--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-11T21:11:51Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"35dee9ef-6aec-4dd3-b827-b5132e8c32ad"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T21:11:51Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 35dee9ef-6aec-4dd3-b827-b5132e8c32ad resourceVersion: "2368" uid: 8e35bdbc-130e-4018-9960-7d2d088feb77 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-11T21:11:51Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-11T21:11:51Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2361" uid: 70a7a640-82ab-4a14-82c2-5de94b1fa186 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-11T21:11:51Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"35dee9ef-6aec-4dd3-b827-b5132e8c32ad"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T21:11:51Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 35dee9ef-6aec-4dd3-b827-b5132e8c32ad resourceVersion: "2360" uid: cb38e838-ffca-45ad-9b07-ede4d640a7bb - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIWQjGmnhlmqowDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMTIxMDkxMloX DTM2MDkwODIxMDkxMlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr568rATTvznC wmvX19JPSy4DWe2e4P9tbM+4RaCUt+qU1UWmjOgUxzWLdHBepEuriRHn4mSlzV9h Aa26IwmMYV6/YxIvifBZfGZUf0VXc8WlBQ3X7qxEsRhaFRbm4IbKoSSv5Inbo6YQ AG+tn4z3xzLy1bQiRs8qi+xdi75p0TtTFZKoD31xzung/GYUyyZF7Ig4ggoG3oHd iDtzZUDLGRjhRH8j8B0M4FFW5VWCN1LPWKrQ7cWdL4tbBl/6ItBkz3A2EZ6zxtXQ gK4M4bHtenpXL+3PRrw0aIc4a1LazdD7S7u+DjZgPq2LbIEmretilUcQHZ7aZ+fE 1Tkw7qbUPQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAFcpbI5F9AtomcRAsA+9iKr2VOnXAyoU79G/4Q4GRcj0MFKo4 Su3NVT0uoDBSoPn/a2Dpkc3NzAZiPLNa9y06kzANBgkqhkiG9w0BAQsFAAOCAQEA igNnuDRx0ZANgTO+50SS5c6qB8dC87QzCGhCIBDeSqEb8nv1eHmJ9hgO6djDHB03 iQgAUeD/gFj17IFoQ5JI7L72gvi5KRx6ZF76xQvlfY0+4ZdvGxA419wFyFG3xmyG yMO/zqU2Ol4lyL+iz9j/x15Sks81PR912JanhKof9W5AFm8yUHKrB6lLevL4Uc+t 4sMueARlz4MWWAka2BLhCZ+JHim34+f225XxmCRS1VRp/EnUreqDG1MVts0dT9FS PPAJzrNJwED0gTORy4/rPOX8bgSOgoRZ2014KIxFtIplnLlqsd3iWR2dynmht7x3 NXg6GIA18X/omgU3M8Xa3w== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIITWHFfx6dAMYwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMTIxMDk0NVoX DTI3MDkxMTIxMDk0NVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKk7gGNVybNcmleGXevjCgPKU2vb9jYdnT6jjXZcLKvy/qMWB+LO0YkXGg9moG1y uZs06ZxUYG0zOYZ9pdbyExAf49CsPDaDWuv76uoq32zANlttqk13PUdIc2V7TwZH HBXekheqcOIx21zaGzaHsYNC7PkTyOhg4tWA0ltFZx5CtaZ+bXIdfCa0fWUU4BHZ Ixn7HghprX/rIx70rpMMh+t0bdvcEvqx4MglsSaHnK/W9xIlWyy++bhL+0/asB9F aD8KtRsm0YoHUaFhXnd0p6dlxey1X7rnwfuEb51Fz8ZrasaLL5tyhlO+4avVPfsl myp6509JNSzwHu4T6xyFSmcCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRACAbDGzcP0Ri/vD9fvmIs/WOP09bedg1W0zor795bLHeG/rsyve2XQspw iMzznwhpZWXX36Ovz1D8tA3iHXEXkjBLBgNVHSMERDBCgEAVylsjkX0C2iZxECwD 72IqvZU6dcDKhTv0b/hDgZFyPQwUqjhK7c1VPS6gMFKg+f9rYOmRzc3MBmI8s1r3 LTqTMEsGA1UdEQREMEKCQCouYXBwcy5hMjAzMjYzMS1jZWY3LTQ1ODEtOThjNy1l MDQ2ZDk5MmFkMDQucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAKiUcnfrcbLAhuRs411qfAMRU5zsJYgeC9Pj4g5swjDPtA8EuwZ72EAIWtwv fQYD62zEcy5NHcosYn/eTSW0En2b/TxwIv4GT8tkscGV4P+Jz5vBurvo+VG/griO pxWDnPbpJ1muFV2f+0lPgJdwGgWcRoCW82Aok8QZ99awi0iKnb1/nYUKcvvJrQHy Orrr08fms7yQGuXIB4DfZEWGi6tQbT0iTgPVQvH2S8F8RTX1p2lVKz7CmWsPx25I EyWlCNPy+iEILvlHKZQ7JFAJNhJ5ikGS57swf+5kNLm4DakjCTufMpYIDQRpJa8W IMGfPb+jS2znlF7Cz7HTVRy4N5Q= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-11T21:11:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-11T21:12:32Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4065" uid: 65a33e14-1fb2-43c1-839b-90f8d5f68955 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-11T21:11:52Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"35dee9ef-6aec-4dd3-b827-b5132e8c32ad"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T21:11:52Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 35dee9ef-6aec-4dd3-b827-b5132e8c32ad resourceVersion: "2372" uid: ab009a49-56e5-401a-a926-67a37baf9801 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIevLXz6IAvT0wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTE2MTQ4NzAe Fw0yNjA5MTEyMTE4MDZaFw0yODExMDkyMTE4MDdaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkxNjE0ODcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj6DHpv0auBbcRxxF28PC2erv26fixw9CF /mOJrJp6vvaViTb3a8URtn7PeES2cfNNJ8JsMR8Iy3iPmX4Z98c9Jg37scdIzQMH T4FRv/J6ijVFQqNtl6LwlsuKbIB39s5m1Y9aQt/lwXqoU5uvSostbvi7S1EaVl73 QxdvZw2NhETBncKjdV+TAYGsZ4T2paob/YddI/B5li3yhiB7w2OlFyHwUVsF8QPc buvB3ngupyrFAASwEAkoh/qJmC1S7vUXhdTPLyiUODpiSq/Gtab+4OH9WSj8X1DX qDCWKFxAd7IVp4JxnyqridXkK4bk0dExTSr3LHxSriHVQFNP4HgvAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR+xeXZ tBlKt2n2OCsl+Y9viJg2+TAfBgNVHSMEGDAWgBR+xeXZtBlKt2n2OCsl+Y9viJg2 +TANBgkqhkiG9w0BAQsFAAOCAQEAN7CghAKCfo3wRA61rZ6pLkO3+5e/+Iqp3f7n jj3i9j8ONfmRhRYg0JJHJo3y/QqPift2012nXR6Uqrb2MRu3qSlQoOD5BalJEFpH /h5bS2GyEgqzcHsSPwskBPK+ML984T/UY02xVWMFn7DWSNzZ6kxjRPmzbshq2Ft6 O/BbF7NwGvaCx5v9CeNPFq2u8SrrD7fuUYkOfNRMMHMKIgFzxoxkhqEYGbFjNS8J i3qzAEYlOxQgJOerhM3JhTSvV1Yj5l1Kc23G1E3sOiDquDrvrJOOEkg8H5ZaMhp7 YVAuGVpy3rTWkJ21eKfj7TjL5A1KnjpfvJU/Va7EtmBXEkV3yQ== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-11T21:22:51Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-11T21:22:51Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14836" uid: 82a9d291-a7d1-41ef-bf5a-a7372e386599 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIevLXz6IAvT0wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTE2MTQ4NzAe Fw0yNjA5MTEyMTE4MDZaFw0yODExMDkyMTE4MDdaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkxNjE0ODcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj6DHpv0auBbcRxxF28PC2erv26fixw9CF /mOJrJp6vvaViTb3a8URtn7PeES2cfNNJ8JsMR8Iy3iPmX4Z98c9Jg37scdIzQMH T4FRv/J6ijVFQqNtl6LwlsuKbIB39s5m1Y9aQt/lwXqoU5uvSostbvi7S1EaVl73 QxdvZw2NhETBncKjdV+TAYGsZ4T2paob/YddI/B5li3yhiB7w2OlFyHwUVsF8QPc buvB3ngupyrFAASwEAkoh/qJmC1S7vUXhdTPLyiUODpiSq/Gtab+4OH9WSj8X1DX qDCWKFxAd7IVp4JxnyqridXkK4bk0dExTSr3LHxSriHVQFNP4HgvAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR+xeXZ tBlKt2n2OCsl+Y9viJg2+TAfBgNVHSMEGDAWgBR+xeXZtBlKt2n2OCsl+Y9viJg2 +TANBgkqhkiG9w0BAQsFAAOCAQEAN7CghAKCfo3wRA61rZ6pLkO3+5e/+Iqp3f7n jj3i9j8ONfmRhRYg0JJHJo3y/QqPift2012nXR6Uqrb2MRu3qSlQoOD5BalJEFpH /h5bS2GyEgqzcHsSPwskBPK+ML984T/UY02xVWMFn7DWSNzZ6kxjRPmzbshq2Ft6 O/BbF7NwGvaCx5v9CeNPFq2u8SrrD7fuUYkOfNRMMHMKIgFzxoxkhqEYGbFjNS8J i3qzAEYlOxQgJOerhM3JhTSvV1Yj5l1Kc23G1E3sOiDquDrvrJOOEkg8H5ZaMhp7 YVAuGVpy3rTWkJ21eKfj7TjL5A1KnjpfvJU/Va7EtmBXEkV3yQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-11T21:11:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-11T21:11:48Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-11T21:18:22Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8265" uid: ba7981b1-347e-443a-863b-0e95ed7043eb - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-11T21:11:52Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"35dee9ef-6aec-4dd3-b827-b5132e8c32ad"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T21:11:52Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 35dee9ef-6aec-4dd3-b827-b5132e8c32ad resourceVersion: "2369" uid: 1db8746a-dac4-4604-acc7-c79ade4750b5 kind: ConfigMapList metadata: resourceVersion: "69164"