--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-17T19:01:12Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"623ca6dd-adc0-41bd-a57c-030e8e2175db"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T19:01:12Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 623ca6dd-adc0-41bd-a57c-030e8e2175db resourceVersion: "3042" uid: e88862b3-477f-45af-a576-d9646ce7261d - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-17T19:01:12Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-17T19:01:12Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "3018" uid: 37def4b5-dffb-49b6-979b-38bbe93d3b4f - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-17T19:01:12Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"623ca6dd-adc0-41bd-a57c-030e8e2175db"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T19:01:12Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 623ca6dd-adc0-41bd-a57c-030e8e2175db resourceVersion: "3017" uid: 58af1395-180f-4628-9691-e26fa80578cc - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIcDTv1AKQy9swDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNzE4NTc0M1oX DTM2MDkxNDE4NTc0M1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11l0KnrfSu8i swwu4M10RBKQ2NPRRDLdDWsLyG6gguch1pPG0bNoUN5aE+2r1lWcE2uKZQW+liH0 4dxS8EBEQWvAbuYxXtmZbcD44dO4usHiGRiioq+RsNW6rpj+Q2rzVWbL3HDt9gMj Bpc8BZ1Ei8+FH3dvfxX+Fcu4SBlQiTBspklQDNEtwK2pM3GTM1Nk/Y4HaGSthhDh 3nh13A2tUVSkyInH7BIc+TuKFBJ70F/7kaekt6jfj9fZN2UqvP3z+uEDbmFmBxR8 D5wDIhMSeChVHzGKEXDIqZj2/Zo6Y8NNFXBCymqQ1qMIkDQalo87VKsido1u7mLU Gi0zbFmmFwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAv7Z5LHHPdHGzvB3Rebb4L8LpgsQP0+aeRfga/AbgPx2Omj+Q vvrrpB4YSXKzOaUPWYjHwWXxgYy/NUXvN0M2rTANBgkqhkiG9w0BAQsFAAOCAQEA UAiJofk31X680Wu8HYAMGJZsY9Wp1VJ1oCtobPR4U4ehoWVC3O9BaQT4wBMjWek0 ydqmRDt8yDReh/4lphxvhviQyMTmM7Q4cGQfLu82i8sCy2ZIuP3WlqmGdH0lWIqI TbyjyJhBS54V8v2QHkKx98CBR9vMdOLXsPsfBQ5xvLx1t6sdSPkAwftvRkL7i0sr oXTF2fhn+9rARSqVi+CzvkE5cSvYC2ZnypUMqiV5T9pNph//IWl4ItDvVQsdf5qJ yMejadQluIeduH9CFW2GoieDiLC8Q+LP1+AQG2N7mL8mM66XVjjvWtwhwSUe/L/7 6B9CKPb84gP1Gi5x+l9tiw== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIWjhpTrvJGsUwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNzE4NTgyMFoX DTI3MDkxNzE4NTgyMFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMwI1RGuuN5uM+nSRgjccg4vRwNt0BpNVwMwbWVmXBoHgTB+mWUDBPWNoc8SzdZl iFdGf8KX/6goNzpgklZA9VDtH3rf/0hMM42QUq1kIMNMZbVaLe14NVhjE1e3y/sw uBEzlDFuHvpw9L5aoArjqA1zzUbPmcor+mir5NwuSyCeWq8GqgD6jGH/KUzp1+xq 50PkpQ2AQyKzP3ZJ0bZn7YYMokQFFa6ob9mcJYawKeb/zXZ6g6lA7HLJCAYmWc64 6ogcONWPtgB4JbXGCnkHictSO8xHVpkaXcq3QwR2iTshYYdiCmWhLdjTdXvEX6Hw 3QMTMkRG88vf/C3IdbFte7UCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAnuFXc9wxHEohe8MA6p4w7QQxHBlErW0uRr9HO1yzkoVXCeAfZbAZAKaj 4NFMYUFybhwOSNTcAD3LxkM/AZlmTDBLBgNVHSMERDBCgEC/tnkscc90cbO8HdF5 tvgvwumCxA/T5p5F+Br8BuA/HY6aP5C++uukHhhJcrM5pQ9ZiMfBZfGBjL81Re83 QzatMEsGA1UdEQREMEKCQCouYXBwcy4yOTRiYzUxZS0wOTRiLTRmNTEtOTE3ZS1j MDY4ZmFlM2MxMzEucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAIzrMwk5uYdy/DPHspqsu8n4Ge95MbGObs+LpJ1jHE4BCSgr1tQ3vF/l0UlN NXlkI6KFUDdHvbRLz6MP2hd9QLtg4FqrCqtjO5a9iqPOX2DgOI6ACelV8X+Gi+eG fqJyPYwumEwwpVrKk4aFOQCgm5qJBfStR48tRZlMeGDWyhWGSZeM1yk3evIWnG38 /5RdUpJ3qay5nPy9mFwWk8strzRkrLuIJwVsgZ/wRpY4OLJ9ovRUxxCDBpYUHgmF rNyfP3TmWLXhgYpsX2zF8QsYMagX5c8Qi9PCggAPpAPUGv/UW60MobE2IeLFQ6Z9 prFHgXxIS5qD6560Gow3U0gJ42s= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-17T19:01:25Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-17T19:01:25Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3809" uid: 97f9537b-ca96-4628-a9f8-1f82d4d714b8 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-17T19:01:13Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"623ca6dd-adc0-41bd-a57c-030e8e2175db"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T19:01:13Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 623ca6dd-adc0-41bd-a57c-030e8e2175db resourceVersion: "3085" uid: 7a06401f-314a-41da-9b5e-d884bac26042 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIczDIsjyski4wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTY3MjAzMTAe Fw0yNjA5MTcxOTA3MTBaFw0yODExMTUxOTA3MTFaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk2NzIwMzEwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBssXZN0KM1UcgaoyfipvrMSHKNB0djERf uO7ZWuxL3hQtZhbhFQ9d1Tt8bKvC+n65rJI4k8GsEoFPGSAsNNrpF+xortSXHACY SmGgLioOAaJOgEdTxnIS8RV8KUbb1uYmwVxv5Ef20RmrNOdLAm8SfPi1OkD5MTEe wMJFiEo6UGplTX25VcUJOznK2f73tXJVqBNXJtL1ki+b6/bYpG7bUEKQfwhNZpzZ a3uOCkI70XviEOKXz84lYMH6mTUDhpClvFsKRvwhgkJ+Wpn0hEOYuWvx0w1AE0MS WkTM4Ao7p+WcZlOT9/4NiiGwVKK+zzU1Z4VO3qqnB0t3MQ5g7bVbAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTw0Ygd sfhSKIcDw6ISbUKLn8ma8zAfBgNVHSMEGDAWgBTw0YgdsfhSKIcDw6ISbUKLn8ma 8zANBgkqhkiG9w0BAQsFAAOCAQEAUre9p20aa0PWiEupYeKLSLWkZfmxvGwj8GBE HpluIk5MyeugcLzBIlcaa95QTVD+bFDIR4w+PlOsZ/YUt7Akd+J9IM7EI6LogCkr oFC44G/WhrwQ+b4SengVioQfaWbIakbAcIn9fJqbbYHG1KiL6AGSd+hlpxSxTR6c N8YIaSfdL9qAoYwXcwMZir1YuCg8XFxo4hXCmRYqk+N/9Rgv8pe8S/vzQGary3lf iK6setOIxIZ2Y4jCz0/Fu4OdHDkMMYF+m3zPne/gyTCf/dGGFhxr4hg4hH/YpZuu r6ai3i7xm8BsEfIojxaCvbgrh+DJ0R+DjorVELMB7b+AU+iHqw== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-17T19:13:25Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-17T19:13:25Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "13332" uid: a963d39e-9710-4b23-b2b2-5b103a4076c6 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIczDIsjyski4wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTY3MjAzMTAe Fw0yNjA5MTcxOTA3MTBaFw0yODExMTUxOTA3MTFaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk2NzIwMzEwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBssXZN0KM1UcgaoyfipvrMSHKNB0djERf uO7ZWuxL3hQtZhbhFQ9d1Tt8bKvC+n65rJI4k8GsEoFPGSAsNNrpF+xortSXHACY SmGgLioOAaJOgEdTxnIS8RV8KUbb1uYmwVxv5Ef20RmrNOdLAm8SfPi1OkD5MTEe wMJFiEo6UGplTX25VcUJOznK2f73tXJVqBNXJtL1ki+b6/bYpG7bUEKQfwhNZpzZ a3uOCkI70XviEOKXz84lYMH6mTUDhpClvFsKRvwhgkJ+Wpn0hEOYuWvx0w1AE0MS WkTM4Ao7p+WcZlOT9/4NiiGwVKK+zzU1Z4VO3qqnB0t3MQ5g7bVbAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTw0Ygd sfhSKIcDw6ISbUKLn8ma8zAfBgNVHSMEGDAWgBTw0YgdsfhSKIcDw6ISbUKLn8ma 8zANBgkqhkiG9w0BAQsFAAOCAQEAUre9p20aa0PWiEupYeKLSLWkZfmxvGwj8GBE HpluIk5MyeugcLzBIlcaa95QTVD+bFDIR4w+PlOsZ/YUt7Akd+J9IM7EI6LogCkr oFC44G/WhrwQ+b4SengVioQfaWbIakbAcIn9fJqbbYHG1KiL6AGSd+hlpxSxTR6c N8YIaSfdL9qAoYwXcwMZir1YuCg8XFxo4hXCmRYqk+N/9Rgv8pe8S/vzQGary3lf iK6setOIxIZ2Y4jCz0/Fu4OdHDkMMYF+m3zPne/gyTCf/dGGFhxr4hg4hH/YpZuu r6ai3i7xm8BsEfIojxaCvbgrh+DJ0R+DjorVELMB7b+AU+iHqw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-17T19:01:25Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-17T19:01:25Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-17T19:07:23Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8230" uid: c25dc852-7a3b-45e3-a948-a8ff1e17686c - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-17T19:01:12Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"623ca6dd-adc0-41bd-a57c-030e8e2175db"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T19:01:12Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 623ca6dd-adc0-41bd-a57c-030e8e2175db resourceVersion: "3061" uid: b413d6a0-5ecf-4865-aa89-d126f0819d9e kind: ConfigMapList metadata: resourceVersion: "24661"