resourceVersion: "2289" uid: ee27f3d1-a1e3-43f7-a855-bfe6640a3a15 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIV69F/o1/BmgwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNzE4MzAyOFoX DTM2MDkxNDE4MzAyOFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2Ajuzbg8wyA zzO53NtGxqEiiSsX0Ddwcicx/KPNVkJMyLzhgidFLktd6EUNhDqyn9GR3unhjKYQ xikRfqFvvzRfwdZKs2FHw1n8NOkuFB0/dC4ighYmoRHVlRYVUOpNPMJd1OiFKFbM Q1L85yM9rBGIjbdNNSeS6+TaK0cWWK4pytDYPWDuULMcArQfVjfb72oz/+nTnZHA gJQOtyM5idslg47Jkl3rm7fA0Xcg2VeIMiz0kG5oZlXl/2aMTCRP1+ZKoJNyQR7b EvB7Xf/kmmWehFxaE/vdgLEcAqQuIpr1vnh49vHj1OAHMpXLZlm5CZ6EPlMpk98K LaWA4qFtMQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAU0msxwe/KQDP0yrx9DJ1cUwAC1d5mRs3sbe5thQyiZek2ZSl zflowGRrOOsm2eObNWHP2f49GB2JwFp2p5VJyTANBgkqhkiG9w0BAQsFAAOCAQEA t4w68xrc0cQJutpyeYdDsjTnSzrHeOKD9v+Ky69jkZgUIQCW0SBc7E4FYP1wFY5p 7/xrkVQRfEDTpHhoU9/JI1ockUXhS4XQuVC9/fmaeB+iR4bF/gv46x2MJRyUKrBT dQxKXMHIzKK8g6xGelJGMvrwtcV1BJ1aLY/0sKmL+HsRkrDPeiCYuRKXJx7R3Wa5 Tt3Gfq1PveI5oyxVK81sKT9ZGqYbLK1v32R5EzrKH0TtY6nbcyj5aIzX4O0Uojq/ IOmBEn+3m1CdWSRJOkC0bYjpY4VmzO+ky8k8MAs8dXzfU8EvkV53KG6VXU2Wth12 ZEN/5rGoOBylKqqjDtZY7Q== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIXd2Xu5MXgXcwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNzE4MzExMVoX DTI3MDkxNzE4MzExMVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALlutE2rFdvFfhry/ypEFd1vmU73EcwmmpkuzaRxWy0gXn1GgOMVeWs/8KFMyzip Swso/PVYDDdGnYmlsIza8KkxoeVdJ44+L69VMdd5VjstBFXmA0d1jmUIdlaBDA3Y zkDRAAcURpknH2kf4w/bOVJCEYA/iyEQ4LpnOaNx/jCRaXER+EU6SqhBcKpFgQWX yH6Usu6s9Qgzn+ky3gQwKI15sVebaAD4nz7VLqBFiIsjCrxzFdehvxfW3ZFPYAWw 3tLXTWbtFkv+LOEmdq+3AHjqcuOV3Gjvb5VVT63p4a5WdpJgM/PcSRxof8gbqW+h iXBZVw2vSD5TOp9tpdODNLcCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRA1f2fdNVrCRP/jPwv5yeiy5hDmDXi+WrlgVbEcs8hX+bkbWYFpe5i9v6Z gubeId9e+125jPgiJdsvm7UTxMEfizBLBgNVHSMERDBCgEBTSazHB78pAM/TKvH0 MnVxTAALV3mZGzext7m2FDKJl6TZlKXN+WjAZGs46ybZ45s1Yc/Z/j0YHYnAWnan lUnJMEsGA1UdEQREMEKCQCouYXBwcy5mNjA4ZThiYy05MjU0LTQ2NGMtYmRkMC02 MzljZWQyMDc2ZDEucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAJ51hZNeA59b67EYePU46ir0Y/SLm4LCbVUdyk22AxS9kWo+dbWUAAUZF8qg PBokR7p78ICfB2TTQkMxBw6VuJLcCGQ7hPLy5qoOT/vGx79U8byVo9giJojdnQ5d 0pqk2Lrub9Ft0rO3T1jF9+ojAf3T54TCrwugeSpwhev0N02DlgGp2RZBQuiAI94A WeSq4Djt0f6avDIt8LD6aCNkXUGD2Rf2FvGeGHQrsHBZ/PF/tMaBD78EvfNmpFgr FcjJJiOSrGAhkVlhtaRobg81sSN3/35Llk3Bzesw1+j1JkcehXmj9ZbhacAZ3ogN fspQFZawG5lyuZCt9yVbriqmf4Y= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-17T18:33:58Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-17T18:34:35Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4198" uid: d2e4f6e8-3a97-4a7f-afd3-c4b8da3d22f5 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-17T18:34:01Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"c788b6e5-113e-46f6-b55a-f67f1b110a7c"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T18:34:01Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c788b6e5-113e-46f6-b55a-f67f1b110a7c resourceVersion: "2313" uid: fe642b06-e5b7-412d-a002-e02cea77816d - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIBMSrhpicoekwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTY3MDQxMDAe Fw0yNjA5MTcxODQwMDlaFw0yODExMTUxODQwMTBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk2NzA0MTAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+uM4328zH7XtafUuBimRSNFE4822GzoZH 7KdQeqi5IMD289zGaN1pAaFG4ZiqFdTIO7JjcgHtKwA/k+AWkkdeCEQdMJ1wYvck mKSmoOsvfXh2vOuUFyoj2YmQOoYgVcWJa5o3F9Xfqp1IVk1I4g8faTITJQbHG7UQ agXp12fEz9PkCJkqHbgHEjueaPC7eX1P6qGzsTnMbCmIAmqpHNB08aXycSK+Boni rPgmUqorlSBCcD+4WziOoZwSoI3bVZd6oDBHuXQpf+e/Wp8nhBsV7FU4I9nsxAYu lLtNw8UIOq40kb+brG9rVXnGpsxLk9Lf9Q6XgqxzxhNVojzas+W5AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT3RjPj adQeaDaPWMnMSyBpeQ4RqDAfBgNVHSMEGDAWgBT3RjPjadQeaDaPWMnMSyBpeQ4R qDANBgkqhkiG9w0BAQsFAAOCAQEAAEAG4gfP9Lh8Tb2E4OErMqHjy/h/z6R9vD0P 8ldlMLZH8Db0yIuLnJoeQB9lrS4LJXiwb82jA830AV5vWW3c2oupYFv9v7vzCTk9 nhvW2MLDcSsuyd+2Y8kZdDX+ZnSWak165h1xmHQZB8bq6hZqafYq4R5yDmoVwsdK e488RVEyaKK0ozaI2kN6ilSvt5h69cf//T9T1D0ip7hI2XoCnWpAdCaALC/AJP4x p90jOJo6vmB8TgEn9yC2oKNz7eUgWgn9Id6RA6YErhWcTAz40S9zj2QkXmprpN2Z LHzJx5JQrfnVO71tMYaUaOF5cVavo4yjX45abFwq526XMauCHg== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-17T18:50:19Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-17T18:50:19Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14504" uid: 59f5c221-2b93-4359-b478-8f7f65d2cceb - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIBMSrhpicoekwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTY3MDQxMDAe Fw0yNjA5MTcxODQwMDlaFw0yODExMTUxODQwMTBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk2NzA0MTAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+uM4328zH7XtafUuBimRSNFE4822GzoZH 7KdQeqi5IMD289zGaN1pAaFG4ZiqFdTIO7JjcgHtKwA/k+AWkkdeCEQdMJ1wYvck mKSmoOsvfXh2vOuUFyoj2YmQOoYgVcWJa5o3F9Xfqp1IVk1I4g8faTITJQbHG7UQ agXp12fEz9PkCJkqHbgHEjueaPC7eX1P6qGzsTnMbCmIAmqpHNB08aXycSK+Boni rPgmUqorlSBCcD+4WziOoZwSoI3bVZd6oDBHuXQpf+e/Wp8nhBsV7FU4I9nsxAYu lLtNw8UIOq40kb+brG9rVXnGpsxLk9Lf9Q6XgqxzxhNVojzas+W5AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT3RjPj adQeaDaPWMnMSyBpeQ4RqDAfBgNVHSMEGDAWgBT3RjPjadQeaDaPWMnMSyBpeQ4R qDANBgkqhkiG9w0BAQsFAAOCAQEAAEAG4gfP9Lh8Tb2E4OErMqHjy/h/z6R9vD0P 8ldlMLZH8Db0yIuLnJoeQB9lrS4LJXiwb82jA830AV5vWW3c2oupYFv9v7vzCTk9 nhvW2MLDcSsuyd+2Y8kZdDX+ZnSWak165h1xmHQZB8bq6hZqafYq4R5yDmoVwsdK e488RVEyaKK0ozaI2kN6ilSvt5h69cf//T9T1D0ip7hI2XoCnWpAdCaALC/AJP4x p90jOJo6vmB8TgEn9yC2oKNz7eUgWgn9Id6RA6YErhWcTAz40S9zj2QkXmprpN2Z LHzJx5JQrfnVO71tMYaUaOF5cVavo4yjX45abFwq526XMauCHg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-17T18:33:58Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-17T18:33:58Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-17T18:40:26Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8167" uid: 95adec9f-559b-4a55-80a5-d8aec045885c - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-17T18:34:01Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"c788b6e5-113e-46f6-b55a-f67f1b110a7c"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T18:34:01Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c788b6e5-113e-46f6-b55a-f67f1b110a7c resourceVersion: "2312" uid: 564e25da-159a-4969-aa9f-7af808f909ef kind: ConfigMapList metadata: resourceVersion: "30638"