--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-09T23:03:44Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"13ceae5f-f617-42b2-8562-690766c3777d"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-09T23:03:44Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 13ceae5f-f617-42b2-8562-690766c3777d resourceVersion: "2325" uid: 1b9fd1a7-56e6-4163-bf06-c267e010a363 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-09T23:03:44Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-09T23:03:44Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2321" uid: 6c539b3f-2726-4a32-907e-311ba6207f99 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-09T23:03:44Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"13ceae5f-f617-42b2-8562-690766c3777d"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-09T23:03:44Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 13ceae5f-f617-42b2-8562-690766c3777d resourceVersion: "2320" uid: 2be67a27-8ba1-4a02-8243-17c316010456 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIITxR8Fklz118wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwOTIzMDEwN1oX DTM2MDkwNjIzMDEwN1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MkhpL+s0Igs gUJtCf3TK5mWe4yM3NPLKncvZuX4DhHFbmF6BZRJPw58if8JTaWe3HqJRXDJSb1m GbaiKCNiTZsZpRo7S6lC8RvMnRVq95n5wEyaSlbqpUWCSqmcUc1qGHA7IQWa2F4S ngj9LURm+vgewCw/xVA3y/eYaSpuJrzaf2jKwNgnmRxyHfZdZ4D3zpJ15meX0jTu Oe/YoDNOOfyiRUZc7Yy8BlfhY/rTgb7YXUKf27dD+ypDiA/4Em/OB3FzBA0WO5xE zTOZUpLGaaeJCjCDbFofXiBEo2HC/cX67DH0FnccBEpaUd+of95Zv6OKviZZNOpJ rsMO7NGIHwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAl9V3iCyweCTOOPWR503+Xjjj1kpHECxsYdj2SGwwIXW797/u DzTn0L7mtEJsSL/yXqNj8i4Mjo5/e3o63i2DZDANBgkqhkiG9w0BAQsFAAOCAQEA V0TMiKziTGnf4qlWiYUw3n5erCa3xzJdVz0C/r+XqGDnIraJ59PXIsVG5xjKjy9J 4cuB0QoIy0ib87QeC7EAwHP+ldyVRVyr4spZQNr79RG6zu2s1jyR3w+7NTeX+PPW v2GYn1xPdGggmp3wxEEzf4r9pb/f7WTHJ83JsBKG0OjXt5DZMczTH3CpCmcsDEBX s56L3OQ+7duOULy8XgKlAoSXuL3m8oa8dK91QqGggZMxV3HkfzZi/vRzUb+zIuZz Trmve37RXqm6jm70PeJICDM01XwtgO9lRh0q4raBzDpo6E8ZJXA1cnkC+BGOrY0L C5ikcHqyo6Hp8tgks8yjuA== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIBhRFSOBcbJ0wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwOTIzMDE0OVoX DTI3MDkwOTIzMDE0OVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOKssvxO3I3mpELZ7ROgvDsN4tViZYQzFRf28mFcx1NfxFVdNiqZ3AWmgo/qdUih N/oEij194WNPFlc97dG+42BdNUPtOkctMuE25yqERKk0OFXlNL2PMGq626T77FHE W+E/YZGUEt0dJTCnQmsz/1agD967nBmO2sMPNedwS4ysHlQcxcQkSQZwvAqI5jTG NVlwDNBPEELl1nEZ+DqH5Vmr3af5MtTAVAf4Jx0gXaU/hWQUwYt+JDmulrKbXfPj f9YxjGX1kHHqPT3RzGn7w5g1li8jn15YWtfBPiwWR4jevcFwVQnDPXcc9IhDUz0W 4U/F5GkhdJjQvMY0SF8EjqMCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRArmajtc3jcSn8gKL8+vWHF2rURT9/gNP+LS7LnpjAIkCD6612FZZlrocQ vzKKC3BQ278vJ3aXLCQaG4HdsenjwzBLBgNVHSMERDBCgECX1XeILLB4JM449ZHn Tf5eOOPWSkcQLGxh2PZIbDAhdbv3v+4PNOfQvua0QmxIv/Jeo2PyLgyOjn97ejre LYNkMEsGA1UdEQREMEKCQCouYXBwcy5jZjYxY2M2NC1kMmUxLTQ1Y2UtYWIzNy1k MjE2ZTk5NDg4YWIucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAAtH30OYTzGD0wdNqg39jR93/9ny6AJ8Y07m0VbKnH9QjxxpMGhPYgokt0D8 3BfJIp8DSs3Gd9cUFeqfGELHPwZ7FheG6QbNVmgx9g/IxjrIblMkJm8aOAANYUt3 7jP5dmwkIX8tfbustrNhOuKOTvU4J6jdizmRpZkPtGz3NziWVb175D+2iDQM/g2h pfDydvBCJ7buIKODeU89ldxq8sIrb70SQZ9yZtMiUNVa4DALDX3iZOCh/Z+jg+ED JGy7vxeT/3B41U0dRfZtg9WUkEodnLmeOPSBkITZrhHwcQatjS002B758dEtswbY tN2gPh7/tHEhzWGzCgPmoBJCVVw= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-09T23:03:41Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-09T23:04:25Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4331" uid: 857f334d-9bd7-40b1-bcb5-daf16da5065e - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-09T23:03:45Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"13ceae5f-f617-42b2-8562-690766c3777d"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-09T23:03:45Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 13ceae5f-f617-42b2-8562-690766c3777d resourceVersion: "2332" uid: 2d245905-6719-48d2-a77c-81b7da78495a - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIPHSTI217jpIwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODk5NTQwNDAe Fw0yNjA5MDkyMzEwMDNaFw0yODExMDcyMzEwMDRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg5OTU0MDQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFxw2zmCAfqAZytZ65SOAnt+bYuasMDjM2 TtfRGYB3h81Y21G0oIOjyiutVa+vXb9uCbXG43UibIVWCO7SLBmVX6WzpQ14KhBn 32RPgRQ/os4F4wwaLPSVduSEyiX2EQpF7vzAiPJs4zLPVNnKyEeH+nRdcNojCp5B pSsrUaL7yT/6FeWs1lBY1ChND1/90tux2Necf7mgZH1yabfW0QXf/cwPBJaF1Yma ARrhyVDB+bqiNWUwwtYidAN/UE8j5+F9myW1NloH6h/4G8sWw3g7BqEjRlrJoVDh bLQQrSes4CLdaMRqpszDXyLz8dpKzTj9KLWokDSly9ZSTlMsUw3LAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQsr9SD qIeAkA9RwICabp+uec+3JzAfBgNVHSMEGDAWgBQsr9SDqIeAkA9RwICabp+uec+3 JzANBgkqhkiG9w0BAQsFAAOCAQEAbb9rtmbqEg32IVsv5OXjprx+xhiHck0wbN3j I6Mc6Vp8mFkx8EQqu+qtUzKDTpr4gjqTnZ/iheXAlO248jYmwY4plIIud+DQ2UBw ErXMC8poG4WlieRemfFHVGYlMJmKpbI0spZh3XgZb1RLtWjJm80JqMb+Wmun5/Kp 42l2GTN2CK2HSh8MmHkjXrXlZsozsIZlsvu+v9FInX6Gu6NbtJr+FyV0yoRjAS8P INccPr32Fj5mVKm82AIzWSBTb7qWxNzFyWsIak4MVB6XhSla6u5ZQ+H5nbdeEz3Z Ro6PK4rjZnlD2EPjqDbJA/4yzPH2jDD0iszieyb9XWzW18xr3g== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-09T23:14:18Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-09T23:14:18Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14515" uid: 98c56c02-b9cc-4584-9224-eb857ba14a80 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIPHSTI217jpIwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODk5NTQwNDAe Fw0yNjA5MDkyMzEwMDNaFw0yODExMDcyMzEwMDRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg5OTU0MDQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFxw2zmCAfqAZytZ65SOAnt+bYuasMDjM2 TtfRGYB3h81Y21G0oIOjyiutVa+vXb9uCbXG43UibIVWCO7SLBmVX6WzpQ14KhBn 32RPgRQ/os4F4wwaLPSVduSEyiX2EQpF7vzAiPJs4zLPVNnKyEeH+nRdcNojCp5B pSsrUaL7yT/6FeWs1lBY1ChND1/90tux2Necf7mgZH1yabfW0QXf/cwPBJaF1Yma ARrhyVDB+bqiNWUwwtYidAN/UE8j5+F9myW1NloH6h/4G8sWw3g7BqEjRlrJoVDh bLQQrSes4CLdaMRqpszDXyLz8dpKzTj9KLWokDSly9ZSTlMsUw3LAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQsr9SD qIeAkA9RwICabp+uec+3JzAfBgNVHSMEGDAWgBQsr9SDqIeAkA9RwICabp+uec+3 JzANBgkqhkiG9w0BAQsFAAOCAQEAbb9rtmbqEg32IVsv5OXjprx+xhiHck0wbN3j I6Mc6Vp8mFkx8EQqu+qtUzKDTpr4gjqTnZ/iheXAlO248jYmwY4plIIud+DQ2UBw ErXMC8poG4WlieRemfFHVGYlMJmKpbI0spZh3XgZb1RLtWjJm80JqMb+Wmun5/Kp 42l2GTN2CK2HSh8MmHkjXrXlZsozsIZlsvu+v9FInX6Gu6NbtJr+FyV0yoRjAS8P INccPr32Fj5mVKm82AIzWSBTb7qWxNzFyWsIak4MVB6XhSla6u5ZQ+H5nbdeEz3Z Ro6PK4rjZnlD2EPjqDbJA/4yzPH2jDD0iszieyb9XWzW18xr3g== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-09T23:03:41Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-09T23:03:41Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-09T23:10:19Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8207" uid: ffdc5c48-292c-4429-be29-f2d5c3b58a56 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-09T23:03:44Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"13ceae5f-f617-42b2-8562-690766c3777d"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-09T23:03:44Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 13ceae5f-f617-42b2-8562-690766c3777d resourceVersion: "2329" uid: 784aa11f-27a0-4463-9efd-167f983e3a3f kind: ConfigMapList metadata: resourceVersion: "26439"