--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-11T23:58:15Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"7bff5fe1-e3eb-47bf-9ab1-c51e8e69d773"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T23:58:15Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 7bff5fe1-e3eb-47bf-9ab1-c51e8e69d773 resourceVersion: "2374" uid: 1253b691-5e6b-4d73-9cf9-bae97d79b032 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-11T23:58:14Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-11T23:58:14Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2368" uid: 34599b02-e4e9-4bda-b2f9-956659bafa64 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-11T23:58:14Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"7bff5fe1-e3eb-47bf-9ab1-c51e8e69d773"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T23:58:14Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 7bff5fe1-e3eb-47bf-9ab1-c51e8e69d773 resourceVersion: "2367" uid: fa693d71-3426-42e8-b468-68d2458222f4 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIWIiKHtcxwTkwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMTIzNTU0OVoX DTM2MDkwODIzNTU0OVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3B/Gs/pcVgaW u3SuN3hdA1r5ffMDnwitlPjFnAml29NUHfu79QDx7A9LQdxyZhVgylSZidqlOGlD kHOD56UW0sjpwO07JEvFaxQbYrjaVmHpMtSUFHXoEvXjqo/3uYbYfsF1YC7gIM4V os5n5+Rp6hEu3huPoKkZeDL0+Ppe2vvCqfWOsKbKiNgBy+5XZkx/JQw388KMeYz3 EF7F15Lgw0wr7jCD6C59ae0r/LoKCnc9dCz7DpNYVJ7i4RtfB36RR1/VuKLqZfqo QuqZKvDfKfkn216Zo6aN/U++HITVXDX7o0i2RYbByX7harhFQLp5sA/x6IRsBAVI FKlnNZb6VwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA6PTTN2d6oc6E6a7S316sKpQLUTm76Xd0QwkeUUhQ43J8W9Iu 65lYarL669jBfmVOH12QmFDYILwqz0NizGgVPDANBgkqhkiG9w0BAQsFAAOCAQEA dbv45UM95KdZ6g2Frf2/VcWnNWxZzGvg4pGlHXDkWP6Dpxp6etr/CmHLcxzHXtBO Lt1MZ8GAF/S+g/V6E+3x1fICsFwkMrjwhiMUbiBn615EMOoXm0bBrsfaa7TJTx20 1jA25nr7ANUt84tXCUitnMPWIItQtFHCaqo2cv6ysD9AfXLRFWGTPQA8Yck/4+sT NSfR4W2SAR1T/hyf094w+Ewx1CClJqSXD7T7SUMew1lxF0QygtglanvcYIANvluo 1od6nVYHzBFq96sbAQCMw5acaN/rdbnPEQmb9CyChJEyYwgt8s8RleNQ3yOSGHBA 6q3dzlNsY2+IgUGluJ6jUw== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIFNnogxm3H3owDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMTIzNTYyMloX DTI3MDkxMTIzNTYyMlowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AK40weQwG8WB2+ko8wIgbg7pzu5H8mdvFG3BVgLDunixhe25VbRcy0MSSET7FJQQ 8wo3g0oYwBloFyZ+BxlXRARf0/nmQ+htibYQQn2dkFf+0dr+B5KbxfqiaT3Qj1UK Hn7Z0X6scSrdcyLH2A5SeyaJOh0x/MdDuNN/wXNfp1OnfWv36SY9PrJ/wnZqZxX7 aWMoDstNZ4cBVziboO+OTuAo33AyMqbwCBCXrrp1t5eDF+fH5h4ojVh+jBz+qvV8 dWpe+qjb0bvU5A8wUtoQ5kvrV6J8K6V0I1lRxk1TGLgBn+CmlRJN+9I/cWPh0rmK F3tNK57vHy/16uKbt0obLKsCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAtlxz40uctJsY9JL602qyT7hLTY3oXAOx1Dr0N0q9UMgPeCrPtG0R2Thu PJ2BMv3VbYqFdPXgpfWu7U9ltUpd0DBLBgNVHSMERDBCgEDo9NM3Z3qhzoTprtLf XqwqlAtRObvpd3RDCR5RSFDjcnxb0i7rmVhqsvrr2MF+ZU4fXZCYUNggvCrPQ2LM aBU8MEsGA1UdEQREMEKCQCouYXBwcy5jYzZlZjU3Ny03MjFmLTRjNGYtYjcxMi04 OGVjNGE2MTkzMjEucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAMhBCgYTTavuIjZIG0UP9R8FV/nyX3DADoY6zrcMMNbYaxhT8CyDVovzax6L yqLMaHKXggGE5WFblBC18UrR1Z6RUpBOvdc+jkqtmAWRiUjJvVTV7FLdiblnZv6p Vf+jDrrqOjt6nG2b2bmarVT3QnBreIAJj5KkSIS3RQqTSzp7hpL+qXR0I/SIofsa D2kt+fatv9CczUwL4Q9BGPAaMLuu5RvHAWtB/uxAItHTCJ5AVgQn0Mpd/95NnSir ZpTWnCu1J1l6h9XcH3E7jP+9m304a6MMlXutCUcd/vpKdRyNF/78PShNueqR68du sLuP6773ltiKWNKQICcnwmTIr4I= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-11T23:58:32Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-11T23:58:32Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2849" uid: 4eaa4647-81fb-4014-bccd-793f1dad3d1f - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-11T23:58:15Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"7bff5fe1-e3eb-47bf-9ab1-c51e8e69d773"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T23:58:15Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 7bff5fe1-e3eb-47bf-9ab1-c51e8e69d773 resourceVersion: "2384" uid: 70a09433-a22e-46b1-b403-5a4aeabae85d - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIaEFUNo40R2UwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTE3MTQ4NjAe Fw0yNjA5MTIwMDA0NDVaFw0yODExMTAwMDA0NDZaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkxNzE0ODYwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtwplUMumVylkjvelXsjzXcXs7a84hRXNe unvnk71igbTM2mlSPsI5IFhLq0P3o+Zamguq98UDhadwX30viOIqxeviZSawv5Sp AnnskBMFv8j8emnnPi0eLesVyqsz6f2f4GXey/TXYirO1EJlrrH/5VgPcp3eW7ol iOy43GDirEX6OpRrNTOB2mDqQb51GQhifs7Yiy80Uz9Jjui2C0zJf/gtExuu9uyD RpsbD8N07CblHKIg6Zeek80q3b8MyEsjMSCMizQl9PCw9NQq6sLKTFJO3RP6ikHt Z4bwR3Bg0vlnAqK7zojlvPXp4dSkW20edfNG2ZAGXPDvy0p+OcE3AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTov5rJ xmBKJKGko2eE/1+sS5kr2DAfBgNVHSMEGDAWgBTov5rJxmBKJKGko2eE/1+sS5kr 2DANBgkqhkiG9w0BAQsFAAOCAQEANCRD0NuV+fMFFhXlKuUaBWJFANoo9rBHcyiF 0xKuEpBsgIMUYn6dCIM+DY7sqbR3ej2qYWwtiZEYdvfrVVxQ/rBJANCtJkUMrA03 YXpMOkTiNSKGMVSi9nMW/gxZFqqF97TtFDiB1f+rDqrCza88UbH/WZuGLDbRHtfL wMma5NIlToUtSGshtPRwf+EQlflKPAbom5X+JA5Kd+Hm99pu8b/kNBCXoVktBw2K 47T4hdyyLI9ZP19KikGq5mFU63O+hTz0gZmzK6X6uLCsTD79aSeE4KjFiqOTPCcq GE00Gr0ERANucIf5zxQJ6MnqJj1As+vrHD7hBYZ2OWifOOv3Og== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-12T00:09:23Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-12T00:09:23Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15222" uid: 1d5068ad-6145-4489-a801-721e95f0fd03 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIaEFUNo40R2UwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTE3MTQ4NjAe Fw0yNjA5MTIwMDA0NDVaFw0yODExMTAwMDA0NDZaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkxNzE0ODYwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtwplUMumVylkjvelXsjzXcXs7a84hRXNe unvnk71igbTM2mlSPsI5IFhLq0P3o+Zamguq98UDhadwX30viOIqxeviZSawv5Sp AnnskBMFv8j8emnnPi0eLesVyqsz6f2f4GXey/TXYirO1EJlrrH/5VgPcp3eW7ol iOy43GDirEX6OpRrNTOB2mDqQb51GQhifs7Yiy80Uz9Jjui2C0zJf/gtExuu9uyD RpsbD8N07CblHKIg6Zeek80q3b8MyEsjMSCMizQl9PCw9NQq6sLKTFJO3RP6ikHt Z4bwR3Bg0vlnAqK7zojlvPXp4dSkW20edfNG2ZAGXPDvy0p+OcE3AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTov5rJ xmBKJKGko2eE/1+sS5kr2DAfBgNVHSMEGDAWgBTov5rJxmBKJKGko2eE/1+sS5kr 2DANBgkqhkiG9w0BAQsFAAOCAQEANCRD0NuV+fMFFhXlKuUaBWJFANoo9rBHcyiF 0xKuEpBsgIMUYn6dCIM+DY7sqbR3ej2qYWwtiZEYdvfrVVxQ/rBJANCtJkUMrA03 YXpMOkTiNSKGMVSi9nMW/gxZFqqF97TtFDiB1f+rDqrCza88UbH/WZuGLDbRHtfL wMma5NIlToUtSGshtPRwf+EQlflKPAbom5X+JA5Kd+Hm99pu8b/kNBCXoVktBw2K 47T4hdyyLI9ZP19KikGq5mFU63O+hTz0gZmzK6X6uLCsTD79aSeE4KjFiqOTPCcq GE00Gr0ERANucIf5zxQJ6MnqJj1As+vrHD7hBYZ2OWifOOv3Og== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-11T23:58:32Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-11T23:58:32Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-12T00:04:58Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8021" uid: 0dfd7145-af41-4ff3-bcdb-962f9772dd93 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-11T23:58:15Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"7bff5fe1-e3eb-47bf-9ab1-c51e8e69d773"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T23:58:15Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 7bff5fe1-e3eb-47bf-9ab1-c51e8e69d773 resourceVersion: "2379" uid: 5820d3e8-30cc-4661-b3e3-653aa0dd7fa3 kind: ConfigMapList metadata: resourceVersion: "23390"