--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-03T13:28:46Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"3d43393b-7b1a-47ce-b4fd-f13beb0f4b4c"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-03T13:28:46Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 3d43393b-7b1a-47ce-b4fd-f13beb0f4b4c resourceVersion: "2598" uid: a218173a-7095-4ed0-b442-fbf3dcbd1846 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-03T13:28:46Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-11-03T13:28:46Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2577" uid: db6c1505-df74-4f4e-9c98-0ef5f2a2d801 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-03T13:28:46Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"3d43393b-7b1a-47ce-b4fd-f13beb0f4b4c"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-03T13:28:46Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 3d43393b-7b1a-47ce-b4fd-f13beb0f4b4c resourceVersion: "2576" uid: 6b0bddb7-4923-4f6b-933c-f101641c4276 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIZKwdwNAoDjswDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwMzEzMjU1OVoX DTM2MTAzMTEzMjU1OVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yUv+SE1Cdzh veN+mWWp5kHg42yjTSK3wl1SWKPCrAxNnbmshW67M6198/4ScwPmncgRaGrF3htH NC8xBv+sVvOl/uH0nRDkT1Gz/W0n1374vXJDmPxEcWZAdi0W+IipLZIMM1XfW03S 9lUNQYD+GFzuftESXU4FefC8Lomg9eUdKTyCa6qQiGRL4tvguAEaqeLajMS58kOS AkgCNk9C8ucqEW6eHHO1v3FLjKCFeJ5fvquSov7Yk75yVZ/teIOp2K/0fVVrBOPn e6ReeoTrIpWRLNFxQaWblknmE+gONkpkqGUTzxdwfKs45LsQb5BgknbwvqBae9qc Zlb3nEw0mwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAy/1V/eNfaGtcly+Own16Iy0+iKZQMBGGdt9Yv6MrKnG1dvIl ueQnmwPltz68gfwZhPKInbhUDIOArtrpAxnFaDANBgkqhkiG9w0BAQsFAAOCAQEA OhUt8iHEsM2yTK1RiM7pUd3fcqI5VwwYcg6T+zlbUDTcHhffRoCaoWXe6KjJEhvN hYBsVGjfJpcmma+svNWYf7Ri77KttRK8E9jEkI0bEHwPRSdZ3GQHH7pNew495LT4 wrDapT85AnRXS/2tMtAGisHzx/rH2fiBfDprpLT7xAHkwRVwPSzW9iax8AU6u+la GnSykzflTeXwyJfyphLZq2PtOxwZuWZHORb60GsUcr8Lw8fOAmATbwQj0cUDYMLm q6kvuS1gAjh1936kdnwk5bY4ym2SFwmsnaU9hAFHjttY67TJr0jbWtmd+R5NKDoU g5cHTcHJle7440l95pQZFg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIbB0EoHYQIx8wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwMzEzMjYxOVoX DTI3MTEwMzEzMjYxOVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALjZhrS/XX3T+3D7IBqPvMiMxrQl58ajnu8Q7A9lXojkq4kHpzZCvw+I7T3yPMFV yBmb6SOCvhMkZIb0Li0kMkdrfk9bnB85tSTbzWC0H44biXIeXyfgyf8ZoPV+rJeY KZtdbwjBnDM4ywynV2Wejf0tg55bWOBTWDSsiQ1PT2erefS/939l0nMxlJ+kNWyS d0VHi4NiwTnbt1BLyNVqPzbFdU9tK7T+KVSuAuoc8SQA3FQUhPjEtaeJTRD2mVIr UJ1dMfTqJ7/BlGZvbx/pEgd9B8isMWHAaso2Vg1f2hxtbuxSQqY+uWaoS1QO8Hqj +sAAxB2EEzRvdyt108CCbHMCAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAqtEpI4EvHwxKfiU6veozTx8LQxBYKi4Bm2516HidJnPbA/EjxswOTXIj rEQsqPBgEwa9ED5SXEZAuVcbtFZbWDBLBgNVHSMERDBCgEDL/VX9419oa1yXL47C fXojLT6IplAwEYZ231i/oysqcbV28iW55CebA+W3PryB/BmE8oiduFQMg4Cu2ukD GcVoMD4GA1UdEQQ3MDWCMyouYXBwcy5hYjEyYzEyMjU0YTllMWU5YTgzYi5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEA4LhWl1Nxd/K3 /epTyvRoOEkmwo+nokVhu6SI2UFXIl8Yq12zgVjxtDlSBfP8nzwGq1On41snOqO9 5TpwxlBsq/3xAYx5rEHfpNZXrcCF99lMqos0XBBjKh5FiChxYxCACt03N/jGNAS8 /6/BCR4Qr/aO6WoLuFvZJ8ev5hysWBB99dib9W+YqmJaKdzIXggklR2VaqdwlhNb PSAi5G3xAaKb9cp6XOapX0Gz/jrCnHubxn/Kw3v9hf9pNPjGauQMQPzh+L9BQ8kJ p+0tPz8J4W0hfA3jo+2b+VZCRqXu6Dlyd9BU93T+Apaz6M31XhCMfA3dm/qQIWr5 fdV7QwR4nQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-11-03T13:28:43Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-11-03T13:30:03Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4387" uid: 6e1fea2b-a98b-4f4e-b55a-3a88098e658c - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-11-03T13:28:46Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"3d43393b-7b1a-47ce-b4fd-f13beb0f4b4c"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-03T13:28:46Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 3d43393b-7b1a-47ce-b4fd-f13beb0f4b4c resourceVersion: "2607" uid: 5a0597e3-8cb7-4fd7-8f6b-092e96015d33 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIOKcb4/uwW9EwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzcxMjkyNTAe Fw0yNjExMDMxMzM1MjRaFw0yOTAxMDExMzM1MjVaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM3MTI5MjUwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz0svQCRS66afTx+g4tBbptZKJOACIoUA/ 3pnY73hh+iQX58+gXMljxHNMhkdISF/y01PJBMkEz8Y0JB4OOCKb5QmiCQMQfgRX kZVhUAp1hGshomT3t3JDdOqGcgekRPOnV02Rs9KUJZI2D1ufUfyOr2HbLFSr0EnT tIrjNA94QYpWjQcx+dMYSHC2RgHi7CY2UrPiVxbn4GJrP4NrjRG9t4qZMKmSsrD+ n3wQWgnR7nE67bspYtmNQK24+MsgL16UOI0c6JLdvOtER7eUButWszr6fX5qu8YK W2uIFltWl79U1B/pJJcRTkSoogKQ5kbh/XWXiuBMuw1gDhGW5EFpAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSdB/5Z PFhcZ6wfqp6qBAHY2ro76zAfBgNVHSMEGDAWgBSdB/5ZPFhcZ6wfqp6qBAHY2ro7 6zANBgkqhkiG9w0BAQsFAAOCAQEADY5dDaeGTQ/cIcfQc1mbwfm1hLtDkp8rWbTz 2qS8e/5DUyKkSHGdsggeYTegBoeXTvmDamgnJuyBzIUl2/66ewXBk5CazEpS6Sf8 E7Mr5nzGjW/cpm456fryBqv16FmBdtEFgk3UeK7L8iG3yVeZbFDV2fTWQfo7cNKt 3Vhk5oEuW/wx/hcN17O6mJdjeVopA8BkVILtf/LiY1K8tsQiMCM/Q/qnTdNOs3o0 OATAaUneS/5ka9Iyd4SLhze/ptCN4KOzH5YRDUjQl3oHABBVqoYPGr1Qfn/a4TMD c0mgHqmp0TbltTfXws0AAEY3bkcy6QnqP5WYTxwvLAhV3LFQkg== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-11-03T13:42:41Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-11-03T13:42:41Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "17497" uid: 29171d01-ccd6-4375-8a27-a6f2b9c94646 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIOKcb4/uwW9EwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzcxMjkyNTAe Fw0yNjExMDMxMzM1MjRaFw0yOTAxMDExMzM1MjVaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM3MTI5MjUwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz0svQCRS66afTx+g4tBbptZKJOACIoUA/ 3pnY73hh+iQX58+gXMljxHNMhkdISF/y01PJBMkEz8Y0JB4OOCKb5QmiCQMQfgRX kZVhUAp1hGshomT3t3JDdOqGcgekRPOnV02Rs9KUJZI2D1ufUfyOr2HbLFSr0EnT tIrjNA94QYpWjQcx+dMYSHC2RgHi7CY2UrPiVxbn4GJrP4NrjRG9t4qZMKmSsrD+ n3wQWgnR7nE67bspYtmNQK24+MsgL16UOI0c6JLdvOtER7eUButWszr6fX5qu8YK W2uIFltWl79U1B/pJJcRTkSoogKQ5kbh/XWXiuBMuw1gDhGW5EFpAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSdB/5Z PFhcZ6wfqp6qBAHY2ro76zAfBgNVHSMEGDAWgBSdB/5ZPFhcZ6wfqp6qBAHY2ro7 6zANBgkqhkiG9w0BAQsFAAOCAQEADY5dDaeGTQ/cIcfQc1mbwfm1hLtDkp8rWbTz 2qS8e/5DUyKkSHGdsggeYTegBoeXTvmDamgnJuyBzIUl2/66ewXBk5CazEpS6Sf8 E7Mr5nzGjW/cpm456fryBqv16FmBdtEFgk3UeK7L8iG3yVeZbFDV2fTWQfo7cNKt 3Vhk5oEuW/wx/hcN17O6mJdjeVopA8BkVILtf/LiY1K8tsQiMCM/Q/qnTdNOs3o0 OATAaUneS/5ka9Iyd4SLhze/ptCN4KOzH5YRDUjQl3oHABBVqoYPGr1Qfn/a4TMD c0mgHqmp0TbltTfXws0AAEY3bkcy6QnqP5WYTxwvLAhV3LFQkg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-11-03T13:28:43Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-11-03T13:28:43Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-11-03T13:35:35Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7225" uid: 347ce055-f3f2-4a03-839b-3793d64c55fb - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-11-03T13:28:46Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"3d43393b-7b1a-47ce-b4fd-f13beb0f4b4c"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-03T13:28:46Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 3d43393b-7b1a-47ce-b4fd-f13beb0f4b4c resourceVersion: "2602" uid: d703eae7-a3d0-475c-a8f7-6d05724cb8df kind: ConfigMapList metadata: resourceVersion: "19164"