--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$RHEL8_SOURCE_DIRECTORY" ] || [ -z "$RHEL9_SOURCE_DIRECTORY" ] || [ -z "$DEFAULT_SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set env variables: RHEL8_SOURCE_DIRECTORY, RHEL9_SOURCE_DIRECTORY, DEFAULT_SOURCE_DIRECTORY" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi # Collect host OS information . /host/etc/os-release rhelmajor= # detect which version we're using in order to copy the proper binaries case "${ID}" in rhcos|scos) RHEL_VERSION=$(echo "${CPE_NAME}" | cut -f 5 -d :) rhelmajor=$(echo $RHEL_VERSION | sed -E 's/([0-9]+)\.{1}[0-9]+(\.[0-9]+)?/\1/') ;; rhel|centos) rhelmajor=$(echo "${VERSION_ID}" | cut -f 1 -d .) ;; fedora) if [ "${VARIANT_ID}" == "coreos" ]; then rhelmajor=8 else log "FATAL ERROR: Unsupported Fedora variant=${VARIANT_ID}" exit 1 fi ;; *) log "FATAL ERROR: Unsupported OS ID=${ID}"; exit 1 ;; esac # Set which directory we'll copy from, detect if it exists sourcedir= founddir=false case "${rhelmajor}" in 8) if [ -d "${RHEL8_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL8_SOURCE_DIRECTORY} founddir=true fi ;; 9) if [ -d "${RHEL9_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL9_SOURCE_DIRECTORY} founddir=true fi ;; *) log "ERROR: RHEL Major Version Unsupported, rhelmajor=${rhelmajor}" ;; esac # When it doesn't exist, fall back to the original directory. if [ "$founddir" == false ]; then log "Source directory unavailable for OS version: ${rhelmajor}" sourcedir=$DEFAULT_SOURCE_DIRECTORY fi # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY cp -r --remove-destination ${sourcedir}* $UPGRADE_DIRECTORY if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.20.23 creationTimestamp: "2026-05-21T16:28:00Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"0ca50490-55eb-4d72-80ff-ac4a759025ef"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-05-21T16:28:00Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0ca50490-55eb-4d72-80ff-ac4a759025ef resourceVersion: "2390" uid: 76db0bae-951d-494e-b120-e8a5c121e6a4 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.20.23 creationTimestamp: "2026-05-21T16:27:59Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-05-21T16:27:59Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2384" uid: 368f2873-adbb-4b9e-8c0c-8b6c03edb2da - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.20.23 creationTimestamp: "2026-05-21T16:27:59Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"0ca50490-55eb-4d72-80ff-ac4a759025ef"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-05-21T16:27:59Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0ca50490-55eb-4d72-80ff-ac4a759025ef resourceVersion: "2383" uid: eed1e4e8-f909-4572-a197-6584e9a6eec1 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIZSlSaZfsamgwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDUyMTE2MjU0NVoX DTM2MDUxODE2MjU0NVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pt5GHEWXEzX dPf8TaLokrNZvwVOS12wKEqQApdDdPsQ1GqdNTLfJ+MUq7nuu7oouH/2Ysj1LtvN CjmUwI2YE6IHx1cFVJUfNUI9TZJgnad1o58uzhltPr+KIox2kFcjaop46tzHFyOo T7jK0qB5KkwUKUQpCd/kQUxi0DLjUrFX7NoZLJuof//4bqWCTyyMldtJY19w+PhD lssdomBTDam+PeW3Widw1T0ey+wzoCmHkjPdcygzWinjYCER9RhAuWnoOf937LAi wkV6pKOjuCLD7q2AQOmRI/x4IoZ4PpYRmMvYiqGPD7E0OqhlhJXxQNK9nDcebhfp xbrUoCtmZQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA/Jll9mOdHLdBw4L8ydJChJP0CfiH/4Stfxwx/NM+RQ42tgM2 g0WTe5wOqbCKwCg7/xiZpizWqVzTTT3UpxuKkTANBgkqhkiG9w0BAQsFAAOCAQEA jf+qD54NArJ2qJnRxTgEWQ/EAL5fd8KS+0o3SxSsCX4US76022vfn7Rf6vGiubxO 9aTnpFalh2jJhuv0Rl3v9bOchoe7z6EIr86LF0pouIwHZgMiPbzs+LpRxDODuuyf hiXyQzLdfKF+XcPquk2Uvn3moU9XOI42FyQknsmZ3yAUc3n+0eyNRwJ8891gxCRR gnToa46sX/Hm00jxmDX6atFqb70QFamAUtyoXU82XAx61rqA/2v2YwjDyVW5CBA1 pa2hES5hENrQ/HBzDvk2BGWxYnhT+2EU28C3fMng+Rf/xiU6Uby6Z8LI8HvuN9+h JO488kML+rb+mkGwZPXQCQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIXAgazdxgAfEwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDUyMTE2MjYxNFoX DTI3MDUyMTE2MjYxNFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMAgaPa+eSitlnM437R5c1bkGeiiEZIT0IyJUY8k8fFTiX5aY19wrXyL8xPyZg6F 8zwf73CHlTGU7u9gRWBQywQR07tdLTi4q3U6FWfTxcsI1seVfZugx7eWQTe5NoUu idjYXxE5Q+YDGymDuRrTMUeOa6tZ0vxqkBRLqGsVFXCkIpZ9G0XuyaGPxHdNVkyY dirrI5n9iwPNc1FOfjhWWoWbfw/ugDmhsmZYicziJ4KbS0Vx3K1Pb9R1KAInaXtD UxtyAnCyzzQDyrHraWCX/o6nykMjdM1N0lIuoSRcU9n1DIPsiv4wbi40G2aqJ2R3 gmKX+PyqdrgX3PVG0ZlLzfcCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRA/3ak9vi8QIOUrwKcbnoZKK5owmpgmFyxtfNrWQb3u8Y+XD9F8chm03EU eOA8woC0OJ/R/IW6vYGMCLhf2aY5mzBLBgNVHSMERDBCgED8mWX2Y50ct0HDgvzJ 0kKEk/QJ+If/hK1/HDH80z5FDja2AzaDRZN7nA6psIrAKDv/GJmmLNapXNNNPdSn G4qRMEsGA1UdEQREMEKCQCouYXBwcy40ZGU4YzFiNi04OGQwLTRjM2EtOTU5Yy0z NjI4ODZlNDlmMWMucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAFe/TFBrvdYClgMsrretBc+BfG6iZPmQlFE5D22Hulu/6pxEJnaPVcMKlMq4 qdTWw3x3l+i5qTSUzk7p20jzyH1i2R57QcaCFiGKYRkZHVoXw4b9/gCNZH5TnwHd qd58eJZG7U2rmHXvqtjtc8RFJ2x371tH/+EenBkvba6AZGFPN/xugTLVwufTLPBf ETcmYmJANyb307saVHjO1IsdtQskR5jFnvEi5/JbDg+9pcNC7ZeuphNBidCTt69v rZw5Q5aJF5vy0AF/g8Vz6ds2+felSYLYldur02AGaderEeLnksa7X56TVKHValz+ DhKj7uZVVoCu16IA8xdWYW0kaQk= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-05-21T16:27:57Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-05-21T16:28:44Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4463" uid: 0dd2df7a-7146-4b8e-b54a-f1c94e349f58 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-05-21T16:28:00Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"0ca50490-55eb-4d72-80ff-ac4a759025ef"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-05-21T16:28:00Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0ca50490-55eb-4d72-80ff-ac4a759025ef resourceVersion: "2420" uid: cf6841ee-d15e-4ec6-aa9f-8c25df8ef153 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIEj5m6w+rAdkwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc3OTM4MTI1ODAe Fw0yNjA1MjExNjM0MTdaFw0yODA3MTkxNjM0MThaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3NzkzODEyNTgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgqI0xql0+q6Yvfp0tsU1jhcY8V3VaJx6K N+5AJFLeNaMe2iIuL/SGo15eVIPGe1fAT8BftqG2nLCPswng3l1AohEa6m1FKJQC iDsvYbRXIRxZRzca/K2GngZyjEtPhAaZPYVZD11ReX7UCHwTGlePbZCTocEbwOxS x3hj/p89JkLwRnB0LfnxAgMW+/64rizYSLZfISZu6kMMhdVK5h8sfi6Pk2D7qZph rWoXfisB/t1gvA0Q62qbbCRqMZU/GqLSw4clPCKJZ0aj3lunC5K7TDA3f7XIQ0ru mnN3XOpfiwiEsbhF3GGG16WwkuUzHTNO8LAFBBrVjb6uQpAYmsv9AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTKf/F1 Ekmz8Bzxg3yRDQZPy7vSxjAfBgNVHSMEGDAWgBTKf/F1Ekmz8Bzxg3yRDQZPy7vS xjANBgkqhkiG9w0BAQsFAAOCAQEAUMoA4UBdYn7hDj1tyMNoHxzf5XNJ4bY7bdSI SCHlUbQU9Rqu3B8/UrvFr4XppxsYVIjoBy2YSSzc/+VBXvQQY3ooGPAhqmsiZekz OXktQc4o6FhstKH71cYC/I+YcjcewGsqKULt1nRwUTjbO19kV1Bp10Qj5A0Fw5xi zYhzs6AID7VLn493GlIykFJe/UqyeAzlpu++fqzErHw4qNTt3PQslanQrH5y5Xld HETsz74d4xwTPukclB57VjvZKPqdxpEjhuThyPf2ZzC6y+XkzPTxPzlabnMmirfh vA2ukrezAQX3gUFXYPAhQCrcO+7GocA1oe1hoI2keZWaQfpwcw== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-05-21T16:38:54Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-05-21T16:38:54Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15314" uid: 949e140e-9b8b-4636-9c6a-655c91b05aaa - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIEj5m6w+rAdkwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc3OTM4MTI1ODAe Fw0yNjA1MjExNjM0MTdaFw0yODA3MTkxNjM0MThaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3NzkzODEyNTgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgqI0xql0+q6Yvfp0tsU1jhcY8V3VaJx6K N+5AJFLeNaMe2iIuL/SGo15eVIPGe1fAT8BftqG2nLCPswng3l1AohEa6m1FKJQC iDsvYbRXIRxZRzca/K2GngZyjEtPhAaZPYVZD11ReX7UCHwTGlePbZCTocEbwOxS x3hj/p89JkLwRnB0LfnxAgMW+/64rizYSLZfISZu6kMMhdVK5h8sfi6Pk2D7qZph rWoXfisB/t1gvA0Q62qbbCRqMZU/GqLSw4clPCKJZ0aj3lunC5K7TDA3f7XIQ0ru mnN3XOpfiwiEsbhF3GGG16WwkuUzHTNO8LAFBBrVjb6uQpAYmsv9AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTKf/F1 Ekmz8Bzxg3yRDQZPy7vSxjAfBgNVHSMEGDAWgBTKf/F1Ekmz8Bzxg3yRDQZPy7vS xjANBgkqhkiG9w0BAQsFAAOCAQEAUMoA4UBdYn7hDj1tyMNoHxzf5XNJ4bY7bdSI SCHlUbQU9Rqu3B8/UrvFr4XppxsYVIjoBy2YSSzc/+VBXvQQY3ooGPAhqmsiZekz OXktQc4o6FhstKH71cYC/I+YcjcewGsqKULt1nRwUTjbO19kV1Bp10Qj5A0Fw5xi zYhzs6AID7VLn493GlIykFJe/UqyeAzlpu++fqzErHw4qNTt3PQslanQrH5y5Xld HETsz74d4xwTPukclB57VjvZKPqdxpEjhuThyPf2ZzC6y+XkzPTxPzlabnMmirfh vA2ukrezAQX3gUFXYPAhQCrcO+7GocA1oe1hoI2keZWaQfpwcw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-05-21T16:27:57Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-05-21T16:27:57Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-05-21T16:34:31Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8341" uid: 740e9bf4-3065-4f4d-9fb8-0f4ac83f33b5 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-05-21T16:28:00Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"0ca50490-55eb-4d72-80ff-ac4a759025ef"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-05-21T16:28:00Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0ca50490-55eb-4d72-80ff-ac4a759025ef resourceVersion: "2394" uid: 9f0e0379-028a-4dc5-9ac4-990e8c0e47ae kind: ConfigMapList metadata: resourceVersion: "46435"