--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-08T13:19:22Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"a1da188b-c1b0-4dc5-ab36-1667950926b0"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-08T13:19:22Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a1da188b-c1b0-4dc5-ab36-1667950926b0 resourceVersion: "2481" uid: 5abcb113-a7d3-4d34-8027-8e4ef8499efe - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-08T13:19:22Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-08T13:19:22Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2450" uid: 62837075-673f-49f1-9e02-95c66842e352 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-08T13:19:22Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"a1da188b-c1b0-4dc5-ab36-1667950926b0"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-08T13:19:22Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a1da188b-c1b0-4dc5-ab36-1667950926b0 resourceVersion: "2449" uid: d6839c10-4fdd-4641-8280-14f9ce1bf487 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIGz2CvRZ2fmEwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwODEzMTcwMloX DTM2MDkwNTEzMTcwMlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CoU0t3pFeD7 qb8bJJ2IRwPmRYw7WXwsr/3tcH2oJUlv2fjvZxTtfyRZFfBx+5YQCmZhBP+Jcu2C q6QS9Z3DFL2/Hq5sIlHTsMee0wDyKkWblooAZ4+PFUjbuOrYXxKncN2MOKNN0M0l Nqo7dTVQ4LV2ZEKmAmxelEO+dtHWwSvxMUw4nOsVQXIOotvLawt7nEn+IF2ijI4e PSXGKJqi6DvOZMH9fLGp+hYzrMkSwRlx2SGPaexm/dTN1GLeF0GgCzLtqBZi9XiI PQf0bDgzrEW/88s1im+h6jzv1xn6m31gpHVWdAtc0nRteNBmEN4QAwIcvlUAXAje Xj6Zf1PDbQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAygX6wi+YGXwmAf/kmRCESe+nr+VxTdmbN8M9wH+Lwq5ixNj3 7WZEbMX/Exj5WwFLdwGO9w8NnDvlBJ82DOS7VDANBgkqhkiG9w0BAQsFAAOCAQEA 0wPTs2eTBNtHko37Tkf0MRE310GmHHZptC2H8KwyP84mcW6osXHCC3h6w7MT3nZP PwOz7+inrqhgzrKzptClHMC6iDVH2oXa4of7jMrOdG+wolCHeSjgw0NpxFQyfm+H TCL/W5wDmWG/8RXG1CRWC/IjKDd4QI0zUECJZrnZ6PGm9BIp/BRl6z1Vq4X4EX7g CFjCTM2AEg/Uq9wUbBmL8BeZwJVU/YiZy61S0I1zdCBKGPGBLaxhFJKRogG3db6B E/wHsIPJcvgqqky0dlYVO+N6cuHqCH9ZQ/svUGzRsBKD4Ud3ufRdKs8ZKWkVXLg4 7Q+TLJBA9lkMkNKm1aIJ8Q== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIbagpryFICacwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwODEzMTczN1oX DTI3MDkwODEzMTczN1owMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMCq81cOXQ8Bg19iA90KiyWQpeO52nF1Mq3SLzTe0sIPXuEO9aNkAh2533YJBsQL RLcWLUBoo0xGo1q24kUmelJuSoNxqXMBuXDNGd0NCc9+9FZW/cZyiLnvl3jDiYl9 bEaOH0S+5DkDBG8OLZ7EPzJGkjHQj782IOpJ3ZZjVGGgcYgVUOUfC2CgK8gwaibV F7kKvvMWPliPmw0GjkhEFKwOVMUdySBK5VpGc5Bdl5/8VScJn5n4eO7D8/M+eoMJ 9sH2ZJ8y7BoxhX6NlEVMrhMxyx9gdNh4qNJ0ajtZWkhoynPIysxNtST6cjok80hM u9B5pmxmyslIgW6xtdjVpdUCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAaS1pbJsn269ngReTVWbMOI/nuqJS7owL4wUaI1o8LPuInE5iLDNZaz1z URIgTtJWMi7uuL6Y9Jz92vUgv3yFmjBLBgNVHSMERDBCgEDKBfrCL5gZfCYB/+SZ EIRJ76ev5XFN2Zs3wz3Af4vCrmLE2PftZkRsxf8TGPlbAUt3AY73Dw2cO+UEnzYM 5LtUMEsGA1UdEQREMEKCQCouYXBwcy4wNWQ5M2UyMC1kMjFlLTRjZTEtOTc2Yi0y MGU5ZGY1NGZlNDcucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAEGnUYsUPNAPDfayWpuWIfsNQOBpWLBrXUv8j9lcCgTE4DBwycUq3gHiXZDl BVmpmkmQB3bfCpAaUw4B+Vb1N0DGOjWRxt6x+CNSUa5cgM2XXba5ppdW90Xu3O1l EVWgKDIkFgAIGoevl9UuBEGBcZGd/jXjOXcte67PAhv08vMuA2yqmw6fMYLzUBVI R+6jdp7ogNiMI+W9z3dYUL4hAEb4du3Mr1OH3kmWeFMghVHiqxTK80jXGqTMeMVV usopK/DT0c8sfb0678MH8oCIlvwWlMQE8skM4DPptbvxAGhdbzPkIa2zSXyspRwG BVN7rzeEQDoOD5ICZ8sOuMhOJC0= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-08T13:19:19Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-08T13:20:21Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4403" uid: 4a5d9383-3459-4429-a0dc-79764ae9771a - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-08T13:19:22Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"a1da188b-c1b0-4dc5-ab36-1667950926b0"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-08T13:19:22Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a1da188b-c1b0-4dc5-ab36-1667950926b0 resourceVersion: "2493" uid: 75b954aa-939c-4794-ad3b-840726c8927a - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIF7gowusNTtswDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODg3NDIyNzAe Fw0yNjA5MDgxMzMwMjZaFw0yODExMDYxMzMwMjdaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg4NzQyMjcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8kUTLJDIreVzkEiLsbhiSv2UmY9Wlwni5 37qNls8XKGjV2cvpiAA4bVrktAboLsXxH0Tb37G3yD0qkEDOqgO5w9xIxEdXRWa/ IZ0Wu0F3WNnpfP0gH7vAXiUE2kMIyI3NpM6Ho9JP8Ln/k13Gn3BO/6lhOp/8BvGQ tK78q40AMmCya7fQQJ6ugljVzezGKA+DAbzIHj794FWfGd0jUUneOAcxVtBURAza TTk5brp87ZaTWn2x5XW4NkQU1Q9hDzwzOr4aPgItUTmcLQLAgyK8h/IlErWWd92F kBT4/2iy3Ak6QpckoWscWMW+gzm3j0lqa/QmPljvoTY6v6Zo7B7DAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRvukqN ZnTVXm6nZtUOWtAaupwMrjAfBgNVHSMEGDAWgBRvukqNZnTVXm6nZtUOWtAaupwM rjANBgkqhkiG9w0BAQsFAAOCAQEAGeiAt7vXhCg9wsoRzb/mXxCrOdHPvD8+x01y reD9LauKav+vPB++oq0h4/6zVOTQywueH8SK1KXRyrSHZSBT5m2rGFsbrE0f6gfk f25LHYEaYyr82wqRNx7E00b+RCiQV2rZYtfGW71FJnTpe68gafq/MFB/pGx1fzMt DJFfUYWMHBxrco9+srgrf1q8pA1X53+G+6N+J2up3g55DY3HAmPe0Ni0DtSNjB/Q aV/0HFgpbHba1ozq7dOIzf7aWNlRrKSuglZKt9QSQ8SqV/LnnI/+lqU4XAjVbyIX LsyZizB7pRnIpcctAq/Y1mU9IRSEa/N1Yhgu506KlltGV8uMcA== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-08T13:37:00Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-08T13:37:00Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "16602" uid: 75481c20-20cc-44fe-8347-58396cee67ff - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIF7gowusNTtswDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODg3NDIyNzAe Fw0yNjA5MDgxMzMwMjZaFw0yODExMDYxMzMwMjdaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg4NzQyMjcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8kUTLJDIreVzkEiLsbhiSv2UmY9Wlwni5 37qNls8XKGjV2cvpiAA4bVrktAboLsXxH0Tb37G3yD0qkEDOqgO5w9xIxEdXRWa/ IZ0Wu0F3WNnpfP0gH7vAXiUE2kMIyI3NpM6Ho9JP8Ln/k13Gn3BO/6lhOp/8BvGQ tK78q40AMmCya7fQQJ6ugljVzezGKA+DAbzIHj794FWfGd0jUUneOAcxVtBURAza TTk5brp87ZaTWn2x5XW4NkQU1Q9hDzwzOr4aPgItUTmcLQLAgyK8h/IlErWWd92F kBT4/2iy3Ak6QpckoWscWMW+gzm3j0lqa/QmPljvoTY6v6Zo7B7DAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRvukqN ZnTVXm6nZtUOWtAaupwMrjAfBgNVHSMEGDAWgBRvukqNZnTVXm6nZtUOWtAaupwM rjANBgkqhkiG9w0BAQsFAAOCAQEAGeiAt7vXhCg9wsoRzb/mXxCrOdHPvD8+x01y reD9LauKav+vPB++oq0h4/6zVOTQywueH8SK1KXRyrSHZSBT5m2rGFsbrE0f6gfk f25LHYEaYyr82wqRNx7E00b+RCiQV2rZYtfGW71FJnTpe68gafq/MFB/pGx1fzMt DJFfUYWMHBxrco9+srgrf1q8pA1X53+G+6N+J2up3g55DY3HAmPe0Ni0DtSNjB/Q aV/0HFgpbHba1ozq7dOIzf7aWNlRrKSuglZKt9QSQ8SqV/LnnI/+lqU4XAjVbyIX LsyZizB7pRnIpcctAq/Y1mU9IRSEa/N1Yhgu506KlltGV8uMcA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-08T13:19:19Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-08T13:19:19Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-08T13:30:39Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "9480" uid: 3076832a-abfe-4d88-8fff-92a55e8f88ec - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-08T13:19:22Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"a1da188b-c1b0-4dc5-ab36-1667950926b0"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-08T13:19:22Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a1da188b-c1b0-4dc5-ab36-1667950926b0 resourceVersion: "2487" uid: 5ccf12f1-e2aa-4b1d-8d3b-3dc6ffef21b2 kind: ConfigMapList metadata: resourceVersion: "60220"