--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-18T21:01:46Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"a5b54cad-8f42-41b6-a2b9-97277662e418"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T21:01:46Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a5b54cad-8f42-41b6-a2b9-97277662e418 resourceVersion: "3717" uid: da489c35-0c20-482a-9e48-a26bbe6f5a50 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-18T21:01:46Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-18T21:01:46Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "3714" uid: f42be5ba-47f0-4ec9-a7e7-e1628e848e7d - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-18T21:01:46Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"a5b54cad-8f42-41b6-a2b9-97277662e418"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T21:01:46Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a5b54cad-8f42-41b6-a2b9-97277662e418 resourceVersion: "3713" uid: d350a13f-2217-498b-97f1-4fb2b9eb4fb3 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIG0DT3CcgMz0wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxODIwNTcwMloX DTM2MDkxNTIwNTcwMlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywdGkDuZfTSU YWEPdAXlCNHMlPn1QxVExJ+Od/RH8w8+pchj73MCbZQtdWnnKiKPmlEj3sC6/pDi 5dt1127Z4phMB1aA+JPHV/ZKR8sJ/C5LAcEVJdlMCWnspxMO1iXZqWdnASivG0aG EguZhOego/T39csyr/zDfZDzp+dkblMVx4dJQv7/NIBlkKGLORwiiy9ax3SybVES Io194riyhbuvig8SWL6em60MLcf/I2gDVEnA8+AKYg0akT2JLp4h2FWPKEq47AGn i4qseiUKiD2OJOW90MPTFM5cXqKv4a+9EIy9xGQKQB5vV6RGIrdMdxqN8wntAgBr JW8mhpT+xwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAnEU4aBwVGSksSutC9Qyq5RsdNj2pYC9giWdldmGOWbqplts/ VFWsGduQpbCkZ+YK67uQazTToe0xIVkepwjJezANBgkqhkiG9w0BAQsFAAOCAQEA JT05wQ+Vw0ur6/DYvtRm6IbFZKnkS8a310AolJ1Q1mSV9fBRVPsTwDDgOOdm+njr 5ex+bb6Dm26jioYinW3DUW+rvDIn/O5q5PCYCS3yKmZ5MqO+6/g9gRVEtaqgYjZf GHw8crNrUpASbDFsfCiBS07tMIR2tyBHifWDNkWXaeflTFBo9cgv4b8OtSyBD+Mh IeDWhf9gSMFxwbaxK24JCUANxkIM2mQowICuWdtraQJ7Z4pH9CyRo1FKmlvnQebY ViWqUEIwHIC/Moh0EOcCNZJ4R69y9kdzuU2ZBtQyeYLm9sbsjgSmb6GopGzo9kq4 tZEM15rc2Xc278Z7cR+xbA== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIbBGwZh0YM1swDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxODIwNTgxNloX DTI3MDkxODIwNTgxNlowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AL37Ua7sSI7yMAscIc32UsDyuWKwD+a2vMUHMzMVFqTRadiQVjguGVq1xsJAVPh0 +vaGDTkhOLnfjga4DLBKYIrLLzyuuC7UR7BpXyQRYJ8bn+HbBBcbM3xo5lRLG5t0 /cXx3i1aWdcQZy6HOluEoecboMb6gfWH6xQ2qoyCEfG0SXr5fZPV93pMA02jMxca W9UDAskZ5rwo9FPi+V3yghEtNWIYfuCbVxmLRCI8RNq9wwpMArdsGPx3OpgbvJbY oZlL8Ic2I1XvRvK7a/1Lp6vhYKstkmiKsdk5kFHlEfUfuEdEei2zc66iHScuQAu7 kNLfkc8WnLbNLnRMbu2zMsECAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRA9wnjNVDqtS80kDOjt7Gyh2TptQNB3otqvUBVx2+Yr7vSbL4CDoQ473i2 P5DzYH2RbeyaCeM2ARGOAqNsGXKhwTBLBgNVHSMERDBCgECcRThoHBUZKSxK60L1 DKrlGx02PalgL2CJZ2V2YY5ZuqmW2z9UVawZ25ClsKRn5grru5BrNNOh7TEhWR6n CMl7MEsGA1UdEQREMEKCQCouYXBwcy43OTI3NzIzMy00OTZiLTRmM2EtOWM3Ny02 YjE5NjEyZjU0ZmQucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAIZ32moptY00QNwydLIOqiaiK19NcgeO/ORfV/18f8MK25EUHgt6/d4jJuHi 32lVQExHuBjddfnInth82oygvQ2011e+3nCCHjcGEayQw9QiLh+jlnDPfLi6ykNM DnrjPgMWQuUK1XIO+XgvznnyykBnZJktIiQVTpJ3fNIR7+2NAITe9rc2OA8cZb+g z32Rj/IdGCHX8TFy409hnuqANl+MI6A+fbSY4opB4i31W00Y9HxFhW50dOpcyBSB HHP8FDDm4QZ1kNLpYxhWhAMV7QagdLn5JosEvfl1pTtPlTYaw/7agCYbPuerO8Jl +7WguTffYYSnTsjwsq//XsECYjE= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-18T21:01:49Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-18T21:01:49Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3902" uid: 8be0f7f2-713d-44d6-a439-19d7aff6879a - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-18T21:01:47Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"a5b54cad-8f42-41b6-a2b9-97277662e418"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T21:01:47Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a5b54cad-8f42-41b6-a2b9-97277662e418 resourceVersion: "3720" uid: e43e6fba-e458-4f1c-a597-55d3e6d57290 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIIIV9qXJDCIAwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTc2NTY0NDAe Fw0yNjA5MTgyMTA3MjNaFw0yODExMTYyMTA3MjRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk3NjU2NDQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDikocueDRD2NRAG5hd3F63Zw3vmnNq8KuW oXfc9RsM1uZ4z0DchKgDlO6++gqJQG0XeBDXvxNUkUGby7mG+93ZfzyHipdLQlT/ WrpW84BVftdOnMEnUZ7UGR5oc0PZaFLDz0/5E/zbdiBSqOAw/YAesySn6v6mqKww i3ctcSr9C4V2osvPu4AcyxMH2kV/wloOzDQr2z487eRd1RMZ54JYvJ8TCNku24R6 FJhuYSpuyj0uSAtGjFFMKISA5vG9OnBA9mZnh4H4wQvrDXASFf+O/8Ywzad1ImTm PVcDgP24/FEvhBNJOFZ593iKkpjLbC9nBCuEfzDqNqvRXEG+T/g5AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSALtIh kyKntobPZbU4J5sYvfg5kzAfBgNVHSMEGDAWgBSALtIhkyKntobPZbU4J5sYvfg5 kzANBgkqhkiG9w0BAQsFAAOCAQEACBKxZjAhONidwyvR6SwEKYOBvfMaHfHt2CNB 70UG0KVd8EHQAYe6KrxoMwszC5PLDfIVPCTMOL1gyYSjwBiXAz9ywDvTzY7YrLO2 ASwHGh8ztrCnF4h4cPi4Za1S853Ks0/9h3Hwbk0K8T35AvZz3EgFFaak3tw+8NjE nbn1PY71J/hFt93aKiIMnRnnbv+QHZUpCpHJPPo3KRtehCPypDNk+x1/g5o3t8A5 gaI1PKsMxpT/DW1UV5DJccbGjxYG645fzodtWZG4PhT7JrcZelExH2+jAUYrrJKd eQP2IAKNVmY+D80sU4QRvEAmI28EpQbUOV/0sB3GBIjDPEg6Mw== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-18T21:12:26Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-18T21:12:26Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14962" uid: 72490efe-b09d-4321-8255-b83f83705a1f - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIIIV9qXJDCIAwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTc2NTY0NDAe Fw0yNjA5MTgyMTA3MjNaFw0yODExMTYyMTA3MjRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk3NjU2NDQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDikocueDRD2NRAG5hd3F63Zw3vmnNq8KuW oXfc9RsM1uZ4z0DchKgDlO6++gqJQG0XeBDXvxNUkUGby7mG+93ZfzyHipdLQlT/ WrpW84BVftdOnMEnUZ7UGR5oc0PZaFLDz0/5E/zbdiBSqOAw/YAesySn6v6mqKww i3ctcSr9C4V2osvPu4AcyxMH2kV/wloOzDQr2z487eRd1RMZ54JYvJ8TCNku24R6 FJhuYSpuyj0uSAtGjFFMKISA5vG9OnBA9mZnh4H4wQvrDXASFf+O/8Ywzad1ImTm PVcDgP24/FEvhBNJOFZ593iKkpjLbC9nBCuEfzDqNqvRXEG+T/g5AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSALtIh kyKntobPZbU4J5sYvfg5kzAfBgNVHSMEGDAWgBSALtIhkyKntobPZbU4J5sYvfg5 kzANBgkqhkiG9w0BAQsFAAOCAQEACBKxZjAhONidwyvR6SwEKYOBvfMaHfHt2CNB 70UG0KVd8EHQAYe6KrxoMwszC5PLDfIVPCTMOL1gyYSjwBiXAz9ywDvTzY7YrLO2 ASwHGh8ztrCnF4h4cPi4Za1S853Ks0/9h3Hwbk0K8T35AvZz3EgFFaak3tw+8NjE nbn1PY71J/hFt93aKiIMnRnnbv+QHZUpCpHJPPo3KRtehCPypDNk+x1/g5o3t8A5 gaI1PKsMxpT/DW1UV5DJccbGjxYG645fzodtWZG4PhT7JrcZelExH2+jAUYrrJKd eQP2IAKNVmY+D80sU4QRvEAmI28EpQbUOV/0sB3GBIjDPEg6Mw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-18T21:01:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-18T21:01:48Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-18T21:07:36Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8110" uid: 172af637-9e28-47c6-93af-9c069fee37c2 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-18T21:01:46Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"a5b54cad-8f42-41b6-a2b9-97277662e418"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T21:01:46Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a5b54cad-8f42-41b6-a2b9-97277662e418 resourceVersion: "3719" uid: 6443348c-002c-4427-8d30-f6bbba389d23 kind: ConfigMapList metadata: resourceVersion: "67951"