--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T19:35:45Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"732cb805-eb89-43e4-b852-9414b78b35e0"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T19:35:45Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 732cb805-eb89-43e4-b852-9414b78b35e0 resourceVersion: "2499" uid: 302ef9e6-19d6-4a34-8dea-7fc6eedd7cb1 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T19:35:45Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-16T19:35:45Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2495" uid: 59793eec-c3cb-4ea5-b8eb-50a127fc1da8 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T19:35:45Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"732cb805-eb89-43e4-b852-9414b78b35e0"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T19:35:45Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 732cb805-eb89-43e4-b852-9414b78b35e0 resourceVersion: "2493" uid: b345e8a8-5832-43c8-aacd-37642af035e6 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIXmyZ1ouvSk0wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjE5MzA1OVoX DTM2MDkxMzE5MzA1OVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ooDz7yPhVdB 2H/D/dB4IC1JYNxB4NIRKqrR82hMMSL9eq5sBIna3yEEy0P2MAA/a0n94ajPbPLT uh75M5TQvmfT2e/4PAZlqSwC7lvl+d52Z6/7Ub41IXv6ecJH26NFcgfn0CvnheJC BUyihLMzLvU5E5hSs8DFGGokB2jhBiGUZdKXoFIuu1dPEQkY8z1tLV9nciICMcR4 +DaPD+zxf+BaKTPpxpYnpluKnwtW6tNl57CpefoXxg3zDGz9AKNI1SEwoJqOINH0 IMerGpdIqvLAHZoj+x0R2KWORdZqFHZog7ykUJgzS96TG8hnQZQLuX7W9/Df1AwN KpgzGWgymQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAA6w5DuPrZDwPiaTVafeA0T4BjRge92WxhHmGQ2bwQHXDjcgu zjwlz3eIHUFipA6ykLO8/WlzZW5/MPXu2vGBWTANBgkqhkiG9w0BAQsFAAOCAQEA KibEtn9nGnU9TvyaVTbtfm+nVjTxy5LEvyTmMBwvaCDtsUGD8oH7aBkD4p0yuoRd Yr1j2sELydKF5rztS4BsgE+ceC67FTBVezwBVIyEPeASgEyNYQuzjjtoLN2k4JSP NvkpSwWZuNnGblvri9pCPzqlktrebHR1lntzmZsscuW9GxanGcRM6tG/7nbkMXcd Uxqq06JdvLLh6ZlmiLjkc6NwfkgtW82YOQgH8YPQQu6Xun6pHHNO7VZcwi8d/ker nVw/sfYqZSC9aGbRS8AiS/Afcwz0j9JSyh8U+qYTodWiI7+Fj0a6Ldt2YVCftxjb I7T3VYgozH4fQceFqMKGyA== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIamWtkvLEk0AwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjE5MzE0NloX DTI3MDkxNjE5MzE0NlowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANGca5Coj50jnz+KL9h4ERi3q9GgHTP8VyJcyZC9ESUaYJDNm0X4yWLgbzZvHnIK ls/KoU8+tgpIulc4lrLqU7OCIq88zhBSMKKxuA+Mz9q45H6YfwsnU2B8fhyJ9lJS qvih2mqlGGx1F/caDUO2GFZBMsQF/0mybOWWMz5gNQYhLyIAj+S6I/lFeh47NRfp /FQ7zrWaZYNSQX0Ra5AM8zLw3e/MGnQb5cBlDG/sKdNLRWjqTAjCm54W3NEyrePb KiN39h+ICBh2rszOuXA2PwDJxTQWq/QcdjfRXk/XpsZ/kS+3MA5+SzVRuU98dAnz Aood0Codju86CJgLuscb98UCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAhRWlNuqXr5DoxUy8t0ZKcer1rKfc5TJgE0RZTIj7eEWHUuwFLoT8DSuf TFeo+rJnZu1T0LQLGgi/KoqV2vf2bTBLBgNVHSMERDBCgEADrDkO4+tkPA+JpNVp 94DRPgGNGB73ZbGEeYZDZvBAdcONyC7OPCXPd4gdQWKkDrKQs7z9aXNlbn8w9e7a 8YFZMEsGA1UdEQREMEKCQCouYXBwcy44MDJkYzQ3ZS04MTc4LTQ2ZmUtOGI5My00 ZGY3ZWIzNGYzNWMucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAM19MTpdJRMBDbn55iFfl+G3oDX7WucZMSJM7UWdC2H8BxGDp4mHUZeQOp44 V+z2WBY1P65DPNzWyvCzLImGd3r/wDGvD+/9R6qQc6n6Nd+Skyf8M0+9vqobnr7W guPgrIcXjvtmCDjCl5o2zY6zyLSfBK4HHn4xXf5ifqT5TV7lGGApqubbWB/R9BhK DqZVdX3gc/P7JNFwiSDCL1PPBpCc6VpSqKRclQVzJvvVsrJ5tj0tNhI/V5VXiPEX sAfjhfRxCh05TtFlJDkZlC5jay+UeU7BleKQAoXZ77QI3hh00nwDKt1uKgkDgU9r DlpAS3uLi8owAA7DbIdMMlKrQ5k= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-16T19:35:42Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-16T19:36:10Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3146" uid: f2ee2faa-c73d-41e9-9f86-abdd06661cac - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T19:35:45Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"732cb805-eb89-43e4-b852-9414b78b35e0"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T19:35:45Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 732cb805-eb89-43e4-b852-9414b78b35e0 resourceVersion: "2509" uid: f9f186de-119c-4a8d-a982-b9493aebbf7d - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIT8jZrt6+xW4wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTU4NzcwMzAe Fw0yNjA5MTYxOTQxNDJaFw0yODExMTQxOTQxNDNaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1ODc3MDMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbGnDqBZJkxNs68lCBRh+adIG4fcSO+j/A gcjJZLaWuoSSfa6yMJ7J2Xs98+BfoQaPTMoiPp9WCus4yYyD499/cgBfy35EKrTl fRGtgAD272zq4xL62rBF5YdB3zWiiECt3s+f/ugLYWG980cwHNdrdXCRlVFz/ndG fFzol15m/zZxpqNUxzvPDuDKopzEY4+hRF++NU7nPziWJIu8KPgX+pjPD0oQS5z8 PkAAU8SjSnYedgG/FuWQdT2tYw6jlYU4mzmziKd20DYSt9CdQhrdg1ORL9DW9q7p 7bx+KSc23dQTAPGuxW7yj1OHYQ02ykr1HZnL9Wa8YkqPjHhUmWGrAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+Di9r 0UAI7zro2Xo3S4Fn9aJ11TAfBgNVHSMEGDAWgBS+Di9r0UAI7zro2Xo3S4Fn9aJ1 1TANBgkqhkiG9w0BAQsFAAOCAQEAVgOM+a5OCSMnQwmku23QZbZt5n3Dm0Pw4Eec sWsZ8nc0VWsywy38jFopGhFvFtcdYMBX8qvethBOV4qsnH9PqSsDyDfWdkj7SWXt T/2vQQM+5RCpcWkQlGA+pINGgH0t5dEN13D3VftA6FW2U8yH7qraJwmjEbq3YuLB TDPq2Z8I042i4iSM9GcGqV5diNFe0xCd3a7kXs1H5QJ5hkYRcADgFl3fEpSqxkNu Yoc187HHg87LdJD9C/0Ayq2oHBlAKbOatSQguJsHyt3wIOvK7JJ/vxZ4lYBRHfbZ rIMtBQf8WdHHJILFP2Spf8jNmgJjixYWd2SQJX1uN8+EDZO/KQ== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-16T19:50:51Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-16T19:50:51Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "19683" uid: 6739c4bf-e5ae-44ae-bcbc-953181014da3 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIT8jZrt6+xW4wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTU4NzcwMzAe Fw0yNjA5MTYxOTQxNDJaFw0yODExMTQxOTQxNDNaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1ODc3MDMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbGnDqBZJkxNs68lCBRh+adIG4fcSO+j/A gcjJZLaWuoSSfa6yMJ7J2Xs98+BfoQaPTMoiPp9WCus4yYyD499/cgBfy35EKrTl fRGtgAD272zq4xL62rBF5YdB3zWiiECt3s+f/ugLYWG980cwHNdrdXCRlVFz/ndG fFzol15m/zZxpqNUxzvPDuDKopzEY4+hRF++NU7nPziWJIu8KPgX+pjPD0oQS5z8 PkAAU8SjSnYedgG/FuWQdT2tYw6jlYU4mzmziKd20DYSt9CdQhrdg1ORL9DW9q7p 7bx+KSc23dQTAPGuxW7yj1OHYQ02ykr1HZnL9Wa8YkqPjHhUmWGrAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+Di9r 0UAI7zro2Xo3S4Fn9aJ11TAfBgNVHSMEGDAWgBS+Di9r0UAI7zro2Xo3S4Fn9aJ1 1TANBgkqhkiG9w0BAQsFAAOCAQEAVgOM+a5OCSMnQwmku23QZbZt5n3Dm0Pw4Eec sWsZ8nc0VWsywy38jFopGhFvFtcdYMBX8qvethBOV4qsnH9PqSsDyDfWdkj7SWXt T/2vQQM+5RCpcWkQlGA+pINGgH0t5dEN13D3VftA6FW2U8yH7qraJwmjEbq3YuLB TDPq2Z8I042i4iSM9GcGqV5diNFe0xCd3a7kXs1H5QJ5hkYRcADgFl3fEpSqxkNu Yoc187HHg87LdJD9C/0Ayq2oHBlAKbOatSQguJsHyt3wIOvK7JJ/vxZ4lYBRHfbZ rIMtBQf8WdHHJILFP2Spf8jNmgJjixYWd2SQJX1uN8+EDZO/KQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-16T19:35:42Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-16T19:35:42Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-16T19:41:57Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8213" uid: a55012d1-09ab-4017-9214-e98c1a7bf9bb - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T19:35:45Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"732cb805-eb89-43e4-b852-9414b78b35e0"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T19:35:45Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 732cb805-eb89-43e4-b852-9414b78b35e0 resourceVersion: "2505" uid: c22b06f5-3efc-471a-a9f0-60a9b236b40c kind: ConfigMapList metadata: resourceVersion: "93733"