--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-18T16:56:46Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"db4512a7-7cc7-4754-a7e9-0f6f82454361"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T16:56:46Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: db4512a7-7cc7-4754-a7e9-0f6f82454361 resourceVersion: "2931" uid: a2a5b7de-0c04-4822-9073-ea9ef6800741 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-18T16:56:46Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-18T16:56:46Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2927" uid: f12b3792-ecb4-484a-ac18-26950b042703 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-18T16:56:46Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"db4512a7-7cc7-4754-a7e9-0f6f82454361"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T16:56:46Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: db4512a7-7cc7-4754-a7e9-0f6f82454361 resourceVersion: "2926" uid: 9d4b5b0f-42c4-4d26-a72b-492f0f623045 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIHReMbeon6qYwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxODE2MzQ0MVoX DTM2MDkxNTE2MzQ0MVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTEiq1ybnxvt xdAcVryVPXXqOlJSRvyUWPxDI1qSsaJaItooVCd2kr1DNGFIV7vp5CP69gQvzCPQ 188NzCPXl6lRYkeO4dznglLc3veFOzIfgEUd8hyWAiKCvHMlWBynbxcFY1DNcoc4 7Ms2KXhvi9wmVp3LKL4xLzAHWY6eONWKVXXtEhDXvW1R8BRDA8GF196W0n3oXmbO c47qqOLR+mqfzKY5zF6y9ZSuXaBDGcfdagXtEgXHonnI2fxWO7PzziqGD2ibNyrt bXEFcVEesgAstuQGV9cKwl2V+EAxv6BTjVYSWBQHdOoSkqQuaZc5ALj4EkC0Away H1yz5WC3KQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAj/b+ywg7NAnYCyr3qo8FA1iBCuXrBqyH9hBjRNEs4X/vMWbj ZrZfwHYyo7dvmNrdM4sAEvpFgUOVrebAINyfkTANBgkqhkiG9w0BAQsFAAOCAQEA Oj6NmlTdFniUvQDGjWCH5i333x/hu1tgbfA8BWxZHRq0VU0D+ovcShiRKc0vdvJ5 JBCKklrgxPXTqp4mFuzBt0800zQL/GExfUxvDxep22evxt3dgQZ3MOz/itc22OZs ceOLOpqHi7JuUBOEdK3lFsQDah99HJSv3CMqKbR+G9cy5mKIIrvZ+nqX85jAogX1 MJADq2V+9J6JZEl8NlF52SEH1m9xUty8qXZcY3S9qhvRmMCxXoFh4jMHppX3V6B/ zHXAuWYwNXNeh8AhCw/3TW3gKTToRK6Mr6KRakTNpFZBlaWx1ym1FhHbquN86EhM gKK/2GLBpnspOltsvXHcJg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIPWRJZYNP2Z0wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxODE2MzU1N1oX DTI3MDkxODE2MzU1N1owMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKru0J2X075ciu33fa7P5bRIFcsrPlbkQIPToqNSdKmk2WrNZYYpolgh2/oqK3p1 3JUqvC3jJf3FG2l0LqInyAmtUfyFWqLLL0ulgAT+XTQngFgzrlRSzkTK07+JYuFF Ki6uq2DH5MN9yjWR67VyRk9MnSQqW8KQC+sxADG8pZQ3QGrM00a0XDcJ8ZtHg8u0 lN8T27Z5nmFtCAXuVix+geaPK1+mGgH2bdAkoTiApF4gw+XOkOlUPRCFaxunZXFy DZF9Mksu7hbb1DKs8l7K2ojsvMc3ds3/vCcvms4s5RKvkyjZeemmHgLZV6m74KPw 67+ovRhzSv2oOcP95hRug4cCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAoH36G74by4yrA9uwDN1yOvaq/rjAAEAUXTW4iaaYJe+PAHwgiaiO68mz M3YRXyupgsNBUhYOvq7/lhAXgElm1TBLBgNVHSMERDBCgECP9v7LCDs0CdgLKveq jwUDWIEK5esGrIf2EGNE0Szhf+8xZuNmtl/AdjKjt2+Y2t0ziwAS+kWBQ5Wt5sAg 3J+RMEsGA1UdEQREMEKCQCouYXBwcy4zZGExYThjYi05NzQ2LTRlODQtOWUyYi1l NTQ1OWVlNmUyYWYucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAI/tFG0fEBJYkMUvcleXwSt3Yhz4wq98b7Esg/dqy2BlU7knkMv5WfXKPe/I 3KeJr250Kt/O/uL74/agRNGQoLd7Hz896zCWv4Y7xPUOl+b1s0DHJUhFTCxs9NS2 orqeZts7I1FPgSbVNnvXrocwhAWIVIcjQ/sk//5ajlXPQq01Ri+ujml1b9fLm9zy Vj8f/vHWtzFW+GiZ3D72Yn/E5ejhJcAQfqchdI3D+BSiwvjIoNOJ+by+oyevpcb9 J6GFNeGiwNUb8uINii0S64G4d8oF0LMDMD3bnPzUfcWTtPfERrR+CS03u1j0Pej2 exZT/bZxj+8BLrGZctWLhlDHVOM= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-18T16:56:56Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-18T16:56:56Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3887" uid: d14759de-818e-4f61-87db-998b4798fb8f - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-18T16:56:47Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"db4512a7-7cc7-4754-a7e9-0f6f82454361"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T16:56:47Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: db4512a7-7cc7-4754-a7e9-0f6f82454361 resourceVersion: "2938" uid: 23bdf116-cba2-4e38-8a24-a5d244e2d7b0 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIHy+OW5QFh8EwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTc1MDY3MDAe Fw0yNjA5MTgxNjU3NDlaFw0yODExMTYxNjU3NTBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk3NTA2NzAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB/YAvhRuMfFfj9iH/I8/4b5FWnJRIjGc0 Uodyxzyr9YAII+hTkfPaaBuO6y4zpzd6hZsqFHX0yMwHNaaCRVZN/43+G1z3zuZi CcO8VMwLVDD0Z4ySWDKx3WBpx6ztTA/e5+cjGj48MunGIqJIDrX6vNCYnvh3Gour Dt0Cp8lVpz11XeRWQHxGCEqVi8Ki+0saiBpfNTyCfpcc4JXizHZSYtjI5Xiozwut a2UY0rPbbGFI4i7h4rJzEDHzRZborpzIRAcSHU9wsGie7J1b3D6PVOtisxHRNQI9 fbn2X5A3PADt0xzsEv7wi74vpp4r5/fZg07Wl5WERfrmf/9bT1u/AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQVp8vU vWjmuT9OYX3wZHMRE/0sGjAfBgNVHSMEGDAWgBQVp8vUvWjmuT9OYX3wZHMRE/0s GjANBgkqhkiG9w0BAQsFAAOCAQEAZPNiu+pH5vrBqTQSUQeGJtL0SFfqlmczAr/T Cs7AWwdkWNpEmKY5AgLXbA5jfEGdNXvJ7PPiM0l94dcvKanAhY90TkH4+KtGQIDc scnZa3tfbk2TPUDtVQeBDCw+vBbRU7Jipam21DmrDrKybkzmFhB3DbwoEBViCZXS LshiEMfx9E4eOZVKxFlbVXIMD7oxTIdnGVSEJElIH4D5TPVk5V4kTdyTeKtG9F2q w2SeiriMZmtBfHIDtwvaJ5NopiLTCfAdMPtNWSl2uwSiNl9DbeZ8+MU5FKJxhJV6 MPX2kbNhVuyeUGibdrgDmLgKu+GA/u8Lg7UcdHKtVFApvKiMsQ== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-18T17:04:58Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-18T17:04:58Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "12663" uid: a5d77e13-7257-47fe-a1cb-ce33ebb23f49 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIHy+OW5QFh8EwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTc1MDY3MDAe Fw0yNjA5MTgxNjU3NDlaFw0yODExMTYxNjU3NTBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk3NTA2NzAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB/YAvhRuMfFfj9iH/I8/4b5FWnJRIjGc0 Uodyxzyr9YAII+hTkfPaaBuO6y4zpzd6hZsqFHX0yMwHNaaCRVZN/43+G1z3zuZi CcO8VMwLVDD0Z4ySWDKx3WBpx6ztTA/e5+cjGj48MunGIqJIDrX6vNCYnvh3Gour Dt0Cp8lVpz11XeRWQHxGCEqVi8Ki+0saiBpfNTyCfpcc4JXizHZSYtjI5Xiozwut a2UY0rPbbGFI4i7h4rJzEDHzRZborpzIRAcSHU9wsGie7J1b3D6PVOtisxHRNQI9 fbn2X5A3PADt0xzsEv7wi74vpp4r5/fZg07Wl5WERfrmf/9bT1u/AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQVp8vU vWjmuT9OYX3wZHMRE/0sGjAfBgNVHSMEGDAWgBQVp8vUvWjmuT9OYX3wZHMRE/0s GjANBgkqhkiG9w0BAQsFAAOCAQEAZPNiu+pH5vrBqTQSUQeGJtL0SFfqlmczAr/T Cs7AWwdkWNpEmKY5AgLXbA5jfEGdNXvJ7PPiM0l94dcvKanAhY90TkH4+KtGQIDc scnZa3tfbk2TPUDtVQeBDCw+vBbRU7Jipam21DmrDrKybkzmFhB3DbwoEBViCZXS LshiEMfx9E4eOZVKxFlbVXIMD7oxTIdnGVSEJElIH4D5TPVk5V4kTdyTeKtG9F2q w2SeiriMZmtBfHIDtwvaJ5NopiLTCfAdMPtNWSl2uwSiNl9DbeZ8+MU5FKJxhJV6 MPX2kbNhVuyeUGibdrgDmLgKu+GA/u8Lg7UcdHKtVFApvKiMsQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-18T16:56:55Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-18T16:56:55Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-18T16:58:03Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7030" uid: e0071d3a-142e-4d2e-824e-2ded1b419533 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-18T16:56:47Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"db4512a7-7cc7-4754-a7e9-0f6f82454361"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T16:56:47Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: db4512a7-7cc7-4754-a7e9-0f6f82454361 resourceVersion: "2936" uid: 71cb7602-1b7d-4150-997e-31ec10476289 kind: ConfigMapList metadata: resourceVersion: "40901"