--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-10T19:09:45Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"83f4d090-c96c-413f-96d6-efe591df5d8f"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T19:09:45Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 83f4d090-c96c-413f-96d6-efe591df5d8f resourceVersion: "2649" uid: ca6e852b-7e80-4a24-9a59-9f787715d031 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-10T19:09:45Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-10T19:09:45Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2640" uid: 73c7d662-249b-4394-ac4e-51ad8f23d917 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-10T19:09:45Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"83f4d090-c96c-413f-96d6-efe591df5d8f"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T19:09:45Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 83f4d090-c96c-413f-96d6-efe591df5d8f resourceVersion: "2639" uid: 738287ec-fe18-4caf-abf7-93a2b8abeb6b - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIcH2KbQQtUHMwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMDE5MDcwMloX DTM2MDkwNzE5MDcwMlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvInI8GLwA/Te PELTBT/C+d9oXar0GvlOz95mlwPaoT0S5M6vKwtYtHrne5+ZVIIcsXbjzgU2UJN/ So5D/GQObt412UagpnKwr8Nsg7fVJKmkDarQdCxegxWCd1VTipIb4SQoEYnjPdiW k0365tmXa/cV3j2GpECcMzvLXRbevWQtoJt+1RMDWena/kGUg1PH5iiDtXusMrQq YVOnvuNPZenmVY1HNI+IMxan2bAfvdTvr+2k+zm5Hqvi/4HvH+cAGQH0vWASB5qY AkXlADfw3EqtQnRbgTcNQzGQMT2TGoS9rXoJula7e6M9wqbxNZOf0/YspBWz/7O3 QO4vYAIg0wIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRALLHleK8rz9R34PoeFbZo2kwdia3k8UnZjW9x8CEGghRoYLtj lUAQvF+CZZhZIlMDK0Xs3Q4XJZ8in/E1DzakWjANBgkqhkiG9w0BAQsFAAOCAQEA O8Bl1lR3gstTsc13/eGgmsL1Z+/+hWLN2F4laMJKZT9xLOx4GiLdEAoM2x3UfXHe vPRKsWnZcxe4vMS8XPGD3mdzMbHrvtQAZVpgOb71FhokeLss6H9g6VvmqCva1Wco BOkvByFgEQOH2C3SFZzLWmJYiYbiIQRs1Clo4RuCURmRV0UFjfmRslEjNiRWspWF gt7jwZwWqCHPx4R8tfFg8aeg4w40CtJcZnFG+v+XUJHU073eSssnm2qf3JtwES4i 6z6E1l7BmMwRDznB0sjjPsbZ8yTGWk1pqBKy3oiVuCg5xcImoccc9QN4eRm9hwft nTyA/ln/mleJGQruDvHBvA== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIc2zz2VjmwVowDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMDE5MDc0MFoX DTI3MDkxMDE5MDc0MFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALdfDK28yMJQN0m2+ex5HY04g78dJ/n3LffP9+1xa0yT5B3DjhUTTuOWvSov/kLH 9IJwxzgN4kv8ZwH73wTHRJRNWQ4oUdi9lmIDD01iJ6C52S+nUH6q3e9dvJG174az hzI9Xt7HuygfzaGHEPPHVAhiDHHfkJ15o62iHJVzblicjGI8+xzhdYXCC8GYuZ8F anR4FRj68tGwuyK4uTMsLhargH6OfLXqinxaOnpK0Gl3V8BIkAhM219MvihEn+tM xUHswH3F9sbuHSMNjjkzekiwlcgddBwcn6BF4mMfoN4xHSa4UfmZM+RFd2bK6ygE hhmj8Wm7TurAmIhUvXU3DlkCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRABGRREuThOegUpCNI6vAi405Ey/+YtHrQC5WysqAIfclnKt2zXZmMbiFS w7T2cb5/0DWO1CUwHvf8QHHde/895jBLBgNVHSMERDBCgEAsseV4ryvP1Hfg+h4V tmjaTB2JreTxSdmNb3HwIQaCFGhgu2OVQBC8X4JlmFkiUwMrRezdDhclnyKf8TUP NqRaMEsGA1UdEQREMEKCQCouYXBwcy4yY2VkMmY2ZS03MGRhLTQ4NTUtYTQ5Mi1h NjljZWM5MDhlNDYucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAIucRtJWFsuK1UPg+hM06WuWs7dZyxV+inBDZyiImiPdrXLtRGQHnAvr4+Rg kq9/flocnkjuC6bbESrXaNXqoIxcT0RsBaYXgVqZNihGLQApaWJPve83TqNT5ASL XNTvlGAMRbb9Wy/ro9tYrtjNpij529jHHp5L7I5Q1Jg378qDdaW1sR2Gjk4DTLMU gGyTU88k96gJJO6Wy4t3jY9vxW8EjvBE/JVY5myqdZoKPaUKcym12AFYr8IL1cRd YCveS4OvGlrtJMenEZGFUGMm15PfVViQXDr3K66fnqs+ik3RgN1aBuS8U3Q64JMM KeRK4b4Tzwq7V6AocAIBMvP0cGg= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-10T19:09:42Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-10T19:10:59Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4490" uid: e3ccae3f-4270-4645-b8e6-c8107c52ad3d - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-10T19:09:46Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"83f4d090-c96c-413f-96d6-efe591df5d8f"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T19:09:46Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 83f4d090-c96c-413f-96d6-efe591df5d8f resourceVersion: "2661" uid: 181dd353-c5d2-4cc2-8f0b-779cb036a620 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIbo1PIUSR+8AwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTA2Nzc5MzAe Fw0yNjA5MTAxOTE2MzNaFw0yODExMDgxOTE2MzRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkwNjc3OTMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KnXfp5yJkaY3o999bN4jDjgN2xtZelf/ 9arsRkKBckZ58S+vY3dzhtIih/cj1ToBZfrtw9iHFzHcT0RDguRHnmwj132D/ohX oqqi9cRdhNzYqVbHBwrqcmTrdcsIkP9Vykk5RJOnL0RhMDYlPt5YjAKydLdn2bZn IlJrgFadwYkj6K5kOpVbIih9DKZD+Gbdf6K1agp1mZUE/CLAecf4xz0196vOGvl0 sax7gq+B58rx8ltFXs4i9l/p1UHseAp3ivoG2UyW0aYVTWYLvOQGSDUoHo477v+P Kj9rWtctq/+3sUzDQWa9j9JQ0SnKk3vSBl7YT/tKSVRFn9R82oCXAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTeha9B 3pBKsEB4zaTNkLRThW3t1DAfBgNVHSMEGDAWgBTeha9B3pBKsEB4zaTNkLRThW3t 1DANBgkqhkiG9w0BAQsFAAOCAQEAblnpsWzVtnkjrAb1TlIXC7/YNoG83M6yj7bK NMupIWKo/6GciKzSF67A6uHJb/A/l8byuN7MTIUYoUa8FqGoaATIwjaxj3iwNpvv b2NxaT+alGZl4Km4cDwD0z1CP2/8gu+wuoCXa93Ncjxa9MBKSw/YZoC32w515SrV ukE+YX3f2xvwFDWqksDEj2vIMSyrwa5gmUwsYkZrrPEd0ZtmB/Msfej3fbvJawbf 4WaJfde0X+8/eXiDnhswkl90sBPxJf5dXLuMktlRR4/kq5u0fjYNbEIImkX4FLPH rMnhUbevC0yY6UhgcJ7UWCV5bDLN9565AtqdD5nwMWz50P8rdQ== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-10T19:21:16Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-10T19:21:16Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15424" uid: 5ded6068-bcc5-4201-abbd-a7c8c9c834fa - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIbo1PIUSR+8AwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTA2Nzc5MzAe Fw0yNjA5MTAxOTE2MzNaFw0yODExMDgxOTE2MzRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkwNjc3OTMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KnXfp5yJkaY3o999bN4jDjgN2xtZelf/ 9arsRkKBckZ58S+vY3dzhtIih/cj1ToBZfrtw9iHFzHcT0RDguRHnmwj132D/ohX oqqi9cRdhNzYqVbHBwrqcmTrdcsIkP9Vykk5RJOnL0RhMDYlPt5YjAKydLdn2bZn IlJrgFadwYkj6K5kOpVbIih9DKZD+Gbdf6K1agp1mZUE/CLAecf4xz0196vOGvl0 sax7gq+B58rx8ltFXs4i9l/p1UHseAp3ivoG2UyW0aYVTWYLvOQGSDUoHo477v+P Kj9rWtctq/+3sUzDQWa9j9JQ0SnKk3vSBl7YT/tKSVRFn9R82oCXAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTeha9B 3pBKsEB4zaTNkLRThW3t1DAfBgNVHSMEGDAWgBTeha9B3pBKsEB4zaTNkLRThW3t 1DANBgkqhkiG9w0BAQsFAAOCAQEAblnpsWzVtnkjrAb1TlIXC7/YNoG83M6yj7bK NMupIWKo/6GciKzSF67A6uHJb/A/l8byuN7MTIUYoUa8FqGoaATIwjaxj3iwNpvv b2NxaT+alGZl4Km4cDwD0z1CP2/8gu+wuoCXa93Ncjxa9MBKSw/YZoC32w515SrV ukE+YX3f2xvwFDWqksDEj2vIMSyrwa5gmUwsYkZrrPEd0ZtmB/Msfej3fbvJawbf 4WaJfde0X+8/eXiDnhswkl90sBPxJf5dXLuMktlRR4/kq5u0fjYNbEIImkX4FLPH rMnhUbevC0yY6UhgcJ7UWCV5bDLN9565AtqdD5nwMWz50P8rdQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-10T19:09:42Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-10T19:09:42Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-10T19:16:48Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8503" uid: 7a21f06b-3d14-4205-864c-d55d10a6064e - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-10T19:09:45Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"83f4d090-c96c-413f-96d6-efe591df5d8f"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T19:09:45Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 83f4d090-c96c-413f-96d6-efe591df5d8f resourceVersion: "2654" uid: 3b434f3f-77fe-4ad0-b9ba-fd3bf1b3c315 kind: ConfigMapList metadata: resourceVersion: "57837"