--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-09T13:20:30Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"4f2664de-3aec-4e32-88b3-456addab7d48"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-09T13:20:30Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 4f2664de-3aec-4e32-88b3-456addab7d48 resourceVersion: "2791" uid: 7a4f9a63-6380-415a-9cd4-4bb15e21c4d8 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-09T13:20:30Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-09T13:20:30Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2765" uid: 67a43055-95fa-4eaf-969c-0f759dabebfe - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-09T13:20:30Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"4f2664de-3aec-4e32-88b3-456addab7d48"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-09T13:20:30Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 4f2664de-3aec-4e32-88b3-456addab7d48 resourceVersion: "2764" uid: d5d3c703-e75e-4ecd-819b-be47e2cc6ad8 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIJPoYiouErk4wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwOTEzMTgwNVoX DTM2MDkwNjEzMTgwNVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JMfE6wHxCdw YQoUuushValVNPrCssp3hUZZdW81dGQa9M9WqYWiUCvmRr9m9LWqbc73gsxARECr e2DgunJGkAINm2tEpXxboiuJ9r/7L+fFIp0WNPua/rGtH36W4J4CpG6iqvvXOd13 5Ij+n6DSL+d8jbSZIM+EnFE/isbWH0J+V8FOOWP9lU96qGjnO5V6D1ZpkxR4NI9N x5qgTs+2x6Fgw4UesbEm58ZphJIUerRMi9qCCzpndNIxvaS5xrCdL8AU+0yVlzlz Z2gJqbfkJfdejNSeyhfnNdPSIYJHLNlm2YYpc3xtDbRzkKe1vhwqfYIHSs7laAYa 0dkbvRdcNwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAPQ44BK7v8gqQEHYu8PzJpKzcSsdHJoOja53UJQ00QC90ZKks BMmoCbT2GOW2z5dPnmX6GkiC1/uZbSMjg0Iw2jANBgkqhkiG9w0BAQsFAAOCAQEA WH31IAl+lwTA5DDFRLVlAZqPj6v/+TE7dnvWlFN3YJBWouVZuG1pTcLZaIaiBabx op2A4gSuQAThaZwiKHedSCstlAaBrGXC9KZOTlqpLoDwhewrEEfvIKs0W2OU/woW Slrh0/jPgu7N3+xWF7GLjV/leRQmFofPGPo2PMsJ6tRni020lrVu5O0T8qpuMl7H qs96hzttCMdFP1w+SZQ61ziM1W+kJvPyeYAsFmm8x1ntIQj0Mh24gSmLLV+ek3+g l/xaJKeWOiZf3rO7A+9CJ6wewAYyveGuRyNguS9k/Tr/Ww/f7/npFExPqGh6HOXA LtAJ00SGppdDeRjEBM6WRg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIINMbljZa6rzkwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwOTEzMTgzNVoX DTI3MDkwOTEzMTgzNVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKmMRWnRiEhJ9d5F/DLJHePmZaRzWZ6lKoV83cb0xwSvDQW/97G4L5YZ0iRoYSoO klDChmGCxqYvPq41A/O4jeTYofoqsUKVxLTcd3BVRW24VLin5dTUl6c0Kq9/Inqn JiHkba2p92E4PEpN8MOA5HbUQEQ5k3qt3J/yqz0nT7J+3fW3DlRjqJHic0K4rzuZ X9nf3ME4xGaAkhPqbMzjlVX7z4obPWHjyfgsxFucNT9lBTI9Go9qj2Z3BVY19WZ+ eM0R4QMYCQb2R0ybUNvVkNIhC67laQdVcUokaOmeRqzzX+cmGFEHF2eSTXa9vd2R wiBUWNWBhEpgROWI3LEzMOUCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAugl3EAVtZl+MerjpqCLUPVx7hl4xqd/Qm+AU56NZWRJcFbHdRccPS0nz WvfBejafwzRYMR8MoccBKu8Psry7vjBLBgNVHSMERDBCgEA9DjgEru/yCpAQdi7w /MmkrNxKx0cmg6NrndQlDTRAL3RkqSwEyagJtPYY5bbPl0+eZfoaSILX+5ltIyOD QjDaMEsGA1UdEQREMEKCQCouYXBwcy42ODMwZjM1MS1iMWQxLTRkODMtODY1Yi05 MjgxOTkzN2FkMzEucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAG/7Qrz9Yr32UEnK8JAG+qyG+s1AkU+fDTJixIKAgjF5z9KA8DHWtZ2FE/rx sq9T4ouEJ0hqpGmMLViwLkdVPNBAR9o09mvG2MH30F2ln/jSo5Y008ADJQSNWDcP ULzT4qK1iRSE2lzReP3sfn3GwNxY7FS40x32UXqIhF3xIcL6vv4FUuSCBqtImYdj LpeOpxupYK0QLVY5xG0YtUtOV+uHdTHXLq0BCAK7FUv5gSgAsGcygHnElZRMGNAi pnJZgs+gq4w50zmMIJ5OSPF6eGw+FfwR/s/R12jrU919sIGHVVhL22xZq5rCPpMq LWvytxTw+4VUKURRVU/Heej/XEA= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-09T13:20:40Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-09T13:20:40Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3875" uid: e62e3d72-6cb1-4df7-b2c4-9edd909f53f9 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-09T13:20:30Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"4f2664de-3aec-4e32-88b3-456addab7d48"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-09T13:20:30Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 4f2664de-3aec-4e32-88b3-456addab7d48 resourceVersion: "2842" uid: f6934c64-5f29-4999-9e64-448486a1b468 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIITRRM4eCZ/I4wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODk2MDQyMDAe Fw0yNjA5MDkxMzI3MDBaFw0yODExMDcxMzI3MDFaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg5NjA0MjAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQeEd1ZbzYMuoz1hfyublCDmIFdtnW3waw w9Q0w3mui+E3fdtCXt/cctl1CkroD1Ix88WIt5nwcfy8m5zsNpDncSH/UJQ2ufcV jzG10Vkk9bKC+czl98oMRLSvVbe+2o7lRKbbENqGM4VERRh8VDyvIhk4l/Dh+v+M UhXJatGx5g4H/pjDSlv3e5nneui5hVJze6l1ethRaFB26p968wSa5DP882Jc/pgv MJg5dHmX8pkdanDG4WwtGPYaeM71TUxxgvZs5xZtgmFD+nwkkmdUYR+LIzs3O34c tVAd2Y+oN1z93scp9CIjz0umQ2RXVLnr7ZtP3drdWrdw1EOrjNflAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSVZry6 0jsK9t+M4v4sqUDiXB6YJTAfBgNVHSMEGDAWgBSVZry60jsK9t+M4v4sqUDiXB6Y JTANBgkqhkiG9w0BAQsFAAOCAQEARSqkbMXFuzavbK6KZa3t7olZ5NxfN2VVow6n 1KYOoXr7qUGftrvSCia65gtZBv04/uPmCq2BJRcZJlL+wwLPMWjAwa/nGUgMpapn +xQBqgtZn+ify2TkZphIEtznHIsiyNtrCtAZdL6UwG8hPXz03Q6kqTujk48vt02/ Yazc/9wK029zK+ThW10o2LDQUgL6XsxkEZKhfez2oK/1to6oWbaibv0KIVdbtCXR MGt9AuhOO9C2bFh6vNKmHR8NzAU01pcTlXFe59AY/gRiZNyN+bGQOiD16AE2OyuJ pDy1UnvF+GaK5XsKG4t7Igv/dKxk84vQaCND/+aACiikz5FOUg== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-09T13:32:29Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-09T13:32:29Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15006" uid: d8e9185b-e3a2-4897-8984-749523da6e3a - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIITRRM4eCZ/I4wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODk2MDQyMDAe Fw0yNjA5MDkxMzI3MDBaFw0yODExMDcxMzI3MDFaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg5NjA0MjAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQeEd1ZbzYMuoz1hfyublCDmIFdtnW3waw w9Q0w3mui+E3fdtCXt/cctl1CkroD1Ix88WIt5nwcfy8m5zsNpDncSH/UJQ2ufcV jzG10Vkk9bKC+czl98oMRLSvVbe+2o7lRKbbENqGM4VERRh8VDyvIhk4l/Dh+v+M UhXJatGx5g4H/pjDSlv3e5nneui5hVJze6l1ethRaFB26p968wSa5DP882Jc/pgv MJg5dHmX8pkdanDG4WwtGPYaeM71TUxxgvZs5xZtgmFD+nwkkmdUYR+LIzs3O34c tVAd2Y+oN1z93scp9CIjz0umQ2RXVLnr7ZtP3drdWrdw1EOrjNflAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSVZry6 0jsK9t+M4v4sqUDiXB6YJTAfBgNVHSMEGDAWgBSVZry60jsK9t+M4v4sqUDiXB6Y JTANBgkqhkiG9w0BAQsFAAOCAQEARSqkbMXFuzavbK6KZa3t7olZ5NxfN2VVow6n 1KYOoXr7qUGftrvSCia65gtZBv04/uPmCq2BJRcZJlL+wwLPMWjAwa/nGUgMpapn +xQBqgtZn+ify2TkZphIEtznHIsiyNtrCtAZdL6UwG8hPXz03Q6kqTujk48vt02/ Yazc/9wK029zK+ThW10o2LDQUgL6XsxkEZKhfez2oK/1to6oWbaibv0KIVdbtCXR MGt9AuhOO9C2bFh6vNKmHR8NzAU01pcTlXFe59AY/gRiZNyN+bGQOiD16AE2OyuJ pDy1UnvF+GaK5XsKG4t7Igv/dKxk84vQaCND/+aACiikz5FOUg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-09T13:20:40Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-09T13:20:40Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-09T13:27:18Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8267" uid: adfb3644-319d-4270-acd0-29c913ebdf7f - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-09T13:20:30Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"4f2664de-3aec-4e32-88b3-456addab7d48"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-09T13:20:30Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 4f2664de-3aec-4e32-88b3-456addab7d48 resourceVersion: "2817" uid: e5e65e2f-7424-4adc-8e5c-5037249db718 kind: ConfigMapList metadata: resourceVersion: "58467"