--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-02T13:37:08Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"ee81bbd4-9443-4bf9-919e-0da2f616a1f9"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-02T13:37:08Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: ee81bbd4-9443-4bf9-919e-0da2f616a1f9 resourceVersion: "2385" uid: adf04e96-0cef-4471-a957-0159fed08938 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-02T13:37:08Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-11-02T13:37:08Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2381" uid: a11de195-ba1a-4e49-a84d-86bd15012500 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-02T13:37:08Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"ee81bbd4-9443-4bf9-919e-0da2f616a1f9"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-02T13:37:08Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: ee81bbd4-9443-4bf9-919e-0da2f616a1f9 resourceVersion: "2380" uid: 8ac423a3-f24f-461a-8024-52097bb30f5f - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIcdhvecfNfxwwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwMjEzMzQzM1oX DTM2MTAzMDEzMzQzM1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocihLGik6fwF 3XUR57vOGalaDMXOafFv6jjrXMeVZ0H0096VapszD1GDmc3+WGIIcAGqvEiC7CWQ eWe+kolibpvDGUCGNhhOhSAOvva+QyeltCYS82f+uatxijVjpyUrNaC/6Xws8Xyn r8hsW+PKnKw68hi2ph2J9zPyqqzoQTinlwSttg7/EcXvWPhrqbkJ3IFSylu6HfBK Lk8koRq6mkz0Q7dj26eJczfwNqCVmjYS6G0ChPAZHLV0WclBQcwFwqg29meZQdzB VVRhGv6IUPmxZ+H4JO1tHU+4weSEwx1NxxRO64vPf0K7qC0eh5Yoeot4VkftuP2E HPA5fH0dmQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAmlxnQFVepbvDmWVVfOcP5Np5iOLWsyV6uZaE0dDI1bWBKyAG 4Zj2nDxHdwpiTyxe3h/NIr6LljIszkxtU5RzjzANBgkqhkiG9w0BAQsFAAOCAQEA auAuoIsXrBXcNhGcp1LuiSqAfN2B9V9rzhhHN38bWudexvztl/37gehKZqfKEJ6J l8JmZ1QQvSQGwrCor9GRq7vO0SOkyX2Gzk/8kVOEN39TFpVpddVjoKUl64AOvIt1 czam+1Z49bq8WVZxa1ozdgV18nndNb4wJaVf9NmUHeVuNU5RVVu4Aq5+OiiXcff/ HLi7SPXgbhugrTSpONkFXc18mbstLuyddwDR6FRNIDHOkgZSw3ymeClLVOI3d9U/ JW9kzLQIvTBY0Waic6A+YxsJfGVuN9U0eF4zNC5YpdrR/MVKMHXMKKtwPXGYwKbm P1T0RtfKmmR3Ot7MS/8Qqw== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIGVpVlt087rQwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwMjEzMzQ1MVoX DTI3MTEwMjEzMzQ1MVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALuL9x2qoGoJ3aza9kBvdbDm7hI2j0V+Qwp1/m/xzOzDaiU4gaAVUqSsIHTVzfyt hXYyfodlknE6VBE7DmVlaNCEYDrpuPMDVsbcTJKN/2cyUJCoa9jaUP0AqyzUir9j LgFznYDIc6e9jMzi47wO/UNXuxl4JfIliaM36oI9McpaMW4f9o5Y03KjRL1awXvH TLe0qYrpP6Bp/vQUom3so+efmtBxp/aHEfVzENcd/Pk2/rZhMBTEWjexGKCxwIAF H+SlOAlFdc8dPefyNS2dVSGnehSOqNzo/jK6kz7kArLdFISFHpCs1bPByEIuJGjL y4sUMZ5FteCRqxdnJHwSTy8CAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAFlI8nG9opNWEcPLhr8lwVvkTNjkWFcQ8Z2ZGP38Faip2ygHZeg5bxqwz cHjDPOARyB46yrHZKG5byPjJleQoSjBLBgNVHSMERDBCgECaXGdAVV6lu8OZZVV8 5w/k2nmI4tazJXq5loTR0MjVtYErIAbhmPacPEd3CmJPLF7eH80ivouWMizOTG1T lHOPMD4GA1UdEQQ3MDWCMyouYXBwcy41OWFkODkxNWU1ZGFjNDgxZjhmNC5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAPR8BuwU7Jr9k aORohE0ifLxTe11NRPASW/UYIqdWxoP4XvJ08oUzKmKQAL+9PNh/Of0+HEmCAcVL DQAKBTa8i/+YWee37aefSMSVktZnbxsv+r/jSc37n3gCS/c85+9ctGEN+Jlkm4/A CY6d6pG34gNWTQq5wp0SN1oaWY8uklQjzHBaDhcuPU+iWdxJTcxr4WkjWhwuVaYt jSJWJiz1lXjDiBhUhRkDQTStxH9YFoVJ6twPDUiKsFveB/cCyZfnRgOu+hb4Ph9C z4oomnrSKXQZqVRy+uhpfLyB50WxvIYPwMMdHgBiBNwhFLhvvKrsJBtl+r4Tj7Ia bHfZLTzzwg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-11-02T13:37:05Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-11-02T13:37:38Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2901" uid: c525ca92-1ad0-4b43-bb87-8aa0926d5c67 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-11-02T13:37:09Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"ee81bbd4-9443-4bf9-919e-0da2f616a1f9"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-02T13:37:09Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: ee81bbd4-9443-4bf9-919e-0da2f616a1f9 resourceVersion: "2429" uid: 8776ed0c-b9bf-4a53-b523-940ffba43210 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIapYeNWr4PBAwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzYyNzAwNTAe Fw0yNjExMDIxMzQzMjRaFw0yODEyMzExMzQzMjVaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM2MjcwMDUwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCui7ecE++dBKvaEIjMj6G4WSpntyBzQxgG k3moCh+H2kgBQqn+qZCrE9GVl6cmQwL1hBJ4qIcvDuHd6yc7sEu+uJ5X5DRCTen/ lNErj0rLbxf1ZhSGcodjHwVlIoIUVdumvEmyTfVck8gEson5DBD5EZqLKlgCM3t0 Zo9/I3trkSB/5W+5aacVmYeMeaQpC631PMhOPv4K/T0QO1lKuUAr+KhCc9VVImeo 0G59l4nDOi7TkelURsrGKnf9mnefinlfkuv9W5Ux4q4oI3bmm6zL6zyMu9/DRF4n gDCgAjarjFqT2/y2rc5b/gB98jWjH+RK/GAb+1FQ/yiTdyjUP/VFAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ93e/8 bBqLkpJk9gWVpVG5dsE/EzAfBgNVHSMEGDAWgBQ93e/8bBqLkpJk9gWVpVG5dsE/ EzANBgkqhkiG9w0BAQsFAAOCAQEAWo+TwaQt+aeSR1lLnk03Fs/HcBdjlmgw30UL CM7dCnbSYqIqH5Wcrvj8iBvmHxXfxcJTjCT0RFgCHLmlySzfhzpLv/RE/DpmDK98 SRoK89SOXjaZogbkp1GiYnC8Np1nQY11/Tfg4HgCBHeMI1iqdrMsqX0CGGur3K9Q wX8xh62IUkam7ZvXpj9A9JmeyTQIDtwxvN7pFt78OGwBebAJ877+GurvSPmhatb2 C7vnTpnqIV0CHxksZSF8KWH1onHYW8PuFfHaXlxyvPUanBHfi72jvT0S64uG56wY XExVhZc0fTv/17aOFTfkX2yQW8xfxN54RvM87TdehCTIQHU1Jg== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-11-02T13:50:43Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-11-02T13:50:43Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "17206" uid: ec27d989-dd32-43c0-8228-4b9be173d25b - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIapYeNWr4PBAwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzYyNzAwNTAe Fw0yNjExMDIxMzQzMjRaFw0yODEyMzExMzQzMjVaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM2MjcwMDUwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCui7ecE++dBKvaEIjMj6G4WSpntyBzQxgG k3moCh+H2kgBQqn+qZCrE9GVl6cmQwL1hBJ4qIcvDuHd6yc7sEu+uJ5X5DRCTen/ lNErj0rLbxf1ZhSGcodjHwVlIoIUVdumvEmyTfVck8gEson5DBD5EZqLKlgCM3t0 Zo9/I3trkSB/5W+5aacVmYeMeaQpC631PMhOPv4K/T0QO1lKuUAr+KhCc9VVImeo 0G59l4nDOi7TkelURsrGKnf9mnefinlfkuv9W5Ux4q4oI3bmm6zL6zyMu9/DRF4n gDCgAjarjFqT2/y2rc5b/gB98jWjH+RK/GAb+1FQ/yiTdyjUP/VFAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ93e/8 bBqLkpJk9gWVpVG5dsE/EzAfBgNVHSMEGDAWgBQ93e/8bBqLkpJk9gWVpVG5dsE/ EzANBgkqhkiG9w0BAQsFAAOCAQEAWo+TwaQt+aeSR1lLnk03Fs/HcBdjlmgw30UL CM7dCnbSYqIqH5Wcrvj8iBvmHxXfxcJTjCT0RFgCHLmlySzfhzpLv/RE/DpmDK98 SRoK89SOXjaZogbkp1GiYnC8Np1nQY11/Tfg4HgCBHeMI1iqdrMsqX0CGGur3K9Q wX8xh62IUkam7ZvXpj9A9JmeyTQIDtwxvN7pFt78OGwBebAJ877+GurvSPmhatb2 C7vnTpnqIV0CHxksZSF8KWH1onHYW8PuFfHaXlxyvPUanBHfi72jvT0S64uG56wY XExVhZc0fTv/17aOFTfkX2yQW8xfxN54RvM87TdehCTIQHU1Jg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-11-02T13:37:05Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-11-02T13:37:05Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-11-02T13:43:27Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7034" uid: 2768d5a0-6709-4cbc-82ad-d0188860dd47 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-11-02T13:37:09Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"ee81bbd4-9443-4bf9-919e-0da2f616a1f9"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-02T13:37:09Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: ee81bbd4-9443-4bf9-919e-0da2f616a1f9 resourceVersion: "2388" uid: ae7f9d53-ec61-49fc-8eb2-5f08ffc5fa6f kind: ConfigMapList metadata: resourceVersion: "211800"