--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T18:22:40Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"1f091a72-6af5-4f12-837d-a9bc6b0817b6"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T18:22:40Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 1f091a72-6af5-4f12-837d-a9bc6b0817b6 resourceVersion: "2328" uid: 188fda8a-010b-4f05-8e25-12dcd118d772 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T18:22:40Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-16T18:22:40Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2324" uid: 6e984632-28d2-48b3-942c-d6c35f04fd7e - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T18:22:40Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"1f091a72-6af5-4f12-837d-a9bc6b0817b6"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T18:22:40Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 1f091a72-6af5-4f12-837d-a9bc6b0817b6 resourceVersion: "2323" uid: 9dc1a936-0d53-4a07-b38b-414428cf3ddc - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIamEArbx3jl4wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjE4MTkyN1oX DTM2MDkxMzE4MTkyN1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zsvDjzvvuQ7 MtRkgy8QqWYnjSq3WyZeQcym8N+4spvkFswgdY3s4Wq2KS7BiOI/nVGdyZJJkYSU dF8GACbfsIUBRNAJkE8dPShHH4JJR16hvUgom/6j8Onczf4ETGxLOFPuHEtbcldF 693QTL8bdY//6wol8bxsqO0PRM8vtNa57hDny54dluiw/Y2Yb/q5s5+TKWUae8rr VFakmfN0jQEJhC4Exw0B/npGgjFZFLr7lx9vigrtGag1RywfapZGat/8+dah+3H4 jsXyeJ+D5BzjIgpgfkL96KLNkKjCox7k6Lu6SfWp7h5CEZCPtgPMU41v1C6AkGjR gNIt/C5n9wIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAykpRqQG4dGOLOGKJbgLeR/I7uSB07d1++uPLSX2eyYsn/6tm 7M2YfJwrKNSsjSSmTpRnvCwJucbv//vuzHkblzANBgkqhkiG9w0BAQsFAAOCAQEA vX6459No1RUC1lY7vF/lfWlGuLagu89BkmFbtBCAsV44QtrD+f2a9rK/Sg9oLoyk HGYaZ+eimt/HmU4zjoYExG02S4drEtAJ8zqBEp1eRmJ5uezzhnBD+BFPcIKjfEZT V6PWrmGoLp0VgnlmzQHrizCJmDPjQx3GND841JOTFeMfLLk0xL6oMsXagkgSSzO3 BNlQXPDc4Xpn+zKh3/h1VthJJbYnJq7FOqLyOeOaHGixYQRVN1nfbbcPNDE+AQqa C/cvw/RG2df9RHambpPw1u0k0oDtNBbS/mvNuMvaaRXGFgQipiYPfpIxYwbBDsGS keVvpRzhk2rVER9vZSKP8w== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIISnh4YAi1IoowDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjE4MjAyOFoX DTI3MDkxNjE4MjAyOFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANmsby1Csm8ufk34czMYTZ7qcnWaPNPcBTpFNMQraWN7NUo2EaOQE5cda0EOHdpa FIUV9gOTnKgKGr8RT2D34ImcSsY8PyUhCNnpReNhtjqWfSd/obVqewuFPEMK2IKD PfgN5KwQY5kYRTWGY35LnGSXzvDMxlTulblmbLKK4IO0FExOCQXxwqxTo7DfucUB hjExvGCnLWTfyj7uDi22NhkqIEzt3gz/gy97oQtUepfPck8FNqfat4gf0SJBQYT5 9nya9EBOEncM37hWTueu0A8gMr3dr8N+8VFrcs0Yb4ec8KxT+aVtxKO2+ZaUxJjt Rtzl/wwjJgiyuIB//YD62ksCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAjS0OiW6E91AYW9KuUOmrYyvuGkPzuPDT9uIEl4fpajBUWNHANyUkeFdU FvjqkUBoXsw3Hd6wd+2akBL03YmtjzBLBgNVHSMERDBCgEDKSlGpAbh0Y4s4Yolu At5H8ju5IHTt3X7648tJfZ7Jiyf/q2bszZh8nCso1KyNJKZOlGe8LAm5xu//++7M eRuXMEsGA1UdEQREMEKCQCouYXBwcy4yM2IzOGQ5Mi1hZjE4LTRmYzAtOTRiMi1i NzZlNjY1NTZlZDEucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAI/dOw+mYKXEYVIvfuMzGQzS+SZd27dKXNcBJFFEBgM+WDxcdk6pTWZqj66j Ob5DK+CUMFxO5uAylWbFp1nnE49XZr6fNN8Z32O8tdXSEUL698HMWpj47humVrgk KRt8RtuyMV2tK55wfROAuku1CT6UPxYYnTzH9WCfXk0NBYSX/5HnohvbnX3tKa/a JWnZJ4uDOkSt7eXhVWlcAKLHIcV+N1t6UvS3Lup/MB04AEmAaBzRgr60r9NnUdLJ iLPWLpDhMIZ74JQ8MbSHiXu/oCPJtgcV60ErGKLVnOY3DnY+TOartKwwcumQwELQ +PibncETOrqrVJA4E4xUfi9RYFI= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-16T18:22:37Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-16T18:23:03Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2974" uid: 2178393e-726f-452e-8b41-15b410975979 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T18:22:41Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"1f091a72-6af5-4f12-837d-a9bc6b0817b6"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T18:22:41Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 1f091a72-6af5-4f12-837d-a9bc6b0817b6 resourceVersion: "2332" uid: f1a3fb3d-95c7-4b96-a598-ef0ba164f76a - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIXj7UmuAmFxswDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTU4MzMxNzAe Fw0yNjA5MTYxODI4MzZaFw0yODExMTQxODI4MzdaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1ODMzMTcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSZkjZgvDjCUB7m57c8d0rvxYq4d3nzs5v POIRCsuusC6J18ZbT2jqk1KS8crclFlyHTfMDAioNYU4BjR0P6utUWfHvfjDe/V5 2eRlcQiUTZlvOKp34jPCJMMeDHjs1VvDWZh7FePeseWS4fofUxpcDaQrtnYRAOdv mK7Va5M7D95rlAcXbXZ8SnExWeYyTuCZK+ehXeK2q3hyYeHelUhLXDLRPDW7Tb90 ZHrDTDqh6z/TmOQjypv4jXwP9KniHmKzFNMCtbYi+3NZdZs54vSz5bNIZ4AgYj3T 6/iCmNGIX1QB7c3g4hgl/ijv5kapf4uPHSzksHtJH6OZH+PqF/TxAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQcFrfy 3x7Y1oc9LHNDSMdQu66meTAfBgNVHSMEGDAWgBQcFrfy3x7Y1oc9LHNDSMdQu66m eTANBgkqhkiG9w0BAQsFAAOCAQEAeh6JBmny/czjzfeFIXwNhaaeipqCR6fAnOlL zoaz3V/vrsIe1gQ/LInhS0tDjVZ8u2oTifQQzeBUjMeHnZt3QFSdTaFcG6vuCwD5 fhD85Tq7EeRWcfYh3Fj1DBbyq4+TmCCGxUlVewuV9MzWRy+aDHadneLLqrj4CSHP qBKJ9VEZcS9wAnSYNo6bZed3DmsO/yd/EBXwPaiq4r1f7tt1ryo/cIre2yZ735Xz qiHRSP96qBU2d+nihZOAH69SmUbJpS74Y8YFSKu8uBAv2sx52xhb/44+IQAJs8DG +uYVWstXtgntoVdE7kAu0Qr6vdCcnlEcGam1m/2Q5iEfbRC/2g== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-16T18:33:28Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-16T18:33:28Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14396" uid: 1e0823c4-e188-4e0f-9dbc-2409b7adc9c5 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIXj7UmuAmFxswDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTU4MzMxNzAe Fw0yNjA5MTYxODI4MzZaFw0yODExMTQxODI4MzdaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1ODMzMTcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSZkjZgvDjCUB7m57c8d0rvxYq4d3nzs5v POIRCsuusC6J18ZbT2jqk1KS8crclFlyHTfMDAioNYU4BjR0P6utUWfHvfjDe/V5 2eRlcQiUTZlvOKp34jPCJMMeDHjs1VvDWZh7FePeseWS4fofUxpcDaQrtnYRAOdv mK7Va5M7D95rlAcXbXZ8SnExWeYyTuCZK+ehXeK2q3hyYeHelUhLXDLRPDW7Tb90 ZHrDTDqh6z/TmOQjypv4jXwP9KniHmKzFNMCtbYi+3NZdZs54vSz5bNIZ4AgYj3T 6/iCmNGIX1QB7c3g4hgl/ijv5kapf4uPHSzksHtJH6OZH+PqF/TxAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQcFrfy 3x7Y1oc9LHNDSMdQu66meTAfBgNVHSMEGDAWgBQcFrfy3x7Y1oc9LHNDSMdQu66m eTANBgkqhkiG9w0BAQsFAAOCAQEAeh6JBmny/czjzfeFIXwNhaaeipqCR6fAnOlL zoaz3V/vrsIe1gQ/LInhS0tDjVZ8u2oTifQQzeBUjMeHnZt3QFSdTaFcG6vuCwD5 fhD85Tq7EeRWcfYh3Fj1DBbyq4+TmCCGxUlVewuV9MzWRy+aDHadneLLqrj4CSHP qBKJ9VEZcS9wAnSYNo6bZed3DmsO/yd/EBXwPaiq4r1f7tt1ryo/cIre2yZ735Xz qiHRSP96qBU2d+nihZOAH69SmUbJpS74Y8YFSKu8uBAv2sx52xhb/44+IQAJs8DG +uYVWstXtgntoVdE7kAu0Qr6vdCcnlEcGam1m/2Q5iEfbRC/2g== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-16T18:22:37Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-16T18:22:37Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-16T18:28:52Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8036" uid: 89cc87d3-bb2b-4af4-8d9a-2cfd1ed3768a - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T18:22:41Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"1f091a72-6af5-4f12-837d-a9bc6b0817b6"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T18:22:41Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 1f091a72-6af5-4f12-837d-a9bc6b0817b6 resourceVersion: "2331" uid: ba877656-e14b-4d1e-b079-485cb4463553 kind: ConfigMapList metadata: resourceVersion: "93951"