--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-18T21:44:14Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"5107876a-e139-4041-bf8e-8314bc467315"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T21:44:14Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 5107876a-e139-4041-bf8e-8314bc467315 resourceVersion: "3722" uid: 0190abb0-3ec2-4500-8002-f8e2956bed51 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-18T21:44:13Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-18T21:44:13Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "3719" uid: 25b8129f-7f78-4d94-afb0-3292dde5e884 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-18T21:44:13Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"5107876a-e139-4041-bf8e-8314bc467315"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T21:44:13Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 5107876a-e139-4041-bf8e-8314bc467315 resourceVersion: "3718" uid: 478081a3-f007-4b16-980c-8be6cd337c80 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIeqmwokpzwgowDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxODIxNDEwNVoX DTM2MDkxNTIxNDEwNVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBErc+OySDDM Q18/c5Zp4TO5Cy8cafuDskBDtV8EEIgPU5LnTTyF5OYAdmMWoiy3eSo/4hfYMEo4 OMkPK5uMdOO8dc5Wfx0ek4Oe1PCv+dyqfhi2LHGrINRPG9M8j/9wn/vNS0JOfQqk thEcB2yOYNfbQmpkbfRNFoj+E99QY2zTT4oqNmt7dSgVKjZ4RWIHIEyE8DcXIe0E rdsbzrpViYhJ3aDGkSSV2hgtUn6tnbC92RBFRXQgZkm3u5whcmMasrXTpLzu2JXI GM/BTho4r+7WczRv5xxTLIA3sG3bqxJFYfZYN/VEQgSS6l2m/eb5Lb1W3XN/kl0k ghsQrEGZQwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA8xRWG7BO85nb5o29xsNmW12s+OZpyQIg0/bKMd2cwKkjGjiy QekSmwlrZVtg8gd+70cP8ZZtIYwsgdf4n/m8djANBgkqhkiG9w0BAQsFAAOCAQEA Xu9UdL1dqoYCXis8Y/Q//BjX+pfFVZT9WkIs+nf5D0oDw9N7JTQPW1RdyUJmQ9LO G/LgyaekYgXRP28ugF2Jpg4ApHpUVOSLOe8IMmOfPr/9VetrpFDu4/eu3dHRFOnj TduGltyjBku25RVjZvRSK/ttAqFR7Ptd1nfYxrNJC+wKn4pfp5pAFS7PRuXLqcgw OHof8g0PCRTf3Cpj2r1OeLqzeMmSeojLN60P7D8AqEAtGtxdKlaJEtZbiuXD5H2f MWXkpcHxb7jvdryzZSXZwci3D90kdg7AntQnWeH3iO/n+4rdkKeJ5H7hnY7tPbYJ cAZ4rcAMjE+re9gtmksjlQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIITiq4NPDNW+UwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxODIxNDEzOFoX DTI3MDkxODIxNDEzOFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALQ9AykC+U0ZbxpYhostiFdNvSdEwMa/BoAyrdfnqc7AiUSkcYcDuAwV42oQn+DJ /zFx5JBldX6Fg2E6AtFX2GENO8ukMD3rCQGJ1KjPa1G8IzbDC5dlF7u0IvIiUt/r 0bBSA+UTvnmnSqqFVSoWsbqsMIQGktBMOZaPssm3UDvoOeIOhTZ2otBrHbkjv6eO rFmbT5VlHG+1gJBjmwJmbJ/tK/zh5ZVnqpP08VNv/6kdObfpKFMLUFXUa3S/WZJL fUnXmYGZSU5CnovKQXwavPh6fuIyr+Lo6XsTHvJgMmF4hITK+fcNJN/bGvzXIKP6 licK0JGhQs/DEjT7W8tPJuUCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAJxRBuWz8imrFStoIwDA5SSEOYunfJoOzWo3kcrQtOkqkWUlQVqVNINx3 wdhxpuNMlSsrR82BxYplVnX9jhjAlzBLBgNVHSMERDBCgEDzFFYbsE7zmdvmjb3G w2ZbXaz45mnJAiDT9sox3ZzAqSMaOLJB6RKbCWtlW2DyB37vRw/xlm0hjCyB1/if +bx2MEsGA1UdEQREMEKCQCouYXBwcy4xZTRkODJhNC05MzAwLTQyYzYtODg1My0y MTg5NzlhMDVkMjgucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAA9v0P9DGrU8Yo00FWYviBkBWJx+iwam0Ph7aq1BhE/Bt+LQ5U6wixyue6Fp zLX1zPLiRDT2d6tlHMt+AbVHh71niqYvwT33jozMwmdoE3ufmQ0Lrn8tve+C8j5S MEenVWdqJ0ebRo9fm5Q42A+z2CYAsJTf/2U0mx2wwJbfGikSNAi82Sd6Na8C4E1l gUqHWlzFdimFEPvfL3MUYSUMoff+1kHk8rcedOX7k6GRzFYGpCrRKua480Fg4sDf sqQEUFvFp9FSoFmbSzVj9j+OdXUE+G+cPvCXy1vb3fa8ZwT1q+QnNnG8OH5mBeBd tWi+sWAo26Vod4ET0wxiVRZrIiM= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-18T21:44:18Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-18T21:44:18Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3879" uid: 12e3461c-3085-4e3b-9713-ed2bc0f33b25 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-18T21:44:14Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"5107876a-e139-4041-bf8e-8314bc467315"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T21:44:14Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 5107876a-e139-4041-bf8e-8314bc467315 resourceVersion: "3726" uid: 479c442d-f3b8-4f92-ab93-60589ca80f2c - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIHEDbdzw/FbwwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTc2ODE5NzAe Fw0yNjA5MTgyMTQ5NTdaFw0yODExMTYyMTQ5NThaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk3NjgxOTcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/wk5DnvddjFYkoNwttxhMl+1H60lEW4R9 8TqidpTdom/xr0Mz/ovSw6gG1JdEL4wtaGAg32EttP6YcdQgxmxtevexCQxti2VR uF8YlbBgqbSNR5C/BbgegdAsRjDgX6rwhNrK96R3TAsMDE0P/awt7lmpCrx1gI4o 6ZnuSAK3MhGyVhzU/iVfqTWHn1ZHozzvUSqzeAIrrhQjato/igXbVLWgn084R8nZ 0phnY3dT+NlHgcyd+uG9J3ELSIsHw74Bd16+p0HZnU2fSBufNjsaowZ5bwebH+ke qMrTo/IjuY4HtY3SG/z9W/IWRjkf8hW/n3IuQB/QaKTUwHqpvgg7AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRqSeZM lptzsgyg7lcdJOnfG+ZRFzAfBgNVHSMEGDAWgBRqSeZMlptzsgyg7lcdJOnfG+ZR FzANBgkqhkiG9w0BAQsFAAOCAQEAn+W+ku+vGAC0+72SyBVCiAyivpeUmn+tvbCv g8NZlZUg93V5Tvx09fwAwriakDtU3lUvarkuMJIPjmgT0KlD4pXu44igr32pRRe6 K0E7R9Et1gK4oNlYnGWQ2Bl+TCYQ2ScgMXK6WZTa+ncPHLOFvrTC4cyvnHdZ0UYE 922dEkLSey0Ucx10OkWW7bphO6fVY3FYKscluGEJamR2QwaHq6H8pN6LL/7yMCV7 5pEnDzToIPHcafWtlSJfJXQxTpelund43zg4klF4IDWwqHo44h54E9MNP95GzAFA kKwrM8PWraRgYIWS/8AaKQr10DDjImAKRANZ6df55V4pSUdniw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-18T21:44:18Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-18T21:44:18Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-18T21:50:13Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8038" uid: 11c81f39-9d8c-4a11-994d-96721168da4a - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-18T21:44:14Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"5107876a-e139-4041-bf8e-8314bc467315"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T21:44:14Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 5107876a-e139-4041-bf8e-8314bc467315 resourceVersion: "3723" uid: 5d99efc8-d22d-4fa7-b037-4c0ca9babef3 kind: ConfigMapList metadata: resourceVersion: "13753"