--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-18T19:32:10Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"42c13787-a08c-4f2c-87a0-68c64735855c"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T19:32:10Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 42c13787-a08c-4f2c-87a0-68c64735855c resourceVersion: "2345" uid: 61cc243a-81d5-4511-bc63-c5a03887537e - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-18T19:32:10Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-18T19:32:10Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2341" uid: 88a49396-fc67-41ad-9c70-abb621f145b3 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-18T19:32:09Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"42c13787-a08c-4f2c-87a0-68c64735855c"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T19:32:09Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 42c13787-a08c-4f2c-87a0-68c64735855c resourceVersion: "2340" uid: 7a995c93-3bb8-4c17-9bdf-e3e1db55f345 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIYMli0seBvjIwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxODE5Mjk0NloX DTM2MDkxNTE5Mjk0NlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz3Qxj6AlMLu XAENGt39J+B47xw3aGth3Qb7QublmRQ8mb6qbIDiymrSwtsTH8oMM8bLq5ZBMOvb atNV7GTySadnF8X4e63v1lTCjD1Ei66Ntn4+M6ekLcf/lVCSBdgyYyzAKfOeEUYk k+XGKBIpy0FgmSibBhTq8fgKCD+87Skt2jt9FPTDYSK387BC0Qc6rteBIvWs0qLd BOGRVYax1SV0Aq2FWYwwEAq+84fKYMiRohyY5yI53Ml+/0cr6HqEeApNpt9feAvV l3+S069StyU1IlpGb54STZ0WgtWlH1SrLxf4KyOjHpGj9IOLSyT0Hz/wb848++0L 8ymPmBeOGwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAUk+4cGIY8+t3CViK2h0cIzK3Wh6o+h3ivDLsamcTNqxg63hd z6FjG0X/riw+iTshY4dFUrJCVIqDW18FZD9kNDANBgkqhkiG9w0BAQsFAAOCAQEA Sv7KGpLu3ka6GfojU1bgAgnVVPh0sEvV/3FXfuA10T5u4S7wUNAHG6myEwtHFkJn XU2XLM62G/VQWEMfi4i3J+2mtJH2QHX6TMWbxqa68Pk8tQUJcE/j07vHHvVKIzhn Bf2W0o7p+BRZQ0BAZGZ6QkYIEKCoR1e0XfAzJlYCKhWZD1IYy2kOMbrfV/flHTPh ix6O272Vu6xfshosSt+Ec8JZkSvgW91TaEKJe1FTObsU4zk7xzZ0BVCGa7pPuFF/ CIekwKhDe5SPy/qW0NLmjNGmLQqJsJ6kRivSGDiAx5h/CRt/q45TcE6qpngEfeCK RIHdcmR70QVrjlwqtMIvzA== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIPg0jqkiyHvkwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxODE5MzAyNFoX DTI3MDkxODE5MzAyNFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AN2MisNzJRVl3+24ovGuBoGjWg+Avmax22v2nDGoEQQIpqEqal1VNvL8PVhGVgyX f+qh/liC/TYu0NWFB0EQSNMRuTwKjw7gsVSp1tC7O83emEiej9mPUh7opIGewJT4 VFt0sv46bOYqR9+OBwm5R4EGqmmp94DtbsPu2JUKYysKD7O7V+REqd3yHcvGI6+3 ct08kJEEA4vdeW0sol982yVXTT43oTBXGc5E7wvD+7vNyp3b1pvUGpmJBc4AWGjt wJCNb+RVxjtp0W4xqmYnoCdSWn9i8JSrc1ErTzcU41EDJSBuGhWUjopp7KoB1neN OCvf6JnWsIFNjEhyrTGSwBECAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRApFeAFAOxOQl4z74UlHoQOhS2Ngz4gPQNR/qopswwVDgE04j9IuNeQ8Wp r0SwADWh50ROvQOlN/IxUF8idUBAKDBLBgNVHSMERDBCgEBST7hwYhjz63cJWIra HRwjMrdaHqj6HeK8MuxqZxM2rGDreF3PoWMbRf+uLD6JOyFjh0VSskJUioNbXwVk P2Q0MEsGA1UdEQREMEKCQCouYXBwcy42MDJmNWFhMi1hMzdhLTRmMzMtYmZjZi00 ODg3NGE2NDk3MjYucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAHomD4XOGh39++C/8CyrEvrb7nb6IN5EQkptDCD/ad5b7Q3RvpPbPji//6Tg rtUrwykw6Kisx8o/kU/XbMWCr7k+PYUs5Qnfb0Di7bhq19KQrhqb9NA+UAg3mm0C XZuGyGaEzslyPb5xJsupVS5CiZw/GB1RrBfyRRC0s159efCFfXnDnxY4tHyyFOGU FbKGUO3Fk/VvLznHZvlSdUcuoR8m5KInneLed+SYQo/mn+0HMCtgveBD/1Z+dfOZ cmpJl9WsjRtHSB+HQ49Qek84Zd6BLJ/+kIpNSiCLmJDHfzxYnA3d/uLVMi1/f2ax zDGtTBQzJZjs69jTj2+OWfA9ePk= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-18T19:32:20Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-18T19:32:20Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2672" uid: 11fcc737-87b7-4c91-a200-1fb41db55b71 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-18T19:32:10Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"42c13787-a08c-4f2c-87a0-68c64735855c"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T19:32:10Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 42c13787-a08c-4f2c-87a0-68c64735855c resourceVersion: "2353" uid: 70e1afd1-0302-467c-aee9-4c3c7636b69d - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIGorKtLq1HGswDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTc2MDMxMzAe Fw0yNjA5MTgxOTM4MzNaFw0yODExMTYxOTM4MzRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk3NjAzMTMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuzsY8YWtadiN4V+z7Cxnjby9jFJ3xLlEY z2tCjwLabYpCEtxhPYMdVIBm/HhGQcn5dOJgkZ/MApu2aNjiXuFjEXrno7Jhe9EV +gs/AnqD/nz7vu22Cbo5Jv6Ze/UJeBdwGodfKAFuUk9/x8L4ynUnsIbiajJGEli7 upSNF2x7poSyBwoZap+M3HqW+2bfocMI+XWo+KGtwPR6lYH5MJwrqKwjqKkRqAYR YTEXxb9eRKVDK5m31mTirJNK9ULNQe3SlAp2pmxY6iksSOFZ2WO5N5hYsqk5OR/Q XcW3gcI6gcPu4GalzlNH+pYgZw+2sDzypIY7jiFq/oCtGbjj0jFnAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQtrvnu wakDTnfYVcATAmTh5WW0cTAfBgNVHSMEGDAWgBQtrvnuwakDTnfYVcATAmTh5WW0 cTANBgkqhkiG9w0BAQsFAAOCAQEAGxNlK6kf4d8AZT8kefaHGaEbEZn7Rd7gJoH0 fcyIpx0rP37/C80CHQmuOXex2b9tZy+erfm7zUBN6VcXj1RiF/b8QVL1UceXK/pn YsQm4l17mrvWzhHWp3wMq5JIImw6UF0wolu0s/gUugSKdFt8Gy3t0hTWnvnN6zQg PHbGdXO6eUwDIqdD8R3XHqOtiL+4YNuU25PnIR5K5e+mwMwbRw9t/H0BbynCEemv 9ZZQAk9I3tZYo5YCk6jBBp/Eq1rv4GtaicwRiXIX7zBMfMm1zgj1AhjXWMkjo5Iy MGn8H6mbJfxJkIQ6Yu2dh8J74D1RZ7UVGCG5mJbhbtUNINTSyw== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-18T19:44:53Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-18T19:44:53Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "13408" uid: 94d71b13-faf8-4e4e-95ab-4c3f356d3f38 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIGorKtLq1HGswDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTc2MDMxMzAe Fw0yNjA5MTgxOTM4MzNaFw0yODExMTYxOTM4MzRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk3NjAzMTMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuzsY8YWtadiN4V+z7Cxnjby9jFJ3xLlEY z2tCjwLabYpCEtxhPYMdVIBm/HhGQcn5dOJgkZ/MApu2aNjiXuFjEXrno7Jhe9EV +gs/AnqD/nz7vu22Cbo5Jv6Ze/UJeBdwGodfKAFuUk9/x8L4ynUnsIbiajJGEli7 upSNF2x7poSyBwoZap+M3HqW+2bfocMI+XWo+KGtwPR6lYH5MJwrqKwjqKkRqAYR YTEXxb9eRKVDK5m31mTirJNK9ULNQe3SlAp2pmxY6iksSOFZ2WO5N5hYsqk5OR/Q XcW3gcI6gcPu4GalzlNH+pYgZw+2sDzypIY7jiFq/oCtGbjj0jFnAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQtrvnu wakDTnfYVcATAmTh5WW0cTAfBgNVHSMEGDAWgBQtrvnuwakDTnfYVcATAmTh5WW0 cTANBgkqhkiG9w0BAQsFAAOCAQEAGxNlK6kf4d8AZT8kefaHGaEbEZn7Rd7gJoH0 fcyIpx0rP37/C80CHQmuOXex2b9tZy+erfm7zUBN6VcXj1RiF/b8QVL1UceXK/pn YsQm4l17mrvWzhHWp3wMq5JIImw6UF0wolu0s/gUugSKdFt8Gy3t0hTWnvnN6zQg PHbGdXO6eUwDIqdD8R3XHqOtiL+4YNuU25PnIR5K5e+mwMwbRw9t/H0BbynCEemv 9ZZQAk9I3tZYo5YCk6jBBp/Eq1rv4GtaicwRiXIX7zBMfMm1zgj1AhjXWMkjo5Iy MGn8H6mbJfxJkIQ6Yu2dh8J74D1RZ7UVGCG5mJbhbtUNINTSyw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-18T19:32:19Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-18T19:32:19Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-18T19:38:45Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7745" uid: d1b1a583-b75d-4a33-9d50-4cd2b5547b73 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-18T19:32:10Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"42c13787-a08c-4f2c-87a0-68c64735855c"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T19:32:10Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 42c13787-a08c-4f2c-87a0-68c64735855c resourceVersion: "2352" uid: 0c3f497a-cdf6-42c5-8d6b-25801bb19fb3 kind: ConfigMapList metadata: resourceVersion: "40216"