--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-17T17:51:43Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"310e09de-61b4-4b09-af9b-bf1cac6f8a32"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T17:51:43Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 310e09de-61b4-4b09-af9b-bf1cac6f8a32 resourceVersion: "2566" uid: 29d0152a-f930-4309-a49a-5f15583c7ab6 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-17T17:51:43Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-17T17:51:43Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2561" uid: 03fc3fbf-4f9f-4552-b865-5773df3d6065 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-17T17:51:43Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"310e09de-61b4-4b09-af9b-bf1cac6f8a32"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T17:51:43Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 310e09de-61b4-4b09-af9b-bf1cac6f8a32 resourceVersion: "2559" uid: c5df76f1-1734-434b-ae98-118532caa670 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIZ4KGK+L0VFkwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNzE3NDgxNFoX DTM2MDkxNDE3NDgxNFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljL0frmjgLkL MUDMmXzksp2ZHGjmlC3VYCFGZyagZEr0we3W6aZl+rDa8Jgygs4nOmu4qUZTINTp KQWgcTRTlqydn/nzJCpEgRTKCoWxWPNKVfh7daBTiLn6wC2e8WKJGsTFkL61CN0o 6qyh7vZgX0xTnZIy8qbtSXs+PDhHtEBp8fJA/IsNdVPWql1Wq6VFnRhy5f5AvmTU Eadf/fg0Q283rS2+qztuSCACma529yRxsaMl6QJnEksXEpLjrl0h5jI7wQT+NeeJ x2VOyF0q54D/wNvwAdYKTnWXtuNSHsQ0XOh1AvuYrozpTWg6m4f7IqFZRgoFW5kQ /6m8qibpdQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAPnFlNz/5uuBo3L55PsqVuoL+wkOIqNJ4POApRwiTm1WwePVW 2YE/OJc+EqTi+yZBBIQRdoYaVncKJBFb04BQLDANBgkqhkiG9w0BAQsFAAOCAQEA D4U0ODDlkZu6kWYP00N6QvCZ1yZVyUD+Ue4dzPzFpyb71Uc69Oqy8vm466/XBOX3 RD9pVp21xHeemgddnNGq4s4dPO9a3UQzTg7diFgwG57eDr4aQI16TG80Pf4iaTwo Leh62sqMbMS+gLAaOStaSfjfs0xF4R9M/Ibhuzi08sTnGPavgBW8ZcVC2tZcasBi l+496OPXUrsgZ6RM7z+IaYMlAZj6jzJFLEYa9D5ntxlfMwbkoGZkkmqug/Sp2Geh 3orsWxs0mQgLJhBifgNSAfm0c7dPfUUuoysKv53l8Nq02WcFWZwWRBefFXUCOI4w cFnTpUAvYFaxvfN6Cv5R+Q== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIWAyoHTod6aMwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNzE3NDg0OVoX DTI3MDkxNzE3NDg0OVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALFEYFGg6PD80gK6KzRkjaZz/Wr70aVxJayC4V6qUa5hp+dj/ygBil5pton73XCG jzPME8d7FwiDxo3RCFfZaGqBqI6m2uJ0Q5PZc7U5d7jUr1ERuEvarkFb5bfOBjLM ypIo1a9D7MSHkGTdBxV+P44i9u+/U98TI9j/PD8LdGVKAgvWI0e7iM0IhfJ4Jk6X qSzkN63XyA61pn1JUUfpurmLvtj2nd4yONdHs2vW248k63tjmAfF9sUuD/axccLO hb1Aa0aWRef6oot4DjDq/37tBPjzZLsfIuxL4UIhqAlMxkbB2828Lv6OGgEoMfl8 0DwlU9s7hEGhHIiKRwRTr6ECAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAkSvuhGUX8/y9Slc4l1YCgcZBFVBf5aKQLWfN+SwQ0uP91SXCDnUgImqp 36HJvJpZHV4YiD5g5YZqOgFEI+eD7zBLBgNVHSMERDBCgEA+cWU3P/m64Gjcvnk+ ypW6gv7CQ4io0ng84ClHCJObVbB49VbZgT84lz4SpOL7JkEEhBF2hhpWdwokEVvT gFAsMEsGA1UdEQREMEKCQCouYXBwcy44ZDI4NDk4NS0yOGJiLTRhMzYtYmEwNi0x ODUzODQwMjc0MWUucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAH7AyqpxZR9cPOlqU4nVGxc7KZVXZq8FvnPcnmWOYlutSb+eKmgE9aQsjKHx eD0xltai2xhVKFkYjvCZyIpbYy7xZabHqWG6mZDPtHm9TKO363tbPUU2vZ3ui6xt PdLadETLBhr4mgbfAOcsPzEfDC+TvF+BRJbpzhPTU2jSWA7ImMGarweMGkfigqBP gtwuw3Bl5BfLynb9mBjOoj4JoiG+6S5rDq5KISZESAUNhRYFJTpw5n12+6qzLJSX 1/KFR5+L/3sq2BtQYjZ9B35G5hO8STw1tKd0L+xyIX8QOp3Gk2fujitClFmi2wrX QpxOJTlcX7dZpE3cR9JEU+5zCKk= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-17T17:52:05Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-17T17:52:05Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3091" uid: 522b1cfc-1c88-40d5-991f-a2dce708706e - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-17T17:51:43Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"310e09de-61b4-4b09-af9b-bf1cac6f8a32"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T17:51:43Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 310e09de-61b4-4b09-af9b-bf1cac6f8a32 resourceVersion: "2575" uid: 397b166c-d956-48d1-8462-51edb443a695 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIfgSMoEenJOAwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTY2Nzg1OTAe Fw0yNjA5MTcxNzU3MzhaFw0yODExMTUxNzU3MzlaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk2Njc4NTkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/8lQrpvz/u4GFQ1PM+lFUZUUma8uhKVsA mIHXnmTQRbsYatLr4g9aEip+7ws5N0XbjCjlKX/QOLTl6u92yyKsM2nJKt9Mt0ER 12Z+2HoSf8Mc51Q9h8u5Og4nnYKQh4tRGq2+CxPxCZ9qFsvPqSpzWRcWD/SCHJ+2 xDv4u1YQOJZobY3kJ38LzSZ9IV1ZXGDDIIyRsps01AbsHzxJpfTluyd1ndUUC1tt xGEyJ6K2llxKhZB2N7upKwLBvPCywu5/yLOqPNlPIMnYfZrnv0TO2q47iGv13M21 rYQUsAsy2gZKSIcRxsm99F4V4MTrCSn+cKSlEBewyqjUTPss5YpRAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+BWFX Uq/QiHuLCFJ26bUFau1NHTAfBgNVHSMEGDAWgBQ+BWFXUq/QiHuLCFJ26bUFau1N HTANBgkqhkiG9w0BAQsFAAOCAQEAtcIGFPhMJtzMHo0XldMI09EoMp8TGNqtrD7K qvz1mSfvy3qF85cL/22Z6aOjKsKLRdFqUpQfPS9OaQs/LEnKmKyaavb6Mh7oOSCV N0bMf8kpEjdYU2eDveep5fj2KIU4rg1SKtyUesTU8wpbYxbYc6JfiqsJOEKHXbzK k1AZ9uoAhChaCKibY6BA/BXTOp/Wp9+N2jCEKOX81Eupqj7JCLORu6h01RE0nZwP U8X+iA3AjV1+TG5nrBUMSPiw1rqijpNNkwkGOJi15UqLviFeb52p/oWvKlwn0ibq z7mpvQ1ntICge7sd8bfbpjvT+Xk6m9q4TLArv+s67UyuQ570kw== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-17T18:04:35Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-17T18:04:35Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "13565" uid: 9274f868-eaee-4923-8d0c-7eeb5360f089 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIfgSMoEenJOAwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTY2Nzg1OTAe Fw0yNjA5MTcxNzU3MzhaFw0yODExMTUxNzU3MzlaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk2Njc4NTkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/8lQrpvz/u4GFQ1PM+lFUZUUma8uhKVsA mIHXnmTQRbsYatLr4g9aEip+7ws5N0XbjCjlKX/QOLTl6u92yyKsM2nJKt9Mt0ER 12Z+2HoSf8Mc51Q9h8u5Og4nnYKQh4tRGq2+CxPxCZ9qFsvPqSpzWRcWD/SCHJ+2 xDv4u1YQOJZobY3kJ38LzSZ9IV1ZXGDDIIyRsps01AbsHzxJpfTluyd1ndUUC1tt xGEyJ6K2llxKhZB2N7upKwLBvPCywu5/yLOqPNlPIMnYfZrnv0TO2q47iGv13M21 rYQUsAsy2gZKSIcRxsm99F4V4MTrCSn+cKSlEBewyqjUTPss5YpRAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+BWFX Uq/QiHuLCFJ26bUFau1NHTAfBgNVHSMEGDAWgBQ+BWFXUq/QiHuLCFJ26bUFau1N HTANBgkqhkiG9w0BAQsFAAOCAQEAtcIGFPhMJtzMHo0XldMI09EoMp8TGNqtrD7K qvz1mSfvy3qF85cL/22Z6aOjKsKLRdFqUpQfPS9OaQs/LEnKmKyaavb6Mh7oOSCV N0bMf8kpEjdYU2eDveep5fj2KIU4rg1SKtyUesTU8wpbYxbYc6JfiqsJOEKHXbzK k1AZ9uoAhChaCKibY6BA/BXTOp/Wp9+N2jCEKOX81Eupqj7JCLORu6h01RE0nZwP U8X+iA3AjV1+TG5nrBUMSPiw1rqijpNNkwkGOJi15UqLviFeb52p/oWvKlwn0ibq z7mpvQ1ntICge7sd8bfbpjvT+Xk6m9q4TLArv+s67UyuQ570kw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-17T17:52:05Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-17T17:52:05Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-17T17:57:51Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8151" uid: 26053931-1109-4fc6-a3e0-5971077d2cf1 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-17T17:51:43Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"310e09de-61b4-4b09-af9b-bf1cac6f8a32"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T17:51:43Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 310e09de-61b4-4b09-af9b-bf1cac6f8a32 resourceVersion: "2570" uid: 1372c405-9ad6-4cdb-b31a-87a93210ad51 kind: ConfigMapList metadata: resourceVersion: "34270"