--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-11T00:52:16Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"d04a713c-09f2-4c9e-9c5d-888fb3b02f22"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T00:52:16Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: d04a713c-09f2-4c9e-9c5d-888fb3b02f22 resourceVersion: "2574" uid: b8128955-4b2d-4363-a489-d25ed4c874ac - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-11T00:52:16Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-11T00:52:16Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2567" uid: 9abe5d04-afb6-4d8f-b135-7e48f1ce33e2 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-11T00:52:16Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"d04a713c-09f2-4c9e-9c5d-888fb3b02f22"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T00:52:16Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: d04a713c-09f2-4c9e-9c5d-888fb3b02f22 resourceVersion: "2564" uid: 15383be8-fb48-4314-a483-9b8a5a4e8fa8 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIRgVtyZHxe/EwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMTAwNDk0NFoX DTM2MDkwODAwNDk0NFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8gimBkHI0bb 2r5N7ZEc6Tk5XM46MCI/LgKfrI/pGU9aJ2rvVUoIhTSQQBg65AnZglJP4jmdbuIl aLJrjmvcvyOhgBtrLI1wbsRgMJFiITW2cCOAncfkeQWKuuPwODGpy7xqvagGv4le ZHG4OALW1z1gGv72vkjbB7iBJtowm6TRWi1WqQqzNODDLvbs3MFmETA58z00kHaK FJOjC+F3ZoSEaU2QHq3BkZKOsYAjGwxt20unZG0k50MgFUS0v2/EHBJMiJEhkpr/ 0glYcKnLKGc/ORhH4++FKgxnIQVhSyJMLgKLQlOsqdRM2q5AkwuNL1T+umi7D/qB ALpgzy888QIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAqbF/1+P+RsUunxZr1TCDj6groWvGjP0Lk4ONMq80kglThzoF FyL3jadGMSlWIqRj5Z0L3HCfiBwBfjn5bnNgCTANBgkqhkiG9w0BAQsFAAOCAQEA UG+oVZxDpmwstgbRxh3hyO3Xu3mNnCiV0y9OL6WbSz8wbuXQtSoDiWPy1VzX5hlU LKA6pG10c8tZxhcgVAXUrEgBvldbqRmk5JA2oEZhbdz9zFt0kaKA9jgCU/RgWjsP XNCy+IVsolCG0WB6xDL5VQ6tGbu806y+fVCm82ADH4GGihH9huaND0Wy5R5aZw9w h0qZ6XCtOCW04VPZpdt2uSqjB5Vtn9dOiwnVOU1aRfeXKyWN4IQCkxvhJqVR8AHp D+HmQGLPYHXDc89Z9SqvwJr31BldpraMrH6wGRUzWl8NGPVdb6qzVHl7IyD46ERl IdN0+CQ1xt6VhZcomjjzIg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIOvTqSh83ZYQwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMTAwNTAxOFoX DTI3MDkxMTAwNTAxOFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANFtg0eJsoQ01Fa5Mv9X2agACuMb3QgL0ZhNO1ErSx8YDFWkFs+3hEjWI+Uzs3uM 7DrexLSMLHpWn+4nVLWBJ/J6caR0KZS/opbBOCksSwmk0avnf/pKqklXaytYjuVr 2qXVtMw9bFRhlkK6rS0/fWGhgVOJ5NuSB/4jI2dIegQMX205vdt0pRywstGoWXCy YO/NOl3q/KwNE3J28NvpC04/45EqOkgobToj4owyWkj5mzq+bse1JDrZ1Pj6iwX8 1DWQ3KLke/vndHSKe2uBhwNdxeY7dSw8bH82JJfV0C+vq3otxU2JNOnQrJ4DPtg+ zVjTWl2PilmpC6zOXI3/DzsCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAbZgetNlEKU7WmzF1105NoehrTcqWJ6RWumeKt7OTTkS6egfkDZNLjeHD CyK4Lni5kmvj38/cVbingj9leWPASzBLBgNVHSMERDBCgECpsX/X4/5GxS6fFmvV MIOPqCuha8aM/QuTg40yrzSSCVOHOgUXIveNp0YxKVYipGPlnQvccJ+IHAF+Oflu c2AJMEsGA1UdEQREMEKCQCouYXBwcy43Nzk1MTBjNy1hYzMwLTQxYzMtOGFlYS01 ZDA4ZDg4ZWMyMjUucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAAIt9jUUlkk7WOkuIToEVczP1cMK+gJ6uplS8HtEhlcdxA0psZX/BsgxTXKx Y/6tffn9qAjYX4Ry/s0bcC4pbfR7vStzA39wes6VZGoGceWjVbFNeHxPZc48kOYL D7XeVn2QCpnEfCNcoKXBFvxHnNVqXJz+DV+maSiK3ixpBkOyyxnU/XfKMltW4TAy II4lXPer8LG0DwVw8pQAn5hQkwJzVLXqD7hZ6o3V2eD0FmC5LII4UaWWNiD1YMFw InPAu5kzU3OVs9E+WEDZ5e/Lgm7qf6A1N6utn5LzeSLsgl0QIEJh7/5plgqyIgzG icp8//RbdgUmkXkMnwwHLE0QGCU= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-11T00:52:13Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-11T00:53:09Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4474" uid: 40d227ec-4305-4499-aab5-5c8c6c261877 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-11T00:52:16Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"d04a713c-09f2-4c9e-9c5d-888fb3b02f22"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T00:52:16Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: d04a713c-09f2-4c9e-9c5d-888fb3b02f22 resourceVersion: "2586" uid: 3ceb9c52-2cf3-4d8d-b63c-e604f6499aa8 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIEV7iMf2QOnYwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTA4ODMyMjAe Fw0yNjA5MTEwMDU4NDFaFw0yODExMDkwMDU4NDJaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkwODgzMjIwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0M78J4u1jwO++wCOx+99Tdc5bLrG5wXE9 vF1Rq0KYgVPxPVUVtCIyRguo564mx5DW1AY6CXDqnPLn9f7sAYkoZI5+u2vUiYLa yaG+HmrTKpaEKMO1lHuUwzRzsx99/yoT0u+il3ipzUJZchDP8oxXMxpi/ZRLpDuz YWeGBrDxB9O/NLwy9q8i2uaOUqsE1KnCFy1PgQm6A1+vRk5JXx8GKilpsR7wYpIp sWGIlHXsW7uRFKLTgW3JAGCFcMJKnCQvj2I6azVGBZ/z6mLChmoQP3e5MAI6UfQk 0GW/grAl9EVEf4rbanGQ8S6a+kvJYThzBn33kJbBDmTT6bKqdAz5AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSkZ/zj FY14+Yz7Qj9VKWoUrCiMcjAfBgNVHSMEGDAWgBSkZ/zjFY14+Yz7Qj9VKWoUrCiM cjANBgkqhkiG9w0BAQsFAAOCAQEAN0rbUCiHEyMZGnLiNCI2RoeAuKDSJscwpkax mN0PVmrMNhDkRZI1b9gNYasHpR0RtoHRBa2dAZOK46yfq2/6A2qBA/H23Am4x7qp 09rJSCBdooeaZL7uyZgQf2UYq6bxUMv0cJlChtVCByAz2dJCQ/yHoTVcXUuh5GvY 7G35cx+p4sDXjpgGu/0cYsNLObHImGj5h7N7U4yq4ZH0bjD8lEW5JyYIPN2vuxQN h/69Wbv+Up2NKW+SJnnCsIQBqmRQ4DVd4MaQYoFvTbQ/rq5HjOSmVzOanyUzZQnk mBbK2TT/X3mzF6bSqmwNYzSv8Abdw4kcsNwoaknlg2oLvk+VVg== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-11T01:03:47Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-11T01:03:47Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15072" uid: 39fb0821-c24f-4cc5-b2fa-84948f073cf2 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIEV7iMf2QOnYwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTA4ODMyMjAe Fw0yNjA5MTEwMDU4NDFaFw0yODExMDkwMDU4NDJaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkwODgzMjIwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0M78J4u1jwO++wCOx+99Tdc5bLrG5wXE9 vF1Rq0KYgVPxPVUVtCIyRguo564mx5DW1AY6CXDqnPLn9f7sAYkoZI5+u2vUiYLa yaG+HmrTKpaEKMO1lHuUwzRzsx99/yoT0u+il3ipzUJZchDP8oxXMxpi/ZRLpDuz YWeGBrDxB9O/NLwy9q8i2uaOUqsE1KnCFy1PgQm6A1+vRk5JXx8GKilpsR7wYpIp sWGIlHXsW7uRFKLTgW3JAGCFcMJKnCQvj2I6azVGBZ/z6mLChmoQP3e5MAI6UfQk 0GW/grAl9EVEf4rbanGQ8S6a+kvJYThzBn33kJbBDmTT6bKqdAz5AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSkZ/zj FY14+Yz7Qj9VKWoUrCiMcjAfBgNVHSMEGDAWgBSkZ/zjFY14+Yz7Qj9VKWoUrCiM cjANBgkqhkiG9w0BAQsFAAOCAQEAN0rbUCiHEyMZGnLiNCI2RoeAuKDSJscwpkax mN0PVmrMNhDkRZI1b9gNYasHpR0RtoHRBa2dAZOK46yfq2/6A2qBA/H23Am4x7qp 09rJSCBdooeaZL7uyZgQf2UYq6bxUMv0cJlChtVCByAz2dJCQ/yHoTVcXUuh5GvY 7G35cx+p4sDXjpgGu/0cYsNLObHImGj5h7N7U4yq4ZH0bjD8lEW5JyYIPN2vuxQN h/69Wbv+Up2NKW+SJnnCsIQBqmRQ4DVd4MaQYoFvTbQ/rq5HjOSmVzOanyUzZQnk mBbK2TT/X3mzF6bSqmwNYzSv8Abdw4kcsNwoaknlg2oLvk+VVg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-11T00:52:13Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-11T00:52:13Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-11T00:58:57Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8393" uid: 7d271cb6-77d0-4f90-8892-62ec7c7f2d1b - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-11T00:52:16Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"d04a713c-09f2-4c9e-9c5d-888fb3b02f22"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T00:52:16Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: d04a713c-09f2-4c9e-9c5d-888fb3b02f22 resourceVersion: "2580" uid: 91420d53-b791-406a-a996-4ba7cd5a211c kind: ConfigMapList metadata: resourceVersion: "62417"