--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T17:21:07Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"d8bfd56f-971b-4460-b795-98e5d3af5381"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T17:21:07Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: d8bfd56f-971b-4460-b795-98e5d3af5381 resourceVersion: "2453" uid: cf91f67a-646f-4b30-91bd-131723ca06f8 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T17:21:07Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-16T17:21:07Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2449" uid: 6644db4b-926b-4416-91a9-230720e880bd - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T17:21:07Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"d8bfd56f-971b-4460-b795-98e5d3af5381"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T17:21:07Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: d8bfd56f-971b-4460-b795-98e5d3af5381 resourceVersion: "2444" uid: bb7489bb-3220-494c-ad85-abb254aabf52 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIHoJh8Y6d2EgwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjE3MTYxMVoX DTM2MDkxMzE3MTYxMVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltorOqpB3r2i ertuu3gWpFmzHq053bX4kKgUnJs83kZlZfC02J95gV/VHV+5jnZ21wEJPbRtwF3h ipdsuBEYm1KP84njzZ04AQ+XmtD3TdSTesbAdwVn7omm0FPTHdKaFsk4pLLCsX8g bHJF+Amy9Qu6igi9P/izXL3tsVh2ak252x+DTXC174HUk+Mh72iQvgtJ/nwcMD1u 5brAPfgAMupzzrw1KWt/lF1HE+tHcJ+0+cq+u5U0U599nFExwQZIuBB7S3LUFLdC OUeAUxrrK6TzVFPfw7jOCAAvyybmBRjy32Q3FpcO96WPI7TT70Q8IRsFqFnTNv13 jMB4/C02YwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRApyp5l9Bhey2uG6b/NRnD4NVrpTH2fLm7oD42e0FyxjrGdswv wAb04PLxI5askV4GmPlfHfE+xfgSHw2mKWqwDTANBgkqhkiG9w0BAQsFAAOCAQEA D8AEq2BQH/psVnCySmmYEy8ytAFonGq2rx9bSsllnyuWd3K9Lk6EusfeLslE0s44 Gseal8kDRmM+Vc5iO4C7HrQFvxaohW6tIxBRW9C54QvJ1/IGbfAxmoPI/TBl1/rA 1jw1p2f9hOSvqF1KPsL87efI0Ua7s3U9RWLD92B6AOm7dWZRDbr6g0aRs8I/1IxT bvf26do3QOO7Uo3ZCy1QBklGYElRES0jcUBh9QCaOZhwAwYIdO7DL9fOs7Y2rUm2 0vpZSxURfFgtr9cloHRQCBnsuEiF6zLr6/Y/i15c2OP5E1+RxqGMzGp7JFl8gVze yWxEgS21hH45TUB+H785Rg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIWKYEwUUqNQ4wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjE3MTgwMFoX DTI3MDkxNjE3MTgwMFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKk56MqMbGyg8QNnU33Kbtd3gvjQmegPtRPKrN7EBX9JMqXuOEcV8OCB/Uzj4XSu urrkE+QIiqP/jCK15uTmVU8usahxcA6gID2gucWV1B+F3DhGLy5B/B7HoKHyahDX sPBb+BfboK60fa8608OcId1hEngjwuJ5M07Ltu+swR/WfhlEKRU2G+GdHEYKg2sc TnqPYfIgfTn8YZ7PGHPHuQsRhogSzU8pRUXUkTUTPzMgz7hi4TGYBtHo2gXztoL9 ynC9zwrs3bEzmmndVI8QxWowIXlFzL++JSt7ZKTLcfJzbk0uORdtXqTvBZWqktqp WpIeWeGvVFWtV1PH7T1jqBkCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAwG7e4O0WTkuN8RKq8pxFJC3C2RwdoaBIE188vLZnqFTTv8YBFFYJ9deW T7nGC2KddTXR6UEYcHscaSfG4fkkYTBLBgNVHSMERDBCgECnKnmX0GF7La4bpv81 GcPg1WulMfZ8ubugPjZ7QXLGOsZ2zC/ABvTg8vEjlqyRXgaY+V8d8T7F+BIfDaYp arANMEsGA1UdEQREMEKCQCouYXBwcy4xNGQyYWRjOS0zN2Q1LTQ3MWUtYmI2ZC02 Y2Q3MDk3Mzk4MTAucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBACrwsHpBT5IECwzkYjPtJ4fZqpp5M8nJ0PdL0Co8kXKPidSwCZ4qZ1e821m7 8Bd8/IQBBntD8676sb4c1qUbO4FJturIPuzbsGKyTEyL+SlBhd2hYc/gRzHf7r9l wBNTGRH71s2rlErNar7KxEhgRcPpMmAPesb0fJ9tQRNwlkgujI4istAThejEGZi4 P47iap6KEcIDsDojTuW1WCiIzSFhpHAGd3jbLG9Zc5MapWznj6rvQkLYlLoOpwVN zD9LWDggrzo4UtrdKZOEoQ+h+NJiFPBFwwaR1KYI6lMGuJ2YY8O6neJPaQ6/vDus g489nndy1YhuTdcEvvyQirbEowE= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-16T17:21:21Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-16T17:21:21Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4108" uid: b4494f2e-0a15-468e-931d-0bf972da1faa - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T17:21:07Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"d8bfd56f-971b-4460-b795-98e5d3af5381"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T17:21:07Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: d8bfd56f-971b-4460-b795-98e5d3af5381 resourceVersion: "2458" uid: b7500718-0d18-4c87-8883-c71747e4aee1 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIAldrWxAoElkwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTU3OTYxNDAe Fw0yNjA5MTYxNzI2NTNaFw0yODExMTQxNzI2NTRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1Nzk2MTQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJjdV7gNDn1I/WLYnv68K8Q5sNn4YZMF2/ kloWFaQKi1JZIptZYaB0mXDdX3J6H6kSx2CPYo+uU1ZjvG7Ecek9GxnnUq1kXh8P h5zdEdBJC+u9BuQjPbJ58q6ksRJvC0IFPqtTsuf+3BNh4pLcKPaYLfokqHhwNAuV 0hSgs45cUGsjVIZvP2ya+tjwMQ9MuiRSsj+zoDhhsoMdOONt/LjrCzrDSHy8WaAy zuS/RWJwFwLGGHRuj0In0GwcQQm7TO+BJ+QuOfw2Qxq6Wpr9ejekBeVCYEZIa2Al d311h1eM5wSqd+QiXARj74Pin/hwlkK4ehuUl+QkmiiN8mVyGSP3AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRMsXeV +Vev+iy5jhfLP3biUK1xLDAfBgNVHSMEGDAWgBRMsXeV+Vev+iy5jhfLP3biUK1x LDANBgkqhkiG9w0BAQsFAAOCAQEAZsOspp/khUT9hH1L4AGzgx+SrxRCSUL4Si1m GKdCBhKtR8iw1QkQZ8D30JvNYdcgSPrmi2KsANI+KqdPd36oN8BxAST6V3Pad+XQ 1oGlqK+BKG+JYy4Dkr/mz3wiPTscjpwuJ4m/6/Ai14Yzchf6emtLOjXXwLxWij76 2NxgMgyKytcCwXy7E1a8qprVoBRLKB1mOJ2QEn9i7RaKH9pcTW3xV8nGfH1d54Ca sroYL5pGM+a6g2I7q6fOnNdcmVfq2s4ezuRdOQ60XgAC71rsQIF9hN9kPFkdWz73 VQYUBLe16rTWTfQjlvEXVnthhNcdZvM2FV+rv2cud8np5kFkvQ== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-16T17:36:21Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-16T17:36:21Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14343" uid: b72a5ffa-5c3d-4a45-8fe2-95e570937e51 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIAldrWxAoElkwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTU3OTYxNDAe Fw0yNjA5MTYxNzI2NTNaFw0yODExMTQxNzI2NTRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1Nzk2MTQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJjdV7gNDn1I/WLYnv68K8Q5sNn4YZMF2/ kloWFaQKi1JZIptZYaB0mXDdX3J6H6kSx2CPYo+uU1ZjvG7Ecek9GxnnUq1kXh8P h5zdEdBJC+u9BuQjPbJ58q6ksRJvC0IFPqtTsuf+3BNh4pLcKPaYLfokqHhwNAuV 0hSgs45cUGsjVIZvP2ya+tjwMQ9MuiRSsj+zoDhhsoMdOONt/LjrCzrDSHy8WaAy zuS/RWJwFwLGGHRuj0In0GwcQQm7TO+BJ+QuOfw2Qxq6Wpr9ejekBeVCYEZIa2Al d311h1eM5wSqd+QiXARj74Pin/hwlkK4ehuUl+QkmiiN8mVyGSP3AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRMsXeV +Vev+iy5jhfLP3biUK1xLDAfBgNVHSMEGDAWgBRMsXeV+Vev+iy5jhfLP3biUK1x LDANBgkqhkiG9w0BAQsFAAOCAQEAZsOspp/khUT9hH1L4AGzgx+SrxRCSUL4Si1m GKdCBhKtR8iw1QkQZ8D30JvNYdcgSPrmi2KsANI+KqdPd36oN8BxAST6V3Pad+XQ 1oGlqK+BKG+JYy4Dkr/mz3wiPTscjpwuJ4m/6/Ai14Yzchf6emtLOjXXwLxWij76 2NxgMgyKytcCwXy7E1a8qprVoBRLKB1mOJ2QEn9i7RaKH9pcTW3xV8nGfH1d54Ca sroYL5pGM+a6g2I7q6fOnNdcmVfq2s4ezuRdOQ60XgAC71rsQIF9hN9kPFkdWz73 VQYUBLe16rTWTfQjlvEXVnthhNcdZvM2FV+rv2cud8np5kFkvQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-16T17:21:20Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-16T17:21:20Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-16T17:27:09Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8219" uid: 5e84a1ae-6a04-48d6-9ac2-298bc749771e - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T17:21:07Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"d8bfd56f-971b-4460-b795-98e5d3af5381"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T17:21:07Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: d8bfd56f-971b-4460-b795-98e5d3af5381 resourceVersion: "2456" uid: 042351db-b478-4f93-8569-bdb6313b2052 kind: ConfigMapList metadata: resourceVersion: "25673"