--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-01T19:55:06Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"226be060-a538-4bd5-830d-a7917feeff54"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-01T19:55:06Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 226be060-a538-4bd5-830d-a7917feeff54 resourceVersion: "2300" uid: 601dd29f-4cd3-40bd-9c94-d153cd301629 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-01T19:55:06Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-11-01T19:55:06Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2298" uid: bb300fcc-492c-491e-89e0-3d9e4aaf8bf1 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-01T19:55:06Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"226be060-a538-4bd5-830d-a7917feeff54"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-01T19:55:06Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 226be060-a538-4bd5-830d-a7917feeff54 resourceVersion: "2296" uid: 7546a0b8-c526-491a-a244-f27951d9e749 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIILhi3Ob/Or6kwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwMTE5NTMyM1oX DTM2MTAyOTE5NTMyM1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT9PQy4dZjk6 VFLWACwT1DEisJjCaAQZwtiIzdMpDEjrYPRXwlboDqzEgkkS1Pr9pE4HeYEAaFP7 K2tV03CZGu63I36+0v6wI+jr69uYwKYqNA2+0Me9FHFf5gSjl4bSe42ywC3s52UI plW6kfN4io6LJSkw5SGxuIw+cRRM3q+4dctVOYxPlMVf/NFN+o4TIR0J0w5zddaW d7u4lnC6kpfBEkmjoPs/eOPyDkmRD4lJMzev0ALm1TmWpzUSroZ9LpaA+ZUxUP3X Vx3siFRoY3kA1l6kv+J0nyp8pqZ313QUWRWbyZCMeDCmJQr7DOY7zhH0taKc1+5v mTfJ7uZ/jQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAhVSqEW+Wco3POETHYfUMLmbjYB/ZQTwrKxPbeMk/k84HuyXi WiizAmTR0wClU+/2QOLdpw7+ymvGWB5bFSZ03zANBgkqhkiG9w0BAQsFAAOCAQEA B59xHJ/brO6rpFc5Tf8uszdS1Yw4s8Ou0wWtv/W+6b3pjcO4GQTLg/vvfuqpbeyS nON1vNHYtzPK6qBd2zTmKTtFDRJXHP6DcIyhJEyjzj7ey+Vy2kYLU2m0hnNF0/fc QXIQsRnjMQ1MWfoVYB4mt+Jovu1nWoje5/cpEM0+i1zyda+KdgIOsalAzSM+vJxY qYuMcXWB4sKbveeOzkEFr+2a+nHiom7rqXj3o+at4D9fNpNnJ/8AVAeo4vwYYPRp E5gFEDo5FFt4yW3cUYDA8I0i6ifATPocTh6ChPSYc8iZom67ZPOigPheWHF8hqBs HhzKhTP1A/3BK8E+eNg0sQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIEiz0LN/izjAwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwMTE5NTMzMFoX DTI3MTEwMTE5NTMzMFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AM0yRpKcL+kpC+KNr1hW6f2a5d30Fps9QII1wX8Q7Mgah79Z8GH9aLa8D6gH7IH+ ukVQMuG05B5DVK5kjtruo8adIwPWxfsemgTGwRPaaCfN224UKohoUodqzDJGL0Vs W2z4dSpvEDVaG1f8SB83tQrsqtF7bmpl4Soxf8Ic1BrCwJ+iXOjXOCn8Wcros+Ob wOarosP+JuAI9uaeSKIgxqVNvR86MLohlPdtrPyP5DzruXS445OTtVtzHu8kAF9T 41x6yRFrxt91qTt0QaE5OtbvJI8yFcMQjE4wHdPdJPl2qkazYwDZbz7mEHhrLaAK pVVJHSZlAJJBEo2Fn/iiERsCAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAt4Ii9kKfcv4WO5hC5/N53Ulo09JtMxEmy0Bjm+I8PJQRgz+6AUl6gviW sns7QLiBtShb1ucDd6hGD8Et7RX95jBLBgNVHSMERDBCgECFVKoRb5Zyjc84RMdh 9QwuZuNgH9lBPCsrE9t4yT+Tzge7JeJaKLMCZNHTAKVT7/ZA4t2nDv7Ka8ZYHlsV JnTfMD4GA1UdEQQ3MDWCMyouYXBwcy5jZDg0MWJhZjk0ZDA4YWEyMGVjZi5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEArbXOHs6jFF6+ nePkrs01tzkBsX5fKM86Tv58nyZA0BGIA5n/FvUZez7N2io4wlQYRXh32CIIB7z5 qbafnfqJg/RomuEOATiPp2dX4OUgDQ0wipjt0NMJrG+XvRo+44+slUnNk84wj+Y9 qIHs/xjRdSDx4kKrFabrOkj5wwYtkjEUKBrGobcYB0uljvrzUMjxpyg3oW3NKSuO j4kLYuK7ejU+k1+I3LIOseNYAj5RvhR/FDnUA6vxMON3rPqjwmLLRb4d9I+pKdud r3J07OrJYg25e/ExExO10Ep3HSJL+DJbd8DvGtNN/AoBZfC1ohQOPPjJBSF5DZMk KfwwtpF1Kw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-11-01T19:55:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-11-01T19:55:17Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3318" uid: 02ed6aa5-4ae8-4cb9-bf0b-ebfd61be5d20 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-11-01T19:55:07Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"226be060-a538-4bd5-830d-a7917feeff54"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-01T19:55:07Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 226be060-a538-4bd5-830d-a7917feeff54 resourceVersion: "2302" uid: 5432f6b2-cbcc-4be0-a885-1d0e920be678 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIILUarc3Ca42UwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzU2MzM0NDAe Fw0yNjExMDEyMDAyMjNaFw0yODEyMzAyMDAyMjRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM1NjMzNDQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm4E+rMpHd2s9d/AgSsjeseUjcVSJnD40U 8sPAm2srsU57ff4/t2ik6vtinBAnnWMqfzSM/Z3QM7FaLeJsJRST41VZscQ7fF4r IVjKofCXY8QS2bWvLv1TlB87bC6AGdSHbJgjXNPSb7Ya4fTocT+lztl99gTLw8pb PCn2H+sH8XlfTykmFsTFHS7G4kS+NlGLqmdHPwYI+GW9k32u4F7gx1iLeMHO6ZXu ez1R/HfA8fEVLrNyHvq0ULn6CD4jsNZUUTTmN4pb7hwmkJAJp84dcY+0dRufBgoo NFxzmlVffr0MQNL3j83/Fz4FNUPCbNT6JLI/NuR/Gv2dd5OXipZhAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRdn5Aw z3ag7zF3Fp9fKJITvVPmXDAfBgNVHSMEGDAWgBRdn5Awz3ag7zF3Fp9fKJITvVPm XDANBgkqhkiG9w0BAQsFAAOCAQEAYxQ2WeOahGIOGuSwofQ/CtsgQqyDngYLUjdZ 9s2HYP3Eo5pteJjhIIZcnRRqAlOk1Nwg03K3WW2btPlKdkW7FwRP98I/+SdoVU/j uo7NNcb6EcoVuDzwTdw0efKKIGtH18LJqt2kBcUFvMIsgDt87kcG9RUwDudFWqM6 RtwLkOUc4lXRk+Kla8PHUoqcZ84U3I3QYZSO8z0AcGc9JMpBJmB+l6F804cBVfuy cO9DfJS2+azukrrsQzBcoDeBxEO1UGOCUxGcw5DrBVLPCXYEVomv3n7BlEud6qs8 jQS6oWBDQPFP1EgYN1TjmW4Z5H5RPZ/6nrar3CY3pmbR31Uvag== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-11-01T20:09:06Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-11-01T20:09:06Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "18018" uid: 398db7a5-d08e-40f6-9486-92b48537c6e6 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIILUarc3Ca42UwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzU2MzM0NDAe Fw0yNjExMDEyMDAyMjNaFw0yODEyMzAyMDAyMjRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM1NjMzNDQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm4E+rMpHd2s9d/AgSsjeseUjcVSJnD40U 8sPAm2srsU57ff4/t2ik6vtinBAnnWMqfzSM/Z3QM7FaLeJsJRST41VZscQ7fF4r IVjKofCXY8QS2bWvLv1TlB87bC6AGdSHbJgjXNPSb7Ya4fTocT+lztl99gTLw8pb PCn2H+sH8XlfTykmFsTFHS7G4kS+NlGLqmdHPwYI+GW9k32u4F7gx1iLeMHO6ZXu ez1R/HfA8fEVLrNyHvq0ULn6CD4jsNZUUTTmN4pb7hwmkJAJp84dcY+0dRufBgoo NFxzmlVffr0MQNL3j83/Fz4FNUPCbNT6JLI/NuR/Gv2dd5OXipZhAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRdn5Aw z3ag7zF3Fp9fKJITvVPmXDAfBgNVHSMEGDAWgBRdn5Awz3ag7zF3Fp9fKJITvVPm XDANBgkqhkiG9w0BAQsFAAOCAQEAYxQ2WeOahGIOGuSwofQ/CtsgQqyDngYLUjdZ 9s2HYP3Eo5pteJjhIIZcnRRqAlOk1Nwg03K3WW2btPlKdkW7FwRP98I/+SdoVU/j uo7NNcb6EcoVuDzwTdw0efKKIGtH18LJqt2kBcUFvMIsgDt87kcG9RUwDudFWqM6 RtwLkOUc4lXRk+Kla8PHUoqcZ84U3I3QYZSO8z0AcGc9JMpBJmB+l6F804cBVfuy cO9DfJS2+azukrrsQzBcoDeBxEO1UGOCUxGcw5DrBVLPCXYEVomv3n7BlEud6qs8 jQS6oWBDQPFP1EgYN1TjmW4Z5H5RPZ/6nrar3CY3pmbR31Uvag== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-11-01T19:55:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-11-01T19:55:17Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-11-01T20:02:32Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7114" uid: d3211447-7482-4b2b-85c5-3d657e967bba - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-11-01T19:55:07Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"226be060-a538-4bd5-830d-a7917feeff54"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-01T19:55:07Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 226be060-a538-4bd5-830d-a7917feeff54 resourceVersion: "2301" uid: 27ed97bd-f3fd-47a0-a04c-caf5f42ad02e kind: ConfigMapList metadata: resourceVersion: "156215"