--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T01:10:09Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"8abb0d39-a15c-4fd3-a1dc-495586fff941"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T01:10:09Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 8abb0d39-a15c-4fd3-a1dc-495586fff941 resourceVersion: "2334" uid: cb13515e-b65c-4985-9eba-ebd07887cc6d - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T01:10:09Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-10-30T01:10:09Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2332" uid: 64821a32-5d30-4982-aaf1-689f8159e640 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T01:10:09Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"8abb0d39-a15c-4fd3-a1dc-495586fff941"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T01:10:09Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 8abb0d39-a15c-4fd3-a1dc-495586fff941 resourceVersion: "2331" uid: a6a43232-0deb-4b52-b99c-a6c58dbdfe80 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIKI/cn5ECwbMwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDAxMDgyMFoX DTM2MTAyNzAxMDgyMFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5s9u74K0riBm M1nFVbj94pYxYwoR755Dz9SgN3tkhsVDhu9X2zhuVzvzM5ZeltUutdyFGxs/YuPS +lXFaQIRH8p9LdKHDu5V4qA5GG/Tz5KG64UPoiZwQxYEW+4ufnEDDYhGbnafW7Aa 3G8FmhjCS20cR08BV7c80Qrfxnb3A635ZVKCIVaUZ+oGQ+qLhl5OELmmyTFftddS Rs4HJnDLnx4kSoZzVM63m2PHwEaDU9oNx7UAYjAa7sMcaIWxjJ4daznHtW+0o8zl usgIbBikdwbx4hZjei7ZGCs1aydQ2zgS/8QlZW52jdBPH7uGEA+DBe1f/xGuUudO 8ZvdJNqqKwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA001HVuALA7CoaY39or57tJX2Z+GZHwHoBbS6IrlSeBO79sZQ mJ7XIwb+6tyfG45K6MWvQZp8WPpeCXbCGywdOjANBgkqhkiG9w0BAQsFAAOCAQEA CXawlGJ5ZnsPZvC60XGEeR0wdfMAiI7bhg5txJud8iCtDk7BlpsO0170V+xGkfmM CtIQ8jQhWk1jMl7THQ0vZ6KN6OV90x1ejXpVp7HbGujAdwzRy43+mg6JMuYNy3go gzSR0kQ74xDEAJnbY4Tj3blolMKKTVPimDwy4atgw205/TuSqQ65DI1VLXc0aJu/ Uf6PqXkttbzAOqH4l26fTTD/qEpeGFcKrV7lQwW+eGlEo1LSrSVZfGAwmfCI0Psz TL9lcMsb4rSL0xPgPpV6YisygD/5xM6t3Fmm4guYNAOgg8SzSzb7VeijUvOBaLaV rId49wjjPzAEk2V3wSii0Q== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIeOlrMmqTSt8wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDAxMDgyNloX DTI3MTAzMDAxMDgyNlowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMDv8aMt3rgwx77otrKk9xW1lqQ+j0c00KTbGOMP48tB6bvjoVR/W8iHcw1NzCII /HNLs4ujvrbPgD0INasu7CfbZL9THU82IX7nnwbjaIU6r6xb8YnYUbMqNU8MzJr4 90y58nvrOHeWjBoG2uCavKa28HxUSs932sctpq8IB+tVcm+126qgC19Vk3dVv8Kc OlWs6yzsws2Sqk6zrRoB9slOgLc7BDi0EFJl5l+PIXj+YyWktdkMI/mFiW76svqn z40W6y4LfO5lC1dYvRgQAqFB4tCpoFUQ4Uf/GxFKQIFNB8wcu14FDG2SOQTi/RY7 GMnFB7YGZKWQ1YLHIHr8gFMCAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRA/Cat2PfeHHFlWwMTo+1wR3CEVDv3sIkuixT0d4KPberbVOT0YKxqSoFP 0EXUZ6SpHnJqvanvnHOiK3V9M87p5zBLBgNVHSMERDBCgEDTTUdW4AsDsKhpjf2i vnu0lfZn4ZkfAegFtLoiuVJ4E7v2xlCYntcjBv7q3J8bjkroxa9BmnxY+l4JdsIb LB06MD4GA1UdEQQ3MDWCMyouYXBwcy4wMjlhODIyMDUyMTBiOWJjZjI0NS5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAAkp71huoNEzK F0SkQL/OlQcD6Q+hsCsLJKlhv9DJznLXiXQMoJ8z5MQWkoXctRBWWJZA47h0IU/M jVuQ6kr/OZweoRnna41bRDkf9qz925cEaA3EU4XifzF3uRRhuZSUIMNkaygD1vma JPE/62WgqjuCFq/Sw87nFca/lf8ebCsSzl2yYKJv9rdei0Vci/jYHrPwTEH2nk2b lW1gv6AbREFK34nRg7t9w9YenxC0LPP3LlkaERkOOjr42xGN8DDBm6K2Vj59AtAV pl09hHitr0MwUt+lnIK3XYowhPx9KUCOnxA5B6EBM9mJq1wGp+qUDbRrSydZjRJx o3JTcahXfQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-10-30T01:10:19Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-10-30T01:10:19Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2534" uid: f958bd9c-dfcd-455f-a55e-d503637ca939 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-10-30T01:10:10Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"8abb0d39-a15c-4fd3-a1dc-495586fff941"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T01:10:10Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 8abb0d39-a15c-4fd3-a1dc-495586fff941 resourceVersion: "2336" uid: a258243d-1ed3-4cd2-9b40-c1de7738239f - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIDSz0dFlTmIUwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzMyMzAyNzAe Fw0yNjEwMzAwMTE3MDZaFw0yODEyMjgwMTE3MDdaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTMzMjMwMjcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmFe1mcl4knjrCjhMdZhIuCna3tVqG0+EW 3+4Ipli3JUXobVAtdGCH701c5hTtAqmyvDDI9/rUg7D+Q8aYnqUlH5FGkftq52L4 Cs31lXd4YscpbUSBg3+GdUt1Gc1/wJIkh93bR6Jf9LVJpIJPtHjWhHyGtjYrOfEw 8wY//I/JN3Bih4ZsQXQxqxBPSTvhgVcp7SPkp7Jgi8mbKYwORB3QfiyR9JbAN2SZ d1sk3+QMu1jRegoF1Tg6tlktqxp0ICUHUBdPnbRL/d1Ob2eqg3Th8NaYrdQ2z4/h 6d/oaf2PONnZ92fhbTYCMypXFZENqzrkUpMjevTh9tYbmOSDbXj5AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRkoAkO 7jbi89E4XjGvzbEJaMS8yDAfBgNVHSMEGDAWgBRkoAkO7jbi89E4XjGvzbEJaMS8 yDANBgkqhkiG9w0BAQsFAAOCAQEAPrUoLGhdqSKtjlxWdJjoQLfde8TEgfjmij0+ kAInbbnn1kRLBxJDK+oUeadHv3pkjjwXb8kYj+RwSxp13pBjSr3BadEB84r6Vj20 MpwOOCCoAclqReSJxIgQDoCXwRpDbhSaXhk0cRkgOy3XyKUjvuDgj35p3DziSIeZ GKbsuXk6WvZFuYQS7Bnw4ah1iJcfKw690A0vCNV5lj+TW786S8/IYvY98hWua6v5 NVb/4AUfh8iUk871wdhz3aiNWE8OF+jlRBFTQE23TFdWakM33X528w976a9vh/VK CTPb1km0VwjTbeycsxUHEokRuvEME3sBSt7/DKvK/uCwSELzYg== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-10-30T01:24:09Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-10-30T01:24:09Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "17381" uid: b124e47d-46f2-43c6-90c2-9d2e1f748637 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIDSz0dFlTmIUwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzMyMzAyNzAe Fw0yNjEwMzAwMTE3MDZaFw0yODEyMjgwMTE3MDdaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTMzMjMwMjcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmFe1mcl4knjrCjhMdZhIuCna3tVqG0+EW 3+4Ipli3JUXobVAtdGCH701c5hTtAqmyvDDI9/rUg7D+Q8aYnqUlH5FGkftq52L4 Cs31lXd4YscpbUSBg3+GdUt1Gc1/wJIkh93bR6Jf9LVJpIJPtHjWhHyGtjYrOfEw 8wY//I/JN3Bih4ZsQXQxqxBPSTvhgVcp7SPkp7Jgi8mbKYwORB3QfiyR9JbAN2SZ d1sk3+QMu1jRegoF1Tg6tlktqxp0ICUHUBdPnbRL/d1Ob2eqg3Th8NaYrdQ2z4/h 6d/oaf2PONnZ92fhbTYCMypXFZENqzrkUpMjevTh9tYbmOSDbXj5AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRkoAkO 7jbi89E4XjGvzbEJaMS8yDAfBgNVHSMEGDAWgBRkoAkO7jbi89E4XjGvzbEJaMS8 yDANBgkqhkiG9w0BAQsFAAOCAQEAPrUoLGhdqSKtjlxWdJjoQLfde8TEgfjmij0+ kAInbbnn1kRLBxJDK+oUeadHv3pkjjwXb8kYj+RwSxp13pBjSr3BadEB84r6Vj20 MpwOOCCoAclqReSJxIgQDoCXwRpDbhSaXhk0cRkgOy3XyKUjvuDgj35p3DziSIeZ GKbsuXk6WvZFuYQS7Bnw4ah1iJcfKw690A0vCNV5lj+TW786S8/IYvY98hWua6v5 NVb/4AUfh8iUk871wdhz3aiNWE8OF+jlRBFTQE23TFdWakM33X528w976a9vh/VK CTPb1km0VwjTbeycsxUHEokRuvEME3sBSt7/DKvK/uCwSELzYg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-10-30T01:10:19Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-10-30T01:10:19Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-10-30T01:17:09Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7061" uid: b2798e04-c0e8-4d69-a296-07a0ffc8ac74 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-10-30T01:10:10Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"8abb0d39-a15c-4fd3-a1dc-495586fff941"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T01:10:10Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 8abb0d39-a15c-4fd3-a1dc-495586fff941 resourceVersion: "2335" uid: 0e85a426-64bd-4ace-8c2d-5cbff9f92f86 kind: ConfigMapList metadata: resourceVersion: "163194"