--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-15T20:51:58Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"0708f521-e2a3-4643-a57e-c69274a76d26"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T20:51:58Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0708f521-e2a3-4643-a57e-c69274a76d26 resourceVersion: "2329" uid: 425a4ecf-e826-48de-b74f-8737bbc8b638 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-15T20:51:58Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-15T20:51:58Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2321" uid: 3334c82c-f801-4770-8696-2f2a011cb2b7 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-15T20:51:58Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"0708f521-e2a3-4643-a57e-c69274a76d26"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T20:51:58Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0708f521-e2a3-4643-a57e-c69274a76d26 resourceVersion: "2320" uid: ad26338e-2193-42dd-a99c-4c32f91f0d42 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIDSsoac4xKrAwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNTIwNDkzNloX DTM2MDkxMjIwNDkzNlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0y1Ph/yw640 hXDUYqoZrg7PRz09A8GL2xyymHM5fZvL+2mnMEyuOfiXlb0bEKhvqlqaIty6X7Pr 0LqPdV42j1eqyEzeJM+jucfOm+/2tRcOhyyype9LvgRHVE3wbqH2BagaFZ537Rgt SHLlZL4CDfNKrD6AqWz87ZxaDcE6+9vwVxFFAp1NRiMEwKJewhfXuJsd94dZBxX0 oWtkWQeMcouNa5pbXAfVQYUV7nXstF3ZDvQunqGhTrhKT7m8eiqGVwz6GnZGdzaM F7l6lQVUeXtQ+5nrVlJY7TPX5YnDffDcQwjIFeuhbFvnSgC5HmUvohme4L896ISQ AzKtOzrE8wIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAbnWd+Onv0qr6hOQEEY43pZOvr7YUm3SXaho5evPoksCbjF8n YdZh73R9LvA6AYDOw3xQhxPOUaJyh6jADy+oyzANBgkqhkiG9w0BAQsFAAOCAQEA z0nN8LeKZ0SBsXwof49j11YbRHLr4plYIlpW/YhMUc8yztlv7XMcWyd9YdvwQlSz C7LSOZMl86xzk9cYKn5aUWXcoki1FVCr5Bad3p3Ql8E6TegIf6aamMp1zXtSAbkC 9Q9wYWlYlIem5H6aUrGDptvBXui6+/iko616d8as2rUHgLUc7/KFKYve7On3tDL5 z0Ta+diVE1jpQ1B8XgpWe7JGDZH5CxSDjfAOeKiw9ovPOHGddOft3JpooJrNWZ4R 4atP8HW6SCG9zwpXelTxl6meA9XOOoq52gysCNpF1PMC1otA8PkM73glyph8m4Sc uiMTSElIX+rGjYExZl1e7Q== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIc3kX5UhAqdgwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNTIwNTAwMloX DTI3MDkxNTIwNTAwMlowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALZByIN/HNLDmNouw+EsDX2g5heGibzQw6Vih/NjLvprTyzp1E12l+1iZJk1VJ7y CJgfJhce1Uf1clAzRsrZOQX0pKkwlsbqeh3n+AJk3Ac8st2OgS7XPUr3v2JhH1aL enSG5MD2IhukuyE6Cf5sa6kovRWlDNOGLix+peBPgr6MKY/nGFggYLCCSfCwKGO3 S1x8Sx9qfTXWtJyKDIzT76s5rQeAJMmz2VNzjQH7XMYRgI4uBQzWv2yqjzrUetZz uNmORX1GKX2mfKA78R42HxxkPeDuXQXI4KYd8XC48oGNdFmI5J2XldgDOjDqU/5o 3MebvaLOdubbSeYmeEZEOikCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAPKUlBAMSi16TWjg89wD8PIans1zu6i5zR6dxww+Dgt7qpUsUF6VoUJl2 v6/AtZaP3eFhJK5kdNBzVlHylcsG3zBLBgNVHSMERDBCgEBudZ346e/SqvqE5AQR jjelk6+vthSbdJdqGjl68+iSwJuMXydh1mHvdH0u8DoBgM7DfFCHE85RonKHqMAP L6jLMEsGA1UdEQREMEKCQCouYXBwcy4wOGJjYjYwNi1hYTQzLTRjYzUtYjlhMi1m Y2JlNWRlOWQ4NjYucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBADG8qiukIVy71G2pyY0TAR6dKpLPXG2D62XeLQLv0aetg650FjSGp4bkBfRj ijNjkhGFfcIA9JmZWDHDbhF/roF3YOauD0xLWN1ajpC7OS8W13KR2c+/rjxb1b7C ebo3I6+y0adLaHR1/lxyVHFXTK/Xvnmj+nj7iVBOoRKEDI45WCnbFXXCFXMHZgAq Gp3hh5xNft3H+DvVgtvqJtx98XUKcGMwpwdSMUboZnIv1ODb2QVJmEucwzgvtUb4 tDXf66neFgTHSHXOIE+ENM6jqOt/T74/6v7XbO/nnp8FW/iMDdNno3HKJVNcuxo5 3wf/lE1uY+rlbj8Jzo5crwihFok= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-15T20:52:13Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-15T20:52:13Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3070" uid: fc7fbcae-0c3c-4f5c-9386-88f6f460ab03 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-15T20:51:59Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"0708f521-e2a3-4643-a57e-c69274a76d26"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T20:51:59Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0708f521-e2a3-4643-a57e-c69274a76d26 resourceVersion: "2333" uid: 47bb29c9-0797-4460-a210-2974a9051309 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIDB28EKpJOAswDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTUwNTkxMjAe Fw0yNjA5MTUyMDU4MzFaFw0yODExMTMyMDU4MzJaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1MDU5MTIwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu1VFUjmWJnBb3ucPt+xZggYlOHlgEg/GV Saba/AFJh9zfk//B8H1uOHI/dovfgrQXUQ9pCbExvFfhhRuH20wO39Buk3lgsewd IXwytWyads9wbqF5Fv5ilrk9EPhCkBLOxWPe9R1OJCjw1O19GlIAxqAQb0gAVQ1Z I86c9rBz1cEsL0Yd+z6E2B1wEQ58RZPu0iXU46UItNiN/YcNkKQ8LaHe0PD0R1Dt Pbgix8t6emIjV1v4Vl2PnLmsU8gaYC+qg8sph8XLxg1VZY/RAJ3e6hD185mqs6z6 jARf3rh0jwy4xfeZSMAxdvug8ZvQja32UHTeo5X0yjNlIOHTOCR7AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvRkgi 2WN2FCEbXfBOR4SE1OaZHzAfBgNVHSMEGDAWgBTvRkgi2WN2FCEbXfBOR4SE1OaZ HzANBgkqhkiG9w0BAQsFAAOCAQEASAsliB7NUdCVoj4u7YLXtULv+dOX95WbU672 2SIrbzOpXBh29O1QcY0Fe14Ktuw71C7o1JsTCCdtWsYiBi3rmng5B7E5LG8PfWub 8s0xw7HoSdd21HfD8GlR1V7C+BLBQptd7htkrRWKdgUuGX+zs+jW+M0vK7MvPo+z eilbSG1W3vu92z1F6ymHcivswHZTc4uVRLYN2+HAHHG8hsowCcX9iVr3F908Dffu EiNG9/hVhuB/ax573VauEQqECPAkPgVyf3SQ/C2Jjhe+XPi9GqSBvxF/+uHuGi78 vWMO+RFDsK81FeIeUW7SHitvYC7+waBLxZdpX/e79JT/yCU+mg== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-15T21:03:10Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-15T21:03:10Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14584" uid: 9199b0e1-4d4c-41c0-acd9-a1fa0dfb6442 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIDB28EKpJOAswDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTUwNTkxMjAe Fw0yNjA5MTUyMDU4MzFaFw0yODExMTMyMDU4MzJaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1MDU5MTIwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu1VFUjmWJnBb3ucPt+xZggYlOHlgEg/GV Saba/AFJh9zfk//B8H1uOHI/dovfgrQXUQ9pCbExvFfhhRuH20wO39Buk3lgsewd IXwytWyads9wbqF5Fv5ilrk9EPhCkBLOxWPe9R1OJCjw1O19GlIAxqAQb0gAVQ1Z I86c9rBz1cEsL0Yd+z6E2B1wEQ58RZPu0iXU46UItNiN/YcNkKQ8LaHe0PD0R1Dt Pbgix8t6emIjV1v4Vl2PnLmsU8gaYC+qg8sph8XLxg1VZY/RAJ3e6hD185mqs6z6 jARf3rh0jwy4xfeZSMAxdvug8ZvQja32UHTeo5X0yjNlIOHTOCR7AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvRkgi 2WN2FCEbXfBOR4SE1OaZHzAfBgNVHSMEGDAWgBTvRkgi2WN2FCEbXfBOR4SE1OaZ HzANBgkqhkiG9w0BAQsFAAOCAQEASAsliB7NUdCVoj4u7YLXtULv+dOX95WbU672 2SIrbzOpXBh29O1QcY0Fe14Ktuw71C7o1JsTCCdtWsYiBi3rmng5B7E5LG8PfWub 8s0xw7HoSdd21HfD8GlR1V7C+BLBQptd7htkrRWKdgUuGX+zs+jW+M0vK7MvPo+z eilbSG1W3vu92z1F6ymHcivswHZTc4uVRLYN2+HAHHG8hsowCcX9iVr3F908Dffu EiNG9/hVhuB/ax573VauEQqECPAkPgVyf3SQ/C2Jjhe+XPi9GqSBvxF/+uHuGi78 vWMO+RFDsK81FeIeUW7SHitvYC7+waBLxZdpX/e79JT/yCU+mg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-15T20:52:12Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-15T20:52:12Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-15T20:58:44Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8054" uid: dfbd5e3c-95dd-445b-88dc-d3f80af295b9 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-15T20:51:59Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"0708f521-e2a3-4643-a57e-c69274a76d26"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T20:51:59Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0708f521-e2a3-4643-a57e-c69274a76d26 resourceVersion: "2331" uid: 9bd18e4b-4cda-4ba6-a165-485f95b5f12d kind: ConfigMapList metadata: resourceVersion: "68444"