--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-14T10:55:51Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"16639150-3eac-489c-bdd9-a1329465f165"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-14T10:55:51Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 16639150-3eac-489c-bdd9-a1329465f165 resourceVersion: "2395" uid: 85cee80c-7c8b-4e05-a427-937ca7b1783e - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-14T10:55:51Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-14T10:55:51Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2389" uid: fbdd40ed-7f8c-4aae-a47a-2dadb817080f - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-14T10:55:51Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"16639150-3eac-489c-bdd9-a1329465f165"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-14T10:55:51Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 16639150-3eac-489c-bdd9-a1329465f165 resourceVersion: "2388" uid: cf1a3127-ca7a-4dd4-81ed-a6fe45738db4 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIV8o5a6X5PbQwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNDEwNTI0NFoX DTM2MDkxMTEwNTI0NFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxniH5M+VHGXt hnLIug/SIye6y9+9dlkxdzHWFPHRhelcKvuIV07EatOpRI0C7qvt2umoz64j2UdK gxJXQyvo1JIbufT4TUbRH9LfWHqLib7bonmT/Q90JMaJtdpFBbF5RxMLjXg9flyb npRthTDinrpsHNvmysuiX4ibKWCCrBZHkmLC+l20J9s4JV0x2qZQQePWp3nRn2YQ 46oc3qkjL9iN/sxevzPeNNhdabZEOLYmOhTGabCLZLQqJEa7omyqs6JUlQry+WmA DzzN3pnu/iwWwThmHr7A9rafEEwO6RXH5KrGBq3TXr+yRohdFyMWE1EbWjEZyEso ngIEEaJTgwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAomBcneWYrgjf2WoWNXSHaP/GDmQu17SLtHBgnGKI61EARpjo Ss5W65PpwVbmLZtBXgse9mCzIypN2A4v2+qVLjANBgkqhkiG9w0BAQsFAAOCAQEA h3wns14hWhWF7VVFwxsqakyIit6F8Ktqwi01hlmg4QpYGFVr3HQTlsnf091wAPQY 7NC2+aUM21Le07WKMMgGPgJW40DMjmCKLKBMdKoLDbnwEVmKfHzyoLb9Ay6bLg40 V/hwx0AppOlcfzvDO9KcGXRN9bRJxN1CrUcawej62qrTVN5SrWraY2ZHT7l6g8Tm uS/OKcMY6J5hjXBATU6gh84VF1iBTDjwUbQlYslcsWskvqu26XVfJwaVgYVFyJPD 6FLu3muhZrvKgsMLmt433cPuH3hQI8r0fr7DpAHRLoq6nAX3IEri2j+40dh6M4vJ wRU9+TIz4vWf+v0UHfYGPg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIMr0cSQyirBgwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNDEwNTMzNVoX DTI3MDkxNDEwNTMzNVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANvk1cBsjb39LyHlN8uoI646UnEo0q5GFLjw43DzTc3jkKyGZ6jDwzlCPIJTYnsN AouIkaRGo+zfOdnELB/S3aVQoBCt6HFACAQOeL0lbOl1CVAn+CXvrb2PkSbgOyWs N4EG6I+tDUjlvNmt57kUX7FBb1Uzx2/6UO8/SsLPYIt/jOTSuihJNn5BcHUuP+IO GgMh16TDOfatTKMW5m+ZrwZekoTdL7mjqMf4uWiTqHexjTk0VLyioSrtMBzQcG26 v3zk/7ozDPyQRhOIXolel4WvPpqPlyG14fHjVs4D7es6vcf+vuCrUra9jYpeCfR5 Yws63g1yv7ABGiYcmxlDBUsCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAJlbymf7n5drE4y3SOdGUSehdfxrkOgrsmBNjJZN2fGk6LjnhueMW/+Wk r2NzsiwEGRGSF+32MYmJgXYXSHUQxzBLBgNVHSMERDBCgECiYFyd5ZiuCN/ZahY1 dIdo/8YOZC7XtIu0cGCcYojrUQBGmOhKzlbrk+nBVuYtm0FeCx72YLMjKk3YDi/b 6pUuMEsGA1UdEQREMEKCQCouYXBwcy4xMTFiMTQ1Yi0wYWYyLTRmMDUtYjE5NS01 NWI2Y2M0YjQ1NGEucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBABltp+5ZyA51znYV1wIf2J3S5lGK7NtoScF8ZjapzJnpyfkVRLXBwERclfkF ThD74NB5xjS1fXbId5nVYFg5zdEF3AnwrSr2kOdua7AVgb8pXal/oKk15LKF/CRK L7qegWp6gIyE0r3IvAhDkhYAowWH85rs9qD9U5FBES+KegUchqxNDVVERdPaq8s6 zLCJ8v603xqJlDpHIb8M8oo7c0aET3jX+P1bHTtkz5Jltq+7f45NtF2+Om3zv4Bg OGUjfo5gESd3AbtcHamiBAi5xJ6oWRxa8FM+N66rjvjYAPmwaf4UGK2gYRei2UBn 3L2cqfJG7ORxgqKAdUzBnQTT1C0= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-14T10:55:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-14T10:56:31Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4283" uid: 4f870dcc-d54b-4306-9a52-a52cbb34b957 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-14T10:55:52Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"16639150-3eac-489c-bdd9-a1329465f165"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-14T10:55:52Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 16639150-3eac-489c-bdd9-a1329465f165 resourceVersion: "2402" uid: b880386e-b809-47c9-a3e9-1f5924ca2b55 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIW0PEq01jHXcwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTM4MzcyNjAe Fw0yNjA5MTQxMTAyMDVaFw0yODExMTIxMTAyMDZaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkzODM3MjYwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcC1OzLfZQPU1hZBKTUa/oRadX5iYHurKI FCjP8xZ0/bo1EW/OS99qDQBBUwsZzEbA0teKphALmY2YhP0klmxCZqqUMl5x7IYg RrvwpHYioeoqWqXxCEEgDnH5swH+bKlaBPpfEZV+jGQG15CnQeuFBhDv8R8O6E2H yvuoYsFvYjLbY8cFvgh0NmAQEPshcz7QI9uffrUaBYL877wUY1EMJ3L2SCi0UKuo 4qoCSv2CkjZItavzobUYHBCmimdQuqJrtz1an1OeN1RkdGL7FPUT+OFgdHu+rxmD +3g1L6ELyoc68L2u1QBwSXGEhJHrZ9FisNSB/zcjycyEcy1NVsqPAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQJxLpD VXDTwZOD1TT459l8gBKzbTAfBgNVHSMEGDAWgBQJxLpDVXDTwZOD1TT459l8gBKz bTANBgkqhkiG9w0BAQsFAAOCAQEAWcof0rF6BlJ5SZ+GxFX0BEZ1u2beo4Sqv7p0 CNahCZF5IOOgAH84yn5DQ6iwLXnnccIz7Li2lgZ4y1Cf7C8JQihTL7U1g1aVycPv q5FfEKGzvKRZKtr0iWEQFpD1saweQKr24f8ChqxcEirGZr1a9q352EOxAMLnulvT /56+XO2W8nZaqSFWzWraG6dojKsdFv69PYu1nXdPRUZ32AVjfFcCZSvJixlD1NDz O0RDH2Z1QsZKd/rxmj0QXngLDVVosqjsM44p90ZX0H/VuMQd0uEV26AYN3BaD8rn AJFC+43tsgOfUPAFjk456sfdvy/Mr10NyX/AlK9kaRA0dpZsIQ== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-14T11:06:38Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-14T11:06:38Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14616" uid: 1681bc95-23bc-42ab-ae77-4fb5e61d1b3e - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIW0PEq01jHXcwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTM4MzcyNjAe Fw0yNjA5MTQxMTAyMDVaFw0yODExMTIxMTAyMDZaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkzODM3MjYwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcC1OzLfZQPU1hZBKTUa/oRadX5iYHurKI FCjP8xZ0/bo1EW/OS99qDQBBUwsZzEbA0teKphALmY2YhP0klmxCZqqUMl5x7IYg RrvwpHYioeoqWqXxCEEgDnH5swH+bKlaBPpfEZV+jGQG15CnQeuFBhDv8R8O6E2H yvuoYsFvYjLbY8cFvgh0NmAQEPshcz7QI9uffrUaBYL877wUY1EMJ3L2SCi0UKuo 4qoCSv2CkjZItavzobUYHBCmimdQuqJrtz1an1OeN1RkdGL7FPUT+OFgdHu+rxmD +3g1L6ELyoc68L2u1QBwSXGEhJHrZ9FisNSB/zcjycyEcy1NVsqPAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQJxLpD VXDTwZOD1TT459l8gBKzbTAfBgNVHSMEGDAWgBQJxLpDVXDTwZOD1TT459l8gBKz bTANBgkqhkiG9w0BAQsFAAOCAQEAWcof0rF6BlJ5SZ+GxFX0BEZ1u2beo4Sqv7p0 CNahCZF5IOOgAH84yn5DQ6iwLXnnccIz7Li2lgZ4y1Cf7C8JQihTL7U1g1aVycPv q5FfEKGzvKRZKtr0iWEQFpD1saweQKr24f8ChqxcEirGZr1a9q352EOxAMLnulvT /56+XO2W8nZaqSFWzWraG6dojKsdFv69PYu1nXdPRUZ32AVjfFcCZSvJixlD1NDz O0RDH2Z1QsZKd/rxmj0QXngLDVVosqjsM44p90ZX0H/VuMQd0uEV26AYN3BaD8rn AJFC+43tsgOfUPAFjk456sfdvy/Mr10NyX/AlK9kaRA0dpZsIQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-14T10:55:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-14T10:55:48Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-14T11:02:20Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8390" uid: a39629ba-bd90-4b98-bf18-b60b8c4d8812 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-14T10:55:51Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"16639150-3eac-489c-bdd9-a1329465f165"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-14T10:55:51Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 16639150-3eac-489c-bdd9-a1329465f165 resourceVersion: "2399" uid: 32e11a68-eef8-400f-9813-729d5dcd43f7 kind: ConfigMapList metadata: resourceVersion: "66990"