--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-31T00:23:27Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"3609f094-4d41-4141-a2af-0f609e2f0d04"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-31T00:23:27Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 3609f094-4d41-4141-a2af-0f609e2f0d04 resourceVersion: "2337" uid: ef878b54-579f-4bab-a728-d429c37f6578 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-31T00:23:26Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-10-31T00:23:26Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2334" uid: f3eee2fb-5738-49e2-b8f3-7a8bc189462d - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-31T00:23:26Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"3609f094-4d41-4141-a2af-0f609e2f0d04"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-31T00:23:26Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 3609f094-4d41-4141-a2af-0f609e2f0d04 resourceVersion: "2333" uid: c1b3da40-612b-4d56-ab0d-efc9acbe9f83 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIFcqRbWZ/e58wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMTAwMjAyN1oX DTM2MTAyODAwMjAyN1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQiGdHZn6vvB uUx8xJjL2icoerXzbTUKp4kA5tcOEvd4OpiZPyz3KH22r8GpRj3Dj4hmnKvGB69o No/aoolJE+C5b+D7MnX6sIzXJ0qbx1bbsT1Z8+SuGqxJFs2s0ZC0hJdtHR+rKa2x dJ8lfdTaA9aty8dAc+MIILPro86WbIUTK4MCE6cKEcNAQCWGAHgHYn/1C123rkCl k52DH9MSCK03vr/bR1NkE0dNlJUAQpV0TbAu8e8X4S68PE+kdSj1fmS2TMvWO5Le +K86gEHAVQNu9SsFzARWIf1Cg9scYt1npZWMsZ3unF7jNfCCvaFMoVeNqLC9l1Qy Ly0fhHlMwQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRArNV39EYZt0AdOdBCzvhjeWDLFwVON0HvRxHTB76VlvgWzNrF xf5bV/o+7ENofkVIYuM6Qq4ne4yS/NPVVxrHYjANBgkqhkiG9w0BAQsFAAOCAQEA JBp3+SDQ9qxgl9UmH7chofKlE6CNdJN5wg67GqZ1eUeIcnLnptIC3b74UmRO29o6 IbFimFqbSHL+Ax16Se9iRON2pv9Svadh90dGgQgLE9r4Q9yqrD5tUWK2vMmf/73B zS9UgeHSeJ1UDugbvRBdSaL6fsG7DxVArtnjJqaheskPGduODrjoqsmbuTUqhSue fwk55L1hVxIZ2UWU1NAprHhkTKQ9McK8JM6UxTNyr90x+vseAIFgMg1J/m801979 HfYKGFVgkBhQYicSUMgL2+QVh9vJ7gC2v2bn7+uWXsAqjE/f4kL53wYQEZIEWIUv Eg5YuZW2xNv2Tyy+pxE3Eg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIINk5zikqybIkwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMTAwMjA0OFoX DTI3MTAzMTAwMjA0OFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AK12I26HbMWB2B6DBNChCiIwnUL8j2bE2g95ZfaIyfxZmAgPw9yRZE4JR91Hhnoc /6DWesrdAkc2uRIU1U37yIQqYIQKwyXLgDJv6WvoZY/uRPJwBoLJakIE49FYQGcr yzZ2TL1GgnnMyXNwJnIyy9rF5VXci12HZJOgUmUfE2+txBcKjGYkrF9zsmhtSeTD eA1+hfN94pYz2deKBeK8nEYJBj25KaTphXlScGPV+rh3+2jyswY+aRt9No84LLt0 5/RpK9OPEqhZDQlxlASqY7hsqIWWF9XNBTIjLcQzYw44DJf8YhTvHSTJj9If9kTN vSzaOsrxGDR6WueLeYmHTZ8CAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRARZJO+2Miy6FavzImVahh4u5p/zRGi0K0i43y1Uvu8kgCE+Nm0TeWuJO7 gjEDtQM1Jyo43WK6RRMcRJ9qw73EmDBLBgNVHSMERDBCgECs1Xf0Rhm3QB050ELO +GN5YMsXBU43Qe9HEdMHvpWW+BbM2sXF/ltX+j7sQ2h+RUhi4zpCrid7jJL809VX GsdiMD4GA1UdEQQ3MDWCMyouYXBwcy5kZGRkYjJmNjM3NzM2MTMwYjM4Ny5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAOK56V6EBcwE1 pv6civc5aFKeNnZzBCgLQszHo9uBjUXuXRImbDhFbZ5wE4DuUgPP7yUytIXM3Me+ PepqCzwTCpvVEetmsd3KgMWg31ItVJmQdoAMdfawo1GR6OGo4z+A5gL5KVz/4z11 s9jsR7R4qY83nTIjifJXu8eTFkZ5k7avul85TpwUEqKrAbBpm2AQNbcENHrLCLaZ S7fiFSjxTGP74WIwO1eV99d/uDPpK32aC72DUgLcALZUSNAkKKUe8xWpJ4zi0jBk DVj0WBn4TPoe1M4hOFJkFk+eSu+YD1h11qgAT3vA9ARe/pW97MbVqUvK8iQSGc/W slrqP+QK6w== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-10-31T00:23:40Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-10-31T00:23:40Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2816" uid: a81d198a-df21-42e9-8982-93ce2350de68 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-10-31T00:23:27Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"3609f094-4d41-4141-a2af-0f609e2f0d04"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-31T00:23:27Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 3609f094-4d41-4141-a2af-0f609e2f0d04 resourceVersion: "2345" uid: bf490203-ef1b-4c73-8f9e-00ce81fd6f62 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIDRy2e7zvcPgwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzQwNjU3ODAe Fw0yNjEwMzEwMDI5MzhaFw0yODEyMjkwMDI5MzlaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM0MDY1NzgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN7lWrxKGs8BtNnATuSloICLVpdTwYsi6x RO+jDLNpDui4ie7OQOp/hF5ClS1ZWvqXNjbTQ0/LPyNHBR0MplGjHHLBUeZMLehP QfVp5B+0a0GApYkt0FZNe3/WTZDtBupZmwdzGEilzpbXg++4fjlBZfNlUXBLbL2t w+vaUMpWzgx4BkAgO55vtG3kc6wf5A9ojM+mZvtDSFcbp9A9nQOEHePpX6ncIOsi XRhNqPJ7yflf0koGjH8iMsi6r3pvQj+QlPEblnhdMDoVmnDtIcdFG/vg9IdIVm/B DcLR6SfdBQ+tvh6FLA9rh9dcSUiXAyyseoMO0iBNANfe2vx2ITkNAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQIY79S JRzlj9B84Iw9muJ9mh4HIzAfBgNVHSMEGDAWgBQIY79SJRzlj9B84Iw9muJ9mh4H IzANBgkqhkiG9w0BAQsFAAOCAQEAlDyqH31j2RivfNe62HZRAAL1fedsaYDma0HH aImG/+3PIU4WagN4ywMBVeQh35YXGyn0p4k4bsopitDN8gC9szSp0H/Md5ZLfM89 cn4HxNllFb/uT6uz98qzRgYEiPP0hBBMFz4wKcHs4ctPaTI/MHDc60NdqL6xX5Qo WLgH7hIZ3mbVNer0XsTv5uoUKoRKSX9ZuqX0bArroAOTDc9odlvrOpG8R3k1fAYl thH3viHjXsRRgsfhkUIaRzCsyiVvDzKqIJT4ZkMCJYEOEgGE7EcltsjJiZW5cwaM 8tZx1HMht3Cw6RGHE55gLaSHrvSL8QLEnkRsH7N8cR7eMFVXzg== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-10-31T00:37:42Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-10-31T00:37:42Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "11577" uid: a329c23d-5328-44cd-9d26-df6278c28a1f - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIDRy2e7zvcPgwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzQwNjU3ODAe Fw0yNjEwMzEwMDI5MzhaFw0yODEyMjkwMDI5MzlaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM0MDY1NzgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN7lWrxKGs8BtNnATuSloICLVpdTwYsi6x RO+jDLNpDui4ie7OQOp/hF5ClS1ZWvqXNjbTQ0/LPyNHBR0MplGjHHLBUeZMLehP QfVp5B+0a0GApYkt0FZNe3/WTZDtBupZmwdzGEilzpbXg++4fjlBZfNlUXBLbL2t w+vaUMpWzgx4BkAgO55vtG3kc6wf5A9ojM+mZvtDSFcbp9A9nQOEHePpX6ncIOsi XRhNqPJ7yflf0koGjH8iMsi6r3pvQj+QlPEblnhdMDoVmnDtIcdFG/vg9IdIVm/B DcLR6SfdBQ+tvh6FLA9rh9dcSUiXAyyseoMO0iBNANfe2vx2ITkNAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQIY79S JRzlj9B84Iw9muJ9mh4HIzAfBgNVHSMEGDAWgBQIY79SJRzlj9B84Iw9muJ9mh4H IzANBgkqhkiG9w0BAQsFAAOCAQEAlDyqH31j2RivfNe62HZRAAL1fedsaYDma0HH aImG/+3PIU4WagN4ywMBVeQh35YXGyn0p4k4bsopitDN8gC9szSp0H/Md5ZLfM89 cn4HxNllFb/uT6uz98qzRgYEiPP0hBBMFz4wKcHs4ctPaTI/MHDc60NdqL6xX5Qo WLgH7hIZ3mbVNer0XsTv5uoUKoRKSX9ZuqX0bArroAOTDc9odlvrOpG8R3k1fAYl thH3viHjXsRRgsfhkUIaRzCsyiVvDzKqIJT4ZkMCJYEOEgGE7EcltsjJiZW5cwaM 8tZx1HMht3Cw6RGHE55gLaSHrvSL8QLEnkRsH7N8cR7eMFVXzg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-10-31T00:23:40Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-10-31T00:23:40Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-10-31T00:29:46Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "6971" uid: adc6e0b0-0861-4151-a80d-ec62cffd3c08 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-10-31T00:23:27Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"3609f094-4d41-4141-a2af-0f609e2f0d04"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-31T00:23:27Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 3609f094-4d41-4141-a2af-0f609e2f0d04 resourceVersion: "2338" uid: 36b37614-ef81-4cbf-b098-d0e0831e1831 kind: ConfigMapList metadata: resourceVersion: "27489"