--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-17T17:30:08Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"c199bbec-41a0-46d2-9762-54093d026719"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T17:30:08Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c199bbec-41a0-46d2-9762-54093d026719 resourceVersion: "2241" uid: beae23ae-4440-4f03-a307-ba9bdd7fa061 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-17T17:30:08Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-17T17:30:08Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2238" uid: d72a7fa3-2c38-4778-aa28-1af0098529a9 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-17T17:30:08Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"c199bbec-41a0-46d2-9762-54093d026719"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T17:30:08Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c199bbec-41a0-46d2-9762-54093d026719 resourceVersion: "2237" uid: a78ed0f4-dfe3-44fe-9148-f81acb4dfbde - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIYA30UWf7X3IwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNzE3MjUwNFoX DTM2MDkxNDE3MjUwNFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd1AWbsGFSxh uuhY3Tpo+/cRKyOCrp8i8in2l/X+ouT90gB6t3sH1pELEuDtioAUJ36e7OgkE/x9 y1WxJc6TRNZ6Z2kFl/2xlK5Ef5O2dVAsginkjks/eAKir0ZPqkTAlPv6TyDhW8wi FVooih00BO6hD/BIToXclA4Zt806L2yhGpEsh0P9pwc3mCZUiM/UqjzepIQGT/eX KgXzG89J67Nkwlz/JPChTz0ZA3iJKUT2uZAU/KVwdzvIlcvmbi0kT30uXyeGkoIl 5eidcvTt1S56dk0mX8pu24/CCFre6J2KeEKFMbsiSAhZqPBwXT2wn4kbs9Qc7jDE YPSxGvuruQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAWh19tjx8defDl6kjII5JD8Ra/BuwSEoJegBaT6nvRaDnI9Jg /FKbJGNawhqbfLAWq77dwA8fQyQ2eoVwbUVd4jANBgkqhkiG9w0BAQsFAAOCAQEA ebaSTvHFi0vwKxt+2U0gIgwms1LADCcloM7+X7OxYVQBX8k1yozEFTXlEZdG/lH4 7VF3qLgXgMnrPmDYHWnTopWQQXIaqQ9ozlf0P/yOc8YZRe/xnUhFLxeYd+EJqK34 IrWh2JSvkcWuxuf566gVG1fTS67idtI5QlyT1sxPxHvBEIxypBije+ecDzfsUVVy pfGFPgrWvbzHN2hT8p5Yffb0YGgKBznzLyZlw72FBYG35i8lQhr/bNjwLsA0g7e6 OLIkbVo4RsMm9J2DnP+rm9DOYdpUQUW02OhYSAPlFRXIQv8aVpYVLiVPJjvLNd0c i1qPFjcS4QdILLTP58EIww== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIVM4skFb8rtgwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNzE3MjYyNVoX DTI3MDkxNzE3MjYyNVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOLvGFQUJljmalw7Gnk4KG9A8qRlRS5FoSfoZPMe2rXFr2NQKLsl2Ao5XuMjuRcT b2e2AS+7nQM/zHec7mnz46zBRio4XYHkxLxPHRjE/Bb+9QXxgWJWoouG4laP8A8E QEw5z0BsoA8a7uzqqlhVQIqyMpjvlLO4vf1baut/rLZtat2IsUBHZen19NPWEMEM Q8gJUkG56uSYH5Py0SsE50sN9AhzuKk9/A0NAjRvrgUAtrU/667fRwPnlN5hSySQ cy1wPyhTm0cxS+yQSg0BfcI8l8WEi0HZtkO39EqH2xbwBB9Gq/ZT+zKhEeyvA8rI bxO+dlIBbyW2Cv0z6bUxQDkCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRATwWDXdscgBZ2UKjP/GywBMIkV6rKNfp97fxt7krxzP/95jmOraqzbSI6 aoURIuvvCoMHluyaen2l2aE2YXOfKTBLBgNVHSMERDBCgEBaHX22PHx158OXqSMg jkkPxFr8G7BISgl6AFpPqe9FoOcj0mD8UpskY1rCGpt8sBarvt3ADx9DJDZ6hXBt RV3iMEsGA1UdEQREMEKCQCouYXBwcy5jMDIwNzQzZi01MzMzLTRhMGYtOTVlZi1i MzlmMzk1YTc1YTMucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAGqT4GHckvdkGijNDEjb6UAcZEUh6zZ8mJK1QUszlZ3nUw6fiUMRaJxAbx8t x9pwe5Gfjha7JG6+mkupOKegnSSg1RRNeOAhmpYIWT6MAWoBQhKlKpYoCywa6fpT h6byW8pK+Xe4G9FXiV9cDibuAdlcU/Vk1TgoEsQkXp4ghDA/nauZAz7hZk6rbhdk aJm0Yr4tCwlfH6RYAXWUPUEYKZURBE3zXZMfgKA8XCDkLDc+VLjpKPQuHOmqc7aS 26sEVAACLyXdT86LjAfCBfhibeb5uiZp/92e5YimwPTeww5qfKol1MIPuyBNpYaM tUkA3rmdd9gr0WSgFcjqyTihxIU= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-17T17:30:51Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-17T17:30:51Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4181" uid: 4726500a-dad2-45e7-9b96-d60eef46bedf - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-17T17:30:09Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"c199bbec-41a0-46d2-9762-54093d026719"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T17:30:09Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c199bbec-41a0-46d2-9762-54093d026719 resourceVersion: "2245" uid: e551417d-ba2c-4889-9a64-5ce60ed5e43f - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIRbL+Yh7NEY4wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTY2NjU4NDAe Fw0yNjA5MTcxNzM2MjNaFw0yODExMTUxNzM2MjRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk2NjY1ODQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdwxgJMVRkBUvTgQbQeciffascNWzMoxvz W8shCmJLJXTkoeJO13E0EFVYslkMvZk9Givpby3kcPTF1JdGgNWpEJTPLIdveAbP EK+piDPqnyBpMHtaia+D5X2QkLsLdR207aASeApu0P55zG/nfe5usFL83MqOpCyr Q5yY13jmGMwW98bOQA85ozRpr3H774gBnXsV1bz0on4hHUrw3R+xjRVvp3aKC9wu Xb+WZRz30FxOAnHZgOMV+luSed56omNmANLsG06OVmiAH5aUramLY4oG3N3T0lDl /2Rrztyhpx6GDYWgRtXx2OlST1vFxX0NeFxd21Qmuyl+X/nMBQDzAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRUsP67 b56zXJZEiyUmC2um2t5BZDAfBgNVHSMEGDAWgBRUsP67b56zXJZEiyUmC2um2t5B ZDANBgkqhkiG9w0BAQsFAAOCAQEAkpHcTYrJicV+8mYtd1iIJTc3/axFvjVa4MQP /VAlqR+nWARjVYipHIa+GtZ+AtxNK2Vg2JJhTf8N6/1UbSq2jJ8wfyMUYmqfjIBf yCKiGWZdc5odiLXhmfkPx5rivwfGOCjmRs3UC0Xxuun4nsf82hNl+DmPbvBF4khO wZJh/6x/PPSaEOhH6a+C/YB8p/XIMfQbxdTPFz1OhFK0sVYVdx8zJdcRFNQXNfrW 4qWlu6H1UaaFNCTSL65FRezWPWygvU58TlYusdF6xf1la6JYMkg+xTybI33rIjc3 3qUPtnrZOfa5T8a7LdotPzYrZ39kkXrG+rb/tkipI9ClFiSblA== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-17T17:47:41Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-17T17:47:41Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14637" uid: ebc87606-edc0-420d-a9df-81a1245789cc - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIRbL+Yh7NEY4wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTY2NjU4NDAe Fw0yNjA5MTcxNzM2MjNaFw0yODExMTUxNzM2MjRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk2NjY1ODQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdwxgJMVRkBUvTgQbQeciffascNWzMoxvz W8shCmJLJXTkoeJO13E0EFVYslkMvZk9Givpby3kcPTF1JdGgNWpEJTPLIdveAbP EK+piDPqnyBpMHtaia+D5X2QkLsLdR207aASeApu0P55zG/nfe5usFL83MqOpCyr Q5yY13jmGMwW98bOQA85ozRpr3H774gBnXsV1bz0on4hHUrw3R+xjRVvp3aKC9wu Xb+WZRz30FxOAnHZgOMV+luSed56omNmANLsG06OVmiAH5aUramLY4oG3N3T0lDl /2Rrztyhpx6GDYWgRtXx2OlST1vFxX0NeFxd21Qmuyl+X/nMBQDzAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRUsP67 b56zXJZEiyUmC2um2t5BZDAfBgNVHSMEGDAWgBRUsP67b56zXJZEiyUmC2um2t5B ZDANBgkqhkiG9w0BAQsFAAOCAQEAkpHcTYrJicV+8mYtd1iIJTc3/axFvjVa4MQP /VAlqR+nWARjVYipHIa+GtZ+AtxNK2Vg2JJhTf8N6/1UbSq2jJ8wfyMUYmqfjIBf yCKiGWZdc5odiLXhmfkPx5rivwfGOCjmRs3UC0Xxuun4nsf82hNl+DmPbvBF4khO wZJh/6x/PPSaEOhH6a+C/YB8p/XIMfQbxdTPFz1OhFK0sVYVdx8zJdcRFNQXNfrW 4qWlu6H1UaaFNCTSL65FRezWPWygvU58TlYusdF6xf1la6JYMkg+xTybI33rIjc3 3qUPtnrZOfa5T8a7LdotPzYrZ39kkXrG+rb/tkipI9ClFiSblA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-17T17:30:50Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-17T17:30:50Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-17T17:36:37Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8177" uid: 78cb4e26-aea1-4e01-837a-628b5e7862ff - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-17T17:30:08Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"c199bbec-41a0-46d2-9762-54093d026719"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T17:30:08Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c199bbec-41a0-46d2-9762-54093d026719 resourceVersion: "2243" uid: 0d8a0def-99bc-448a-9573-938ebc649c11 kind: ConfigMapList metadata: resourceVersion: "26111"