--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-20T01:46:32Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"6cea7019-6f77-4acb-be33-fc28d7a14970"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-20T01:46:32Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 6cea7019-6f77-4acb-be33-fc28d7a14970 resourceVersion: "2324" uid: 1ba58366-3116-4f81-b8ea-5b81485f5988 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-20T01:46:32Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-20T01:46:32Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2319" uid: 60ed3a13-7fde-468b-aec7-519ae3507a5c - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-20T01:46:32Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"6cea7019-6f77-4acb-be33-fc28d7a14970"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-20T01:46:32Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 6cea7019-6f77-4acb-be33-fc28d7a14970 resourceVersion: "2318" uid: db058272-d8c1-46ed-81c1-b1058821027c - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIXNzg1VNDHQUwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkyMDAxNDQxOFoX DTM2MDkxNzAxNDQxOFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplVfUqmxa+Si PppFQNyaUep/UX4Hm0RdaJ2Qeg5THkrklqW2FKYi1f6rIux458jgH87MRviknRID 3QEHPLQilmTKta/9vTigxOABV/iBKfhsoCLSUfwsgllRWD7tNaUkne++qSv9Zzo+ +UEvNu5JaQTWkfQxAvM7ng6rYikcys+FzBqGxm/nzQtmA91/72dFbOXnF45XIIgH UZgmj2jn67S427ybJd/dRgQsV2T/p/OFMVsRf+cfAQOlFvq6KvD6ApLgTuDX2VEw OtCWQBk3EpquLfREYHTVkIBTJJ8jRqe8eQ1B371oRne+poAlB6ecRkq94ONE2BbN tXOuHzYkWQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAz94JhC8lYMb2XrIKEZiar3opewuiKK7uxH+0wzX7v+xXuLM8 JqfR54y3tOTfWpmp2Pv/r5a6m27dZ4TR0Be6MDANBgkqhkiG9w0BAQsFAAOCAQEA Y43gTkhLEam3XVEvhy7/GbXwC5UGw76+Tmx99I+29Lg1DopqhreVH5q38d5cDahP DSLBDUYuGpDXQnX6ok2VsY4LZg6vm+W3cBhF3715odXDjVWVejtCJR52F8d9H4VE rRHWj/PxfXWtRxXytaklQVr+ZcWM05/4ieWkA0dWpUJZxdKIHDpCg0n64KUEixQV ALH0aHTyEYQm/FXGEb/luFHvXGJXUcoIdlVu6JtIsKVX2+MMAmSb+3hbSySSuwbD te+h6KMpvmKX05Gu0J+kSmV4mvCDDc5/YyciI+5bibke9ETHn3nPHKeeex3kusKv 8F7lTPe8gnODVDVS7qrcIg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIOJlwsTN1b9QwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkyMDAxNDQ0N1oX DTI3MDkyMDAxNDQ0N1owMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKuPvt7RsuH0ndcTqB443ix9koGMvlIouExDmoMHKvALp22FKkOjK2Oq3aitWdQT VPN6AH78wsiLla0Z+nocWOQCSN+fEEBY6QkwRtuTMezrLRslxJOEnmJTkLUuCYFj 1mxtHFwx08125bypltQftnD2LIEJIaYiqp6uT/p8/kZ2MnvvxnapoDsjEqfHdbpF DjhbiTnISvY+B6+sBEUYcEnpDH9siXpsBGp/40BYe+f8Qcq+29tD29monyiJhTAb W46+/dyKK8Irv3+oTBp+gZytS4rm87pB346ytHyQquWjp6/9TyUV/0F5LDISKqCZ Fds3yP5NTImbWF+R8eenbncCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRALiFu94LyPL9yxee/rAJsTQVepSHKKe81o3BtS9bmiFeSzk8KRKbdH3oY V3vngpwYyCUpqqsbTJeX40+rYjpY0jBLBgNVHSMERDBCgEDP3gmELyVgxvZesgoR mJqveil7C6Ioru7Ef7TDNfu/7Fe4szwmp9HnjLe05N9amanY+/+vlrqbbt1nhNHQ F7owMEsGA1UdEQREMEKCQCouYXBwcy5lNDUxZTQ2MC0zZmE3LTQ0ZTMtOGI3Zi0y YzRkNzZjNjk5MmEucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAJ4XiDqpkhi8L8DvX1upv99G6d0N3baHVir2g5SoOM+b9HkqR/5DNhEEQ0s4 SwAV/p/Zcr+GRjQBp3HxjTLJj1aKy/cJS0VcAEL5k4PIFT4yYjVyrcoLT9eSCnEW 6JmE7SzvLjpxs3WIUO1PeWkfTGc5DtXhK4ry7nThM0j8zOmbpvkBFwgKeKT425L7 5eC0ruhLCibaI4Md4aIaXNcfus4ynbrBfSrtHwiyj0YUWBShF+lcSPaKy68avD1b mG/+28ZIZyRBgJvuhP1r5tBpsj4jLF1kySu+JBfAHG+P03bhrz264CvhduygZP61 1kVVedhjekieJTMupAyn93tsyMA= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-20T01:46:29Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-20T01:47:22Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4343" uid: a3eb74e7-cd38-48b1-a53f-6330e1d0948f - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-20T01:46:32Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"6cea7019-6f77-4acb-be33-fc28d7a14970"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-20T01:46:32Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 6cea7019-6f77-4acb-be33-fc28d7a14970 resourceVersion: "2329" uid: 0b5c5220-5072-4c14-80b5-d5181a043340 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIKQfgkdUUH2swDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTg2OTE5NjAe Fw0yNjA5MjAwMTUzMTVaFw0yODExMTgwMTUzMTZaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk4NjkxOTYwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC66fi8PdItseki+XiuUQOPfNnrDGaiZCCv Wc/jmU2PvtA4ka5Pqwt6BrFOiyTC/gG2hTB1IgBnZE1H37NO1pfVSfEXctBDi8KE DzU8py6Cbm3M/3x8pLXzphqPyzYZ59EH2mxVfldomChf9eP3hh8JrKwM4rsckM4R F2kW0Xvue4wJhPoZCtUwQPmyURfxdQFzL5bDe55yifBS91KqQ9plNEJjJ4gjkPhb 0nmGEGbDRqP1d9vHF7Oy2LqrUsbWtfwOnPFUXeu/+xXY9TC4wtuSR5fh03yii3gq J6wv+ESAuoS3IBIYS0x8/LNeyv8hFT/U53qb2q0w7cmjYzVOPlFXAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQc0nsw /NArOxn/Qjwl9sobEZDyjDAfBgNVHSMEGDAWgBQc0nsw/NArOxn/Qjwl9sobEZDy jDANBgkqhkiG9w0BAQsFAAOCAQEAk6olYeYTRyujA+3Emf1GkNJfeztCIzTbinS5 ZVgjXyZvEcdZMp6cPkIsugD744fVFaajXaE+2hOSy9QnRg7DDopvlyprAGWqy8J2 3qX12kCZ4vuPf0pHj0xP7dg9He8qnvVuKnigaZ8aEMkz5CWYDPxEq0dkfAJERECn TdiQvqQJA1GJt5pAszMmBs1HBV9VqQgvIvmgggpYc5yyqATaixCoEu4ESZMwUmuB qIWukIhUqprPgSaptdQrDfXdNfl+0ap7hYEoaCgnNcMD0irB3suoTgJMDlQOSJCB xiRSwTPufgbE4P7GGJlrxSXFlhtiyEw9XbMIaIFNB8hhbEIJXA== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-20T01:59:59Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-20T01:59:59Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15927" uid: 6fef1eee-d540-4ba7-b1a7-17d22fd80655 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIKQfgkdUUH2swDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTg2OTE5NjAe Fw0yNjA5MjAwMTUzMTVaFw0yODExMTgwMTUzMTZaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk4NjkxOTYwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC66fi8PdItseki+XiuUQOPfNnrDGaiZCCv Wc/jmU2PvtA4ka5Pqwt6BrFOiyTC/gG2hTB1IgBnZE1H37NO1pfVSfEXctBDi8KE DzU8py6Cbm3M/3x8pLXzphqPyzYZ59EH2mxVfldomChf9eP3hh8JrKwM4rsckM4R F2kW0Xvue4wJhPoZCtUwQPmyURfxdQFzL5bDe55yifBS91KqQ9plNEJjJ4gjkPhb 0nmGEGbDRqP1d9vHF7Oy2LqrUsbWtfwOnPFUXeu/+xXY9TC4wtuSR5fh03yii3gq J6wv+ESAuoS3IBIYS0x8/LNeyv8hFT/U53qb2q0w7cmjYzVOPlFXAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQc0nsw /NArOxn/Qjwl9sobEZDyjDAfBgNVHSMEGDAWgBQc0nsw/NArOxn/Qjwl9sobEZDy jDANBgkqhkiG9w0BAQsFAAOCAQEAk6olYeYTRyujA+3Emf1GkNJfeztCIzTbinS5 ZVgjXyZvEcdZMp6cPkIsugD744fVFaajXaE+2hOSy9QnRg7DDopvlyprAGWqy8J2 3qX12kCZ4vuPf0pHj0xP7dg9He8qnvVuKnigaZ8aEMkz5CWYDPxEq0dkfAJERECn TdiQvqQJA1GJt5pAszMmBs1HBV9VqQgvIvmgggpYc5yyqATaixCoEu4ESZMwUmuB qIWukIhUqprPgSaptdQrDfXdNfl+0ap7hYEoaCgnNcMD0irB3suoTgJMDlQOSJCB xiRSwTPufgbE4P7GGJlrxSXFlhtiyEw9XbMIaIFNB8hhbEIJXA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-20T01:46:29Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-20T01:46:29Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-20T01:53:30Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8683" uid: 4c068389-4394-4ffb-a450-a305601f3e74 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-20T01:46:32Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"6cea7019-6f77-4acb-be33-fc28d7a14970"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-20T01:46:32Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 6cea7019-6f77-4acb-be33-fc28d7a14970 resourceVersion: "2325" uid: 4d4efcd2-1864-48be-9fdb-bd8178e61cc6 kind: ConfigMapList metadata: resourceVersion: "73497"