--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-08T11:25:56Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"f04068a3-3d5f-4ddb-a200-b4ebb7003c79"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-08T11:25:56Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: f04068a3-3d5f-4ddb-a200-b4ebb7003c79 resourceVersion: "2313" uid: 4e81ed66-ee1c-4321-a197-40e4c16e2b75 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-08T11:25:56Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-08T11:25:56Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2311" uid: 978f6ebf-2894-4dcb-85db-ac3112481607 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-08T11:25:56Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"f04068a3-3d5f-4ddb-a200-b4ebb7003c79"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-08T11:25:56Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: f04068a3-3d5f-4ddb-a200-b4ebb7003c79 resourceVersion: "2310" uid: 83374c46-b55c-45b9-88be-c1a9bee6d5f7 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIEs8451WVaoowDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwODExMjE1N1oX DTM2MDkwNTExMjE1N1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMdeuyM4onJ1 P58nUO1XcjSkcXAYS459NiKGLnM0rNqaH/0vbsoUFIy3tggTazJx2SAUfR06PpGk qUvtlLAFJxlSg7pfVeek38S1kshimUxcUPPvgbjLEtRJBgpc4v5JN30UO8wih3Vi X1fJCM9cRL6pM1uAU4uhNx4N78Wf9CDe3IlKqO3Tc4uwN+jBzRPrnDOiYWZ1yVDY NC9IQ3SLjhHYg/Aepi/bqmxuMG1Ut/enwnsH9CtYivQuAHdKtfZoOtML2E1vCEa+ 95PclAeF2SSRK/WZPVgYYecBuCKnZmrkXZ6djfdAPaM96n+TRr5A1rmbpCdLt+cP T9dR2rCxDwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAT6L9SpF5tw/7eIkREm+4TXDnhXjNkqT2jxpRt6kl9sQEExIi i+xkrWOlI0CLHMxfknNWcYaggIwvzXI1j/ehIzANBgkqhkiG9w0BAQsFAAOCAQEA CatNbZs/4E7/ErxWlQ53pNdPQbkwn6oKGQqC3Dt9gKF/oaWzM/UIuFIhHaYBxBEY ZLfRi+UfnsNZMiVXjBujSVxEao+xsIsr8Tn/BS8KkU7PRCKhz0ziz/qDe3hHyjVd b4WSq7693ThqWcrt1Id8FaojH8I/CWyuf3/fnEThRFbmYk1aO4HHt7EBlNvkUgKG kXC8ddskpu9Ytdl59yhTbmcj8qctEjhQ/IZSlLCzoyOZLw4SPqDgHEaL9dR2f4D5 9BOj6MzLt5wxdt/JW/XCDSgRi0+SiCGdznGSgtg5kSQyd4Tvz9eFBqRmkpuPLyC7 E/vrT0FJ7jmduscVcf36SQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIFcYkAVdcSXkwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwODExMjI0NVoX DTI3MDkwODExMjI0NVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AN2lb0vbySBcjMpuxyL7uqyyuKpxWKyvZKx0VtTELbPKHHLr74R7E4t4qElqlUSt pam57vWeoMRiZpYb0HUBNLeMMHcET8GzF/kSO69EbjuKYopLULnOgdnz74xKpAbH QjmHLHTm3IWDf5qOWIeb+19Ag2/YsisRYsYrHzDx1jZZO69s5eTyPd+zum7t/3Zw g5y5MGqaRRgKnF2wCQr8sXSkFjWQK9thI+GqsHu+yLy8Y8MZg2zU9y9oqHFJExS7 hCDf27dUUXWcdxgW/VgO2wqPuXqipK5dRZnwaQtBw0zNi1/uY1Lwv3VPPZlzNXP9 lUYGtCaV8/UDmTUt4FWbFwkCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAz8rQAdEddoQm7vLY98FnhFnce4QaXeWxQ++2Ahip0G8MwvyB+3RWacSB mRqa1XixoRzdqr+9dCRFgt5BQLjwwjBLBgNVHSMERDBCgEBPov1KkXm3D/t4iRES b7hNcOeFeM2SpPaPGlG3qSX2xAQTEiKL7GStY6UjQIsczF+Sc1ZxhqCAjC/NcjWP 96EjMEsGA1UdEQREMEKCQCouYXBwcy5mNDI2ZGE0Mi0xMjcyLTQzNDAtYTI5NS0z MDdhNzc1NWRlZjIucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAKH674e1XAC/jPHP3ppguDpjqIqZM0z5m2liWdeTCHIKfwRHxzcs8y/Z/DQh j82EDMMxy1it/n6UJRl/B7tjsHiqV97SFGUX7cN8UoYDMliRNrYVGM3ftNl6YMTi cIOHLe/BG4wxW+pvWxgY9jEvrj92NhfZZd6gzmFig+sicAj0pxdAb6NiwdcdQsCt Uvx3WXGbEEwTuyacARM8NeR7eVr248efjoupfKF0WGdguEnKbVgyMZ99pfLybfPx ifiZzaPZTjpKJKp2D/7K3DgKnT0XaV6TOqm1ibYL8eGw4CYPDSkfsGn+Bu4neybT RRUN1JEpaN5VdUfxKxnJEuEX77Y= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-08T11:26:15Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-08T11:26:15Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4152" uid: 2b76d4f5-2850-4323-8bc7-75eb0eed6973 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-08T11:25:57Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"f04068a3-3d5f-4ddb-a200-b4ebb7003c79"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-08T11:25:57Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: f04068a3-3d5f-4ddb-a200-b4ebb7003c79 resourceVersion: "2320" uid: af629e3b-a5e6-41f2-9a8c-f4055708f0d3 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIW5T+GRDKe70wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODg2NzEwOTAe Fw0yNjA5MDgxMTMxNDlaFw0yODExMDYxMTMxNTBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg4NjcxMDkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+qsEseLY9l39SZCkNR5Ou4Z2WmtKvApKo 5n3hopxj7jQpyTVMt43/8mNvFjJPDkPDe3hn+19ESKh1PiiFXNxnzXFmu19JJzgc Z7MkzAN1D9VNmx0WoYSAt78ZCld6GiDbOFlQb5APmzQL4MzRvvBF+GmCdSxjtSBu 9tlgFyEAi61Wpq63k5JGLWudYi/yV+9meeSPlPqhh4SP1WLxL7NsdtkX9aWFm+12 K4yOh13kOVydP9duyRcPEVIru1IjQK96nzaQmEgaig/gOMci0sjaQM6X42++ep/b WFd909C3Up+CixlVeAR+UWqXaaSvfee3BuTmya2zewa1WUM/yztnAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRMIv6M 8qePvcsaUCYNXjBDjM9UrzAfBgNVHSMEGDAWgBRMIv6M8qePvcsaUCYNXjBDjM9U rzANBgkqhkiG9w0BAQsFAAOCAQEAA6+2LgZxask7tJqF0RBNYUYXcawvWUzhb4W2 uN1hAbeYV2iXwBWeRgveGd8rUgllUtg74I5W5xU+WCn0bUCTcIzXTqiV7zF0qR90 3781cwcO/Y56THFgiDqmKP6NJjjcIGLFkTeGtgOsX5UQ5vbwMKd2ShVJmM6VQo45 tDn9i6EN/vN57F0zY9cCZduG9ZW6Tvwkqxk1pOO7P6sxO8PbGs0eH4Tb1YnO/Iri Hvpmr15kiTb11xEQAtBlTy6uazEG4QeAn17lo8cfmkPzv9qDIhJanZDKXm/Siads 6PLVTgDE8vUw6n7NVRUzZEJrbzGzdfrIJ+0qwc/nHZ5EAHFn6g== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-08T11:36:42Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-08T11:36:42Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14770" uid: 424111c0-a8e3-4449-be8c-53e1fdd5f402 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIW5T+GRDKe70wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODg2NzEwOTAe Fw0yNjA5MDgxMTMxNDlaFw0yODExMDYxMTMxNTBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg4NjcxMDkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+qsEseLY9l39SZCkNR5Ou4Z2WmtKvApKo 5n3hopxj7jQpyTVMt43/8mNvFjJPDkPDe3hn+19ESKh1PiiFXNxnzXFmu19JJzgc Z7MkzAN1D9VNmx0WoYSAt78ZCld6GiDbOFlQb5APmzQL4MzRvvBF+GmCdSxjtSBu 9tlgFyEAi61Wpq63k5JGLWudYi/yV+9meeSPlPqhh4SP1WLxL7NsdtkX9aWFm+12 K4yOh13kOVydP9duyRcPEVIru1IjQK96nzaQmEgaig/gOMci0sjaQM6X42++ep/b WFd909C3Up+CixlVeAR+UWqXaaSvfee3BuTmya2zewa1WUM/yztnAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRMIv6M 8qePvcsaUCYNXjBDjM9UrzAfBgNVHSMEGDAWgBRMIv6M8qePvcsaUCYNXjBDjM9U rzANBgkqhkiG9w0BAQsFAAOCAQEAA6+2LgZxask7tJqF0RBNYUYXcawvWUzhb4W2 uN1hAbeYV2iXwBWeRgveGd8rUgllUtg74I5W5xU+WCn0bUCTcIzXTqiV7zF0qR90 3781cwcO/Y56THFgiDqmKP6NJjjcIGLFkTeGtgOsX5UQ5vbwMKd2ShVJmM6VQo45 tDn9i6EN/vN57F0zY9cCZduG9ZW6Tvwkqxk1pOO7P6sxO8PbGs0eH4Tb1YnO/Iri Hvpmr15kiTb11xEQAtBlTy6uazEG4QeAn17lo8cfmkPzv9qDIhJanZDKXm/Siads 6PLVTgDE8vUw6n7NVRUzZEJrbzGzdfrIJ+0qwc/nHZ5EAHFn6g== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-08T11:26:15Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-08T11:26:15Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-08T11:32:03Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8107" uid: c3894031-f918-417f-96d8-e88aaa0bdff5 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-08T11:25:56Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"f04068a3-3d5f-4ddb-a200-b4ebb7003c79"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-08T11:25:56Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: f04068a3-3d5f-4ddb-a200-b4ebb7003c79 resourceVersion: "2315" uid: 040517db-4cdd-4328-93e3-7a6d23446415 kind: ConfigMapList metadata: resourceVersion: "56796"