---
apiVersion: v1
items:
- apiVersion: v1
  data:
    cnibincopy.sh: |-
      #!/bin/bash
      set -e

      function log()
      {
          echo "$(date --iso-8601=seconds) [cnibincopy] ${1}"
      }

      DESTINATION_DIRECTORY=/host/opt/cni/bin/

      # Perform validation of usage
      if [ -z "$SOURCE_DIRECTORY" ]; then
        log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable"
        exit 1
      fi

      if [ ! -d "$DESTINATION_DIRECTORY" ]; then
        log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist"
        exit 1
      fi

      sourcedir="${SOURCE_DIRECTORY}"
      log "Copying binaries from ${sourcedir}"

      # Use a subdirectory called "upgrade" so we can atomically move fully copied files.
      # We now use --remove-destination after running into an issue with -f not working over symlinks
      UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen)
      rm -Rf $UPGRADE_DIRECTORY
      mkdir -p $UPGRADE_DIRECTORY
      find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \;
      if [ $? -eq 0 ]; then
        log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY"
      else
        log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/
      if [ $? -eq 0 ]; then
        log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
      else
        log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      rm -Rf $UPGRADE_DIRECTORY
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        This is a script used to copy CNI binaries based on host OS
      release.openshift.io/version: 4.21.33
    creationTimestamp: "2026-09-15T16:20:01Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:cnibincopy.sh: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"bfb57402-e593-462a-bc75-9ab4d04666ab"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-15T16:20:01Z"
    name: cni-copy-resources
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: bfb57402-e593-462a-bc75-9ab4d04666ab
    resourceVersion: "3520"
    uid: 9ee2863e-de91-4855-8e6f-e7ccbd95ca1a
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.33
    creationTimestamp: "2026-09-15T16:20:01Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
      manager: network-operator
      operation: Update
      time: "2026-09-15T16:20:01Z"
    name: cni-sysctl-allowlist
    namespace: openshift-multus
    resourceVersion: "3497"
    uid: 04e54b23-54f3-4a19-883a-eefc1b68623f
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.33
    creationTimestamp: "2026-09-15T16:20:01Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"bfb57402-e593-462a-bc75-9ab4d04666ab"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-15T16:20:01Z"
    name: default-cni-sysctl-allowlist
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: bfb57402-e593-462a-bc75-9ab4d04666ab
    resourceVersion: "3495"
    uid: 3a3b3cdc-7d6f-426c-8823-8beafc539dc4
- apiVersion: v1
  data:
    ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDPDCCAiSgAwIBAgIIV9kG9L7mSJUwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNTE2MTc0MVoX
      DTM2MDkxMjE2MTc0MVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy
      b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGxnjtYNkr4c
      V7rAWqVI5aWt08gHcVzqPUNvdTMklO7tNmJ6CdD5NcJFtwr3MgV+MrQjVp53slom
      FyFPaAG139ylLCWfwmMNIfA4KFQSF3hWfJkpPdIcOfTh8UBPUGqm+qffUcfDhMQP
      Af+zjfKUXI2A3N7hSSvlAoJGlsvmwBghl40yRgtv1O9Z+Ii20roZ5Sg84DVCo6ro
      c8AmgNbT0RAqqXoHnZh8B/SLOKiHiHyovdnZFWB4zZu0L2RJzcPW7xnKnXVmYmPp
      fMo041wUcQr4Ttx139VlziHLQgiu5RmRioE2/zlI9Bb9jKPfBJ+/pVx1iVvZ0beF
      LG0m1DsbSwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB
      /zBJBgNVHQ4EQgRA9B5VFC5qZa3qBCcV+i26kyk34Qhwu/n2/AidrFJuAYy3cXd2
      oeaSO1HAn1xb/BvuQjho0vlNedBilMfI2daoqDANBgkqhkiG9w0BAQsFAAOCAQEA
      uCLntuW3EB8hS6RTRFqpx/tzToMmxf9msT67e778y3fY4VVP2nWd1uuk/Z/8U3W8
      Nfl3X5dyOm9k1etiA3cIv245QOkShlwuvJL57sJ+6fzdv47rK9FQK9hqc4QwtnSk
      neQfY11YULQyoO21X3Q03H69vl2Yhxy7XQR+knM/kKEq+UPRadRIwaMzhUWzW2xP
      S5DrxjKz+85PS05bZ2pu52qP+Busjj41cr8F3JFD2xFH0ckNXI/jCv/60MH6PhLf
      EtzqIXbaTwoNb2FyIYI4Rk0LICN0DsXfUuvw1OpdKi0VjxOkDUjJTS861NucP+gu
      g02ti9Tnk9CPQAapM9IByQ==
      -----END CERTIFICATE-----
      -----BEGIN CERTIFICATE-----
      MIIEADCCAuigAwIBAgIIYpmy6mHAhqswDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNTE2MTgwOVoX
      DTI3MDkxNTE2MTgwOVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv
      cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
      ALpLwTpePm6yypf4+w22gqU4DB/c9QldnRpqJHCoQqdHZ7YvW0TyrHXLnLmmnLxi
      bsxfB5U1IhRRfIHz/B1lOTwVVCIX+Rm/0+LAGyT18VPG6T5D08hx8ylP0NnsK2eO
      +RCiU9jk7pmQ7gxE1rEv8dsBu6DhVmaaikRfU9gSBipjbSuSJdJ4s3udteb2OQzi
      9hK3O8VEP+WjzsYnEoXHeoowKWTFQhBERu2YFjO7L7Us/uLD5qseGxAKbo55Mk51
      yzslYwSUGGKKfTNSmqDOlhzlXqE/8PTc3+fWXJQzvBzSChmj+8/QwpJdEMF8pmgA
      jwkrx1rQYyFW3Dk9i9D4BxUCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd
      BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV
      HQ4EQgRA5csgYS/dgIVNhM3J2YAytVr+9vTUDm6l1+9HA3TLhNVegWGJd5jQ4veb
      Q16yppasBl+41RCdN9Sh69BTgEbyYTBLBgNVHSMERDBCgED0HlUULmplreoEJxX6
      LbqTKTfhCHC7+fb8CJ2sUm4BjLdxd3ah5pI7UcCfXFv8G+5COGjS+U150GKUx8jZ
      1qioMEsGA1UdEQREMEKCQCouYXBwcy42OGE1ZWViYS0xZWU4LTQ5ODQtODRmMy1l
      OWNjNGE5MjczNzUucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD
      ggEBAJ+1ishEKGf4mZxxUY5Iuki9sXv0JM1d6gVjTgPmUL4kz410vxM6MVVS6t3u
      4OH2X08isS7ko6GWvO9KrsSYiS3MQ1wIhW65yQTlcfT7wnHLYOd4G88VcbC9pIeF
      flXbrzLO55K4w4HNI4GmiJvnPViBx8hBG2ZyhimPHNjPZRUHy3RErkltN3JKqMc9
      sEQI7H/fBGRbqRfH715h8U9rqkbPWcDr6ot3cbkBe5CLlxJIGM/PiWNhviVW9dr4
      cjJTia8OdNUXvZYC7HeWg48a6gEuQFfjm28Ma8j4VTeZr9sWYH3ueSYVcbD8Dlv8
      Tr5xLfD5gGYszyQLjBL8nJpswAE=
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: Contains a CA bundle that can be used to verify the
        kube-apiserver when using internal endpoints such as the internal service
        IP or kubernetes.default.svc. No other usage is guaranteed across distributions
        of Kubernetes clusters.
    creationTimestamp: "2026-09-15T16:19:58Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:ca.crt: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-15T16:21:17Z"
    name: kube-root-ca.crt
    namespace: openshift-multus
    resourceVersion: "4548"
    uid: 49d1869b-c7f6-4ab3-a41b-892b5e84fc8d
- apiVersion: v1
  data:
    daemon-config.json: |
      {
          "cniVersion": "0.3.1",
          "chrootDir": "/hostroot",
          "logToStderr": true,
          "logLevel": "verbose",
          "binDir": "/var/lib/cni/bin",

          "perNodeCertificate": {
            "enabled": true,
            "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig",
            "certDir": "/etc/cni/multus/certs",
            "certDuration": "24h"
          },

          "cniConfigDir": "/host/etc/cni/net.d",
          "multusConfigFile": "auto",
          "multusAutoconfigDir": "/host/run/multus/cni/net.d",
          "namespaceIsolation": true,
          "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv",
          "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf",
          "daemonSocketDir": "/run/multus/socket",
          "socketDir": "/host/run/multus/socket",
          "auxiliaryCNIChainName": "vendor-cni-chain"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-09-15T16:20:01Z"
    labels:
      app: multus
      tier: node
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:daemon-config.json: {}
        f:metadata:
          f:labels:
            f:app: {}
            f:tier: {}
          f:ownerReferences:
            k:{"uid":"bfb57402-e593-462a-bc75-9ab4d04666ab"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-15T16:20:01Z"
    name: multus-daemon-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: bfb57402-e593-462a-bc75-9ab4d04666ab
    resourceVersion: "3566"
    uid: b8615fe8-7bd7-4a20-aec3-329c47350674
- apiVersion: v1
  data:
    service-ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDUTCCAjmgAwIBAgIIcZwNGzS197cwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE
      Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTQ4OTYxMDAe
      Fw0yNjA5MTUxNjI2NDlaFw0yODExMTMxNjI2NTBaMDYxNDAyBgNVBAMMK29wZW5z
      aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk0ODk2MTAwggEiMA0GCSqG
      SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8wTfCpRPWGBqO9mGpMJlx7AGFNZOlcFpe
      950fn1zr5gn5JWRTCmBzKaVkM43Yloht2Rao1UTuUUYUqDNOoD/C94D/itg4CTlC
      CfTl2YzlBMEM0KzQqRhDgOYPMKaUGVSSs1GOQDD7Z20pAkUio1Y/xw5BwSUdF0rh
      M/sCaK9aVUQtA2fHhFF2aSK5y9cm6g95dTsx0scRi+zVU9TL91+ildzym+7ZOEch
      lyqgtb5++0wVpNC0eVhCfqnL7Otr5T8j7rJgIK7bkbENJcp3CDwNt1h6Q1LDHHxF
      uHcxx7ZtYVaTywtGQz60Q7drshliAk5pkk6/w6ZtR7wrrh2WzjQJAgMBAAGjYzBh
      MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQM/rQv
      RLWC2YMljKmrIziYOdHzijAfBgNVHSMEGDAWgBQM/rQvRLWC2YMljKmrIziYOdHz
      ijANBgkqhkiG9w0BAQsFAAOCAQEAivDYpNKB4TI1nXZiRzrptOG5qLUjo7Q7dzdf
      snLV8CBJHDIXeCZDtme6ZeKKBrg3XvpQ3KtrLX5xBzjsQREBD8SZyvqWwlnKdr/F
      uDux1Gn8xgQEPXZCmlVbF2gF19sHLETAvNN3vVnBlAZKSlHZ7aAa/GLUrZwZVGX3
      HZ7ewj0Eay+zOTaB6LXu1dzkZdgHbtSJTqiYE3Chl+NW1EtsFPHTAqLMlO/UHufG
      O8SXmWpyt83rlDbPJKDUT/m/UpJJdjdqkg7BiuZ8DW2MUL8LxToRLxZhRn/EaMh/
      hyuMNHwbKzCfjHpoz5PdOgEBAzBS2x3aZPtKi62GFPXMLcwFkA==
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      service.beta.openshift.io/inject-cabundle: "true"
    creationTimestamp: "2026-09-15T16:19:58Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data: {}
        f:metadata:
          f:annotations:
            .: {}
            f:service.beta.openshift.io/inject-cabundle: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-15T16:19:58Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:service-ca.crt: {}
      manager: service-ca-operator
      operation: Update
      time: "2026-09-15T16:27:02Z"
    name: openshift-service-ca.crt
    namespace: openshift-multus
    resourceVersion: "8441"
    uid: 3432d250-58fb-4f5a-8816-6a230b52f0f8
- apiVersion: v1
  data:
    whereabouts.conf: |
      {
        "datastore": "kubernetes",
        "kubernetes": {
          "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig"
        },
        "reconciler_cron_expression": "30 4 * * *",
        "log_level": "verbose",
        "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-09-15T16:20:01Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:whereabouts.conf: {}
        f:metadata:
          f:ownerReferences:
            k:{"uid":"bfb57402-e593-462a-bc75-9ab4d04666ab"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-15T16:20:01Z"
    name: whereabouts-flatfile-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: bfb57402-e593-462a-bc75-9ab4d04666ab
    resourceVersion: "3544"
    uid: 702ae691-d39c-41cb-b64b-0b84a67b7026
kind: ConfigMapList
metadata:
  resourceVersion: "24742"