---
apiVersion: v1
items:
- apiVersion: v1
  data:
    cnibincopy.sh: |-
      #!/bin/bash
      set -e

      function log()
      {
          echo "$(date --iso-8601=seconds) [cnibincopy] ${1}"
      }

      DESTINATION_DIRECTORY=/host/opt/cni/bin/

      # Perform validation of usage
      if [ -z "$RHEL8_SOURCE_DIRECTORY" ] ||
         [ -z "$RHEL9_SOURCE_DIRECTORY" ] ||
         [ -z "$DEFAULT_SOURCE_DIRECTORY" ]; then
        log "FATAL ERROR: You must set env variables: RHEL8_SOURCE_DIRECTORY, RHEL9_SOURCE_DIRECTORY, DEFAULT_SOURCE_DIRECTORY"
        exit 1
      fi

      if [ ! -d "$DESTINATION_DIRECTORY" ]; then
        log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist"
        exit 1
      fi

      # Collect host OS information
      . /host/etc/os-release
      rhelmajor=
      # detect which version we're using in order to copy the proper binaries
      case "${ID}" in
        rhcos|scos)
          RHEL_VERSION=$(echo "${CPE_NAME}" | cut -f 5 -d :)
          rhelmajor=$(echo $RHEL_VERSION | sed -E 's/([0-9]+)\.{1}[0-9]+(\.[0-9]+)?/\1/')
        ;;
        rhel|centos) rhelmajor=$(echo "${VERSION_ID}" | cut -f 1 -d .)
        ;;
        fedora)
          if [ "${VARIANT_ID}" == "coreos" ]; then
            rhelmajor=8
          else
            log "FATAL ERROR: Unsupported Fedora variant=${VARIANT_ID}"
            exit 1
          fi
        ;;
        *) log "FATAL ERROR: Unsupported OS ID=${ID}"; exit 1
        ;;
      esac

      # Set which directory we'll copy from, detect if it exists
      sourcedir=
      founddir=false
      case "${rhelmajor}" in
        8)
          if [ -d "${RHEL8_SOURCE_DIRECTORY}" ]; then
            sourcedir=${RHEL8_SOURCE_DIRECTORY}
            founddir=true
          fi
        ;;
        9)
          if [ -d "${RHEL9_SOURCE_DIRECTORY}" ]; then
            sourcedir=${RHEL9_SOURCE_DIRECTORY}
            founddir=true
          fi
        ;;
        *)
          log "ERROR: RHEL Major Version Unsupported, rhelmajor=${rhelmajor}"
        ;;
      esac

      # When it doesn't exist, fall back to the original directory.
      if [ "$founddir" == false ]; then
        log "Source directory unavailable for OS version: ${rhelmajor}"
        sourcedir=$DEFAULT_SOURCE_DIRECTORY
      fi

      # Use a subdirectory called "upgrade" so we can atomically move fully copied files.
      # We now use --remove-destination after running into an issue with -f not working over symlinks
      UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen)
      rm -Rf $UPGRADE_DIRECTORY
      mkdir -p $UPGRADE_DIRECTORY
      cp -r --remove-destination ${sourcedir}* $UPGRADE_DIRECTORY
      if [ $? -eq 0 ]; then
        log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY"
      else
        log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/
      if [ $? -eq 0 ]; then
        log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
      else
        log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      rm -Rf $UPGRADE_DIRECTORY
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        This is a script used to copy CNI binaries based on host OS
      release.openshift.io/version: 4.21.24
    creationTimestamp: "2026-07-16T16:47:33Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:cnibincopy.sh: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"158defd4-904a-4b5d-8e0d-3bd852344174"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-07-16T16:47:33Z"
    name: cni-copy-resources
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 158defd4-904a-4b5d-8e0d-3bd852344174
    resourceVersion: "2579"
    uid: d8842010-6b03-4899-b1dc-5e0b43db8006
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.24
    creationTimestamp: "2026-07-16T16:47:33Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
      manager: network-operator
      operation: Update
      time: "2026-07-16T16:47:33Z"
    name: cni-sysctl-allowlist
    namespace: openshift-multus
    resourceVersion: "2557"
    uid: 46382c32-c853-493a-bb36-41536a934a8e
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.24
    creationTimestamp: "2026-07-16T16:47:33Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"158defd4-904a-4b5d-8e0d-3bd852344174"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-07-16T16:47:33Z"
    name: default-cni-sysctl-allowlist
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 158defd4-904a-4b5d-8e0d-3bd852344174
    resourceVersion: "2555"
    uid: 5adc71da-4283-4afd-a6f0-82a2d0ff4e0f
- apiVersion: v1
  data:
    ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDPDCCAiSgAwIBAgIISM0TLJwIZfowDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDcxNjE2NDQwOVoX
      DTM2MDcxMzE2NDQwOVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy
      b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/6Rqlbw3xFa
      aJq8zzD4iQPIckj23Jqs+fD4UsZqtOuGDc2BWxyNd2QaFKROljCMncBSWtl/A+0X
      eCLY6QH0+/tCjk5UlZekqTDjzxwYeAQtlMX9nwIPiX//AbcqimvDq4wG+M+QQ+KR
      QUN5QEKqfqzovGI2J6+U4X1R5PwwScHS+6ieu27ToDIC4pWdZlT5M7Ydq5p7GQbk
      7l3ixy0G0fxoYqh8wlVWikDeDdjMCJW0qKtd+k3xEa8V2gPqYsTmunLBy3o4Qpmw
      Iwtu/nEddvvcbqhJVXaplGKdX1crRNSsUCCYwYRu+BaUQAZzVUSzvKIz9CnrAkmY
      /z/9FfdpEQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB
      /zBJBgNVHQ4EQgRA6QeJYIAyS8U+P1C6XgrO/79AayZzL+IcEVImd3AqiKn+D7Kf
      o3N95dKjrKc6ovV5l/XVXgY2+hMiDrmQS+ajdTANBgkqhkiG9w0BAQsFAAOCAQEA
      kdrvHUwJsI4VR+KUIWZj5nADa4ITbWy5Y91AxjQE/eWWG41Qf8lFSRLtAE6vTYNt
      rxQksv9tc7g1nmDfyYMiJexaCYBV/z4xdntR5oONKkEGo1aawiJtoXQwiuSKBsqK
      Ii7UB1eCpavhQpXy19Y8a1HOtSNh0I4nGnRwLFy6zR8+Cg+LWeMK6bWdSFty4/pt
      Rw/HVlOa63Mzt1AtGDOvS++S7HTyFxD3ECv4lHnEmoNKh8eHtGIyPwWsfE3p36B4
      UDQH7AuHA2IrbhcwLuRK2ZL2QBdwbG0KaTgbjNyJnQ4BDN2cr6f1Wh32kWr5CoX5
      P2KRBMC7dYWNdmTuH7us6A==
      -----END CERTIFICATE-----
      -----BEGIN CERTIFICATE-----
      MIIEADCCAuigAwIBAgIIK6kwiNaCwkYwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDcxNjE2NDQ1NVoX
      DTI3MDcxNjE2NDQ1NVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv
      cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
      ALmbf7pt7avA7rIyKIXoJnlZIWTBnM2eUGJc2SEioiBexaDahm/Tu0pg4xpDJGTe
      8FKvTsvply3G40HkdlrgnDBHwrNdcIpQ/Fd/S308LTy7Pxl4+Ony04903pyZ+7T2
      XJsYUMQWZCk+lrRyJ4p5UXkhWdlL5EBLki6cBNq+9vUDUxSSQ7rqOfU+RxeG4xzb
      lBRyDjkLwgBTLQRx/yLVdYEnoEDNAl7nZQ822wnTnSbsvrZWfdMG1G5mMq2puNfi
      /1Y9KUDIym5asThtKI40vPX5k3fRBUKKms1u/zieWCX/Y5p+mZ8KXw3eIeammq4y
      nUQXqOdnVJC/34B4KtkFN8cCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd
      BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV
      HQ4EQgRAjZ2uZ09Ahft6df/Jbw5ENSp1qm9s04e7aMX+WwtbrZxj8nTxF/IRLoBW
      bcYakpcebj2viRTUpmxlUAi3RevOejBLBgNVHSMERDBCgEDpB4lggDJLxT4/ULpe
      Cs7/v0BrJnMv4hwRUiZ3cCqIqf4Psp+jc33l0qOspzqi9XmX9dVeBjb6EyIOuZBL
      5qN1MEsGA1UdEQREMEKCQCouYXBwcy41MzMxZDUwNS1iYmQwLTRmODMtODlhMC0w
      NjI4NDE1Y2M3NjIucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD
      ggEBABx3G9kv6uEDAMteGW1Xk7jU9J4I8dDu51EU0eorOrHlfwCJoB/CxPxvqAEq
      sQ1cB359UYrtA/LsZkO9XDFjFeRStXZNQkJRUyT1osWfNnOY4b8AVxXdNfxiJoRs
      e1OvFAksLAOkJcFq8fmpjsN7I1KFTP6hVm/MLnBJvaPvjGfCtj4940jW6h/dT/XS
      dg7BnnnkAI7fyJIrTMS/t6281gzh0Uv7jW+xZ2splsHGLap9dW+DrSBN5ACt9FzB
      kJwSBpCVHKvLZ8xjUuCUt6WrbAnFEeW0TcuNtyBrO/nccKHH8YwORhZQHXm6Ia2k
      TmCkS/6D/iyVEwq2BsOXm129SE4=
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: Contains a CA bundle that can be used to verify the
        kube-apiserver when using internal endpoints such as the internal service
        IP or kubernetes.default.svc. No other usage is guaranteed across distributions
        of Kubernetes clusters.
    creationTimestamp: "2026-07-16T16:47:49Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:ca.crt: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-16T16:47:49Z"
    name: kube-root-ca.crt
    namespace: openshift-multus
    resourceVersion: "3810"
    uid: f5ec02d2-97bd-4bde-bfe0-f9d8378ceb74
- apiVersion: v1
  data:
    daemon-config.json: |
      {
          "cniVersion": "0.3.1",
          "chrootDir": "/hostroot",
          "logToStderr": true,
          "logLevel": "verbose",
          "binDir": "/var/lib/cni/bin",

          "perNodeCertificate": {
            "enabled": true,
            "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig",
            "certDir": "/etc/cni/multus/certs",
            "certDuration": "24h"
          },

          "cniConfigDir": "/host/etc/cni/net.d",
          "multusConfigFile": "auto",
          "multusAutoconfigDir": "/host/run/multus/cni/net.d",
          "namespaceIsolation": true,
          "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv",
          "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf",
          "daemonSocketDir": "/run/multus/socket",
          "socketDir": "/host/run/multus/socket",
          "auxiliaryCNIChainName": "vendor-cni-chain"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-07-16T16:47:33Z"
    labels:
      app: multus
      tier: node
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:daemon-config.json: {}
        f:metadata:
          f:labels:
            f:app: {}
            f:tier: {}
          f:ownerReferences:
            k:{"uid":"158defd4-904a-4b5d-8e0d-3bd852344174"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-07-16T16:47:33Z"
    name: multus-daemon-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 158defd4-904a-4b5d-8e0d-3bd852344174
    resourceVersion: "2630"
    uid: 0b2eee9a-eac5-47d2-93fb-f2479f2bb8d5
- apiVersion: v1
  data:
    service-ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDUTCCAjmgAwIBAgIIGTKsi1z1xogwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE
      Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4NDIyMDgxNDAe
      Fw0yNjA3MTYxNjUzMzRaFw0yODA5MTMxNjUzMzVaMDYxNDAyBgNVBAMMK29wZW5z
      aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODQyMjA4MTQwggEiMA0GCSqG
      SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmcWeRQ1yP9B2RJCvxWOKXsw5BP7tApg3h
      D2KIoRhuhF4PfKw5AY5nFh//4LnDXFe4LUJbRkCtsD5g4IVg32YYpn/HLBlsAA8m
      3/pL+RvcBjprr9DTYolpuX7a8MCVz56WsSgImmQGrcQzZL/zic+mzFtP5h29n+0S
      dDGk30sH9HmuBmorarihNqdr/NDgK3B8EjRClD+3ntHBAv+8+jsRkhScmiIbMW9m
      o9uGOPgnFwqXxuoUhvYpP6iLAyS7CrMqvANOZ4DcP9Lsp+cTzzawXrsO/sE+Ndk8
      SNGOjFg2f3YM1c+l7R2KgEm46SC3AW0iEf4viqH81xQIhvrYl46JAgMBAAGjYzBh
      MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRA7O5r
      O6Q4ervnvhHKzRp4iwP66jAfBgNVHSMEGDAWgBRA7O5rO6Q4ervnvhHKzRp4iwP6
      6jANBgkqhkiG9w0BAQsFAAOCAQEAoXeRaWfwn31VGFy60uSZ3UlZeaB1BtySQKU/
      HpXecq/NyxNxOskvKXEJeOLqtvolFziLMAZC0TRQ4P5DGib1wG2UPg1hRyKCTmYD
      DI8gt4ftFsfPxni0b/y+7s6AEIyUsrLevFxH5zsDh9hoP0GFiBoU3JLk/O6/Tgrs
      8ghUbGnDSC/+TZC0/Wu98DrDspZ70vgOoH8TqOKfKZ9Lhos0BKvuH4+qWLZvdbPx
      GzaJMyQFSu6S8zH+sCGR6uCE1jZU8MmghMSqZzXp8nSRfjRB/y+pBo5/LsrCE26J
      GrWJJw5VVEuCgkATim4hKYOMDwxhuVLOd603oT1Mi5wIZB+Rag==
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      service.beta.openshift.io/inject-cabundle: "true"
    creationTimestamp: "2026-07-16T16:47:48Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data: {}
        f:metadata:
          f:annotations:
            .: {}
            f:service.beta.openshift.io/inject-cabundle: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-16T16:47:48Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:service-ca.crt: {}
      manager: service-ca-operator
      operation: Update
      time: "2026-07-16T16:53:51Z"
    name: openshift-service-ca.crt
    namespace: openshift-multus
    resourceVersion: "7959"
    uid: 24b7a8ce-5bdd-42c9-b2f4-edd3ce15c334
- apiVersion: v1
  data:
    whereabouts.conf: |
      {
        "datastore": "kubernetes",
        "kubernetes": {
          "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig"
        },
        "reconciler_cron_expression": "30 4 * * *",
        "log_level": "verbose",
        "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-07-16T16:47:33Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:whereabouts.conf: {}
        f:metadata:
          f:ownerReferences:
            k:{"uid":"158defd4-904a-4b5d-8e0d-3bd852344174"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-07-16T16:47:33Z"
    name: whereabouts-flatfile-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 158defd4-904a-4b5d-8e0d-3bd852344174
    resourceVersion: "2606"
    uid: 3818e1c1-a642-41bf-b4ae-7d10a0dccc39
kind: ConfigMapList
metadata:
  resourceVersion: "16455"