--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-05T06:21:09Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"ae585cc2-2e22-4aff-8728-b66b1916de0a"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-05T06:21:09Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: ae585cc2-2e22-4aff-8728-b66b1916de0a resourceVersion: "2309" uid: 2b8b895e-0279-457a-b92d-d5ecf0a2ac26 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-05T06:21:09Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-05T06:21:09Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2304" uid: a1b1116e-4767-43e2-9b34-b14501c0f942 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-05T06:21:09Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"ae585cc2-2e22-4aff-8728-b66b1916de0a"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-05T06:21:09Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: ae585cc2-2e22-4aff-8728-b66b1916de0a resourceVersion: "2303" uid: 7c916941-d83b-4f80-9d86-2e9dfc515d5a - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIILZmPZVDqGkMwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwNTA2MTc1NVoX DTM2MDkwMjA2MTc1NVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7TMWDwRa40Z QO+/PteYP1WSZJ3fUiSAtsNmoQWu2gCxl9RTNuQgL+hFuhNDVq29lzAQu9PWYs0X vOTH3NrM+eo3JitrJjZYA+weBu15CsV6nRr0ymAkJB2ofDPV/qCsHZ/6jdaADY+q YptrJ054TblGlOLWMn9eQaKMJ81PENRa0OyPd+yQcdr7iyivZ1RaFdl3gZwWGZaE C2PbAD/dGdVEzVeC7GiJnVEvm85CNca4yv/wlvVi4Mk/dhJuKqUYobrZ4zFge4qF lZZOD+Una3QXJSgRy1ToJRO7tsESlh/7Iu4zSwvJeyBeWcBPZ5vBhkh4hIYVR399 mQ5aw+MJBwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAPfHKo1DKbHTV3SEG4IP0L3V4fXht4ntxekYHEJXpJGizaSX6 yHvn/j/pZClQAsPfjUfpG37gnjoE4bjpryOLwTANBgkqhkiG9w0BAQsFAAOCAQEA d/fiGHHNMoCt6tk90K3CoyS0GJVQN1jOTIN1YWgUXbonKBlhwwweM+D9Hvf6sXV1 3U7vUcbBf3LDf6fITTo2QYJzUu8JqjJ+RnBC8mq8rRd9lxEprWu9KGU/WDU7Bwab rwtkLXCDPHiPawLlOS+YVnd2bxti1ADSQEnl3Y7TR5HdgREWdnAcpipMyngpTgDd 3TePd9+qqkVZDiSxHx+iKfDKy5jqf5XLfMch6AiWJysO2eWnwwlUxGfBszWzjcwl XMQVrbXCKfCg7Ncq/7+zcgnSQSvgX7/9PpttoNr9Eyx7fKq0ZnI7Vrj0hCdASuJK jL6uUZWiTEmsV6QT/6B98Q== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIJgiqFnZAYk4wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwNTA2MTg0NFoX DTI3MDkwNTA2MTg0NFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALn6J6iTrkWMlkEL1B6OqnwK8vfTgi3QNjSc09QN3vc4xKNfSIDknPBalVkSjSct 0z9iLZj5D2R6LJRJH3/CokiI5uIAnFV7nKrId8O2lcDqNq9AnArt1jGRGJqsaJLR jVcOn3ppWCaNeNo7agB75AXLJ9nVm1Pcd/5PqHJrqTsqB4R5uo8KUcPpb6X8Rcd2 UqiqO1LauURgg8E4M63c2fp6Ve2CDDpVO5o9G1ODiE0lzCZTdpbQf6hzxsnldFD9 4e0n8AXEf0KIYPQA6PEPkzG7zafidBRjpXwvjZl5Ojk9oFPY0TncS9guTVo1bDgY H0RXAnn9y/6DX4MyZwFq+d0CAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAqTQ3fWtQ4RXhC2J69SrfGWKaZ8MFFAzoHly3VcbnllXlSm4AIDtMZ+cU vRavQ6oFcRk1fPfSmcvKurb7nFbjFDBLBgNVHSMERDBCgEA98cqjUMpsdNXdIQbg g/QvdXh9eG3ie3F6RgcQlekkaLNpJfrIe+f+P+lkKVACw9+NR+kbfuCeOgThuOmv I4vBMEsGA1UdEQREMEKCQCouYXBwcy4zNDQxYTM4NS0zYjYyLTRjZDAtOTE2Yy1k MjlkMjUzYzUwMGYucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAJDRQ7QWbyIcK4NXNoY7cRy6d7I9o/wacWW+b1k4ko3UzKyL+Vaa7hnAXyT/ Dy3YdGZZiu3fCs8zeR/3Rhq6CrGG52DSmancV+j0KIdfj1nllHxVsYdha6TS6Xoc Gi/JeOZ4K2WHwgq5KgRF8QVW94qmHdjw5npVs8vg5eQj/Tkit1AKcid2kkRMYDoO 4xYJVcOE1QYXnxY11zHJbhigKuV/aJ6Jk/VzjAtHH6BLjJ6gSwqYZkVYlY+bJuPl FT/4MlsIj5m8S//V6gEurG0TZ3AGLleMg/sj4Q0a8158vpEuvWYE3zp3LyhrNtZG rWdkJhr5/rV8U5dk3D2FqR6znDU= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-05T06:21:06Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-05T06:22:00Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4304" uid: 1ae5bce7-adf7-45ad-9b5f-b52a2fb18cfc - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-05T06:21:10Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"ae585cc2-2e22-4aff-8728-b66b1916de0a"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-05T06:21:10Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: ae585cc2-2e22-4aff-8728-b66b1916de0a resourceVersion: "2319" uid: ddf98563-4bff-48a1-853f-0aaad3edb0d6 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIGmrEa0ECgkUwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODU4OTY1MzAe Fw0yNjA5MDUwNjI3MzJaFw0yODExMDMwNjI3MzNaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg1ODk2NTMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9MIjAuGk6YWd6zpA13ryi6EbzYhxzmkh6 IydbWpMpJ1VltSfL1Ptt6+ycmMfV/Y4onQIJQGY0FkKM6+tuH0T+LnWelrCj/nqi EeMAL2COseN8m9FNsd2zWObwBT4rYYW9MMNUznyq2OxCovF9y+tGiUomZglHLwQN sZPKr1OkOY7t4wJFfjauTxOMsiOem0roSvWNzfMhIutct6FQGK12lTywfcRx7+vw bh3/D78O/njPklu772QUPwBwi0emGfHlN0+IMzGBHjpBygRXythHHZWDkcMOIbtJ SSHjL1sXg9OZJjE50bNrXpwuglGCcuXNfqXQ9CvTOEoew2nQsk7bAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQx4yhP LOnoib1GHGkwWZcSImNpyjAfBgNVHSMEGDAWgBQx4yhPLOnoib1GHGkwWZcSImNp yjANBgkqhkiG9w0BAQsFAAOCAQEAd/RrbUR3W5RL8bf8Vz3HHLyj8owVGzBhnrUH e4jCnnTzo3dOj3gzjG7d29jKncmWPvZfyqwlT61k5/z/t1BYYqdCp0uK6/U+2RPW nyg1KpIFqPoy+/XEgMo2Je5aTrCaDMRrOWMG7P5mMmrmB7cMh5xihI9WvkYGPpKe 8MM8bfA5cvSPPQz8vuQ2kCXudnNcOlls/8oSEeWwAy9Gohn7ZmTW8fi1t3B5tzYp w72KCEuGkdNk6DwMCPdFCx+qN/p+mzx5/hxtVoqrKlej5VOeMhIrRTC4WN5WBClG GfQHn5rUdnRMkxnNrzD8o+ZW6yXfMYW9IIFPrlOHdan1zhMauw== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-05T06:31:45Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-05T06:31:45Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14893" uid: 889252bd-319f-4f94-b60a-afb9db999c3d - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIGmrEa0ECgkUwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODU4OTY1MzAe Fw0yNjA5MDUwNjI3MzJaFw0yODExMDMwNjI3MzNaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg1ODk2NTMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9MIjAuGk6YWd6zpA13ryi6EbzYhxzmkh6 IydbWpMpJ1VltSfL1Ptt6+ycmMfV/Y4onQIJQGY0FkKM6+tuH0T+LnWelrCj/nqi EeMAL2COseN8m9FNsd2zWObwBT4rYYW9MMNUznyq2OxCovF9y+tGiUomZglHLwQN sZPKr1OkOY7t4wJFfjauTxOMsiOem0roSvWNzfMhIutct6FQGK12lTywfcRx7+vw bh3/D78O/njPklu772QUPwBwi0emGfHlN0+IMzGBHjpBygRXythHHZWDkcMOIbtJ SSHjL1sXg9OZJjE50bNrXpwuglGCcuXNfqXQ9CvTOEoew2nQsk7bAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQx4yhP LOnoib1GHGkwWZcSImNpyjAfBgNVHSMEGDAWgBQx4yhPLOnoib1GHGkwWZcSImNp yjANBgkqhkiG9w0BAQsFAAOCAQEAd/RrbUR3W5RL8bf8Vz3HHLyj8owVGzBhnrUH e4jCnnTzo3dOj3gzjG7d29jKncmWPvZfyqwlT61k5/z/t1BYYqdCp0uK6/U+2RPW nyg1KpIFqPoy+/XEgMo2Je5aTrCaDMRrOWMG7P5mMmrmB7cMh5xihI9WvkYGPpKe 8MM8bfA5cvSPPQz8vuQ2kCXudnNcOlls/8oSEeWwAy9Gohn7ZmTW8fi1t3B5tzYp w72KCEuGkdNk6DwMCPdFCx+qN/p+mzx5/hxtVoqrKlej5VOeMhIrRTC4WN5WBClG GfQHn5rUdnRMkxnNrzD8o+ZW6yXfMYW9IIFPrlOHdan1zhMauw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-05T06:21:06Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-05T06:21:06Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-05T06:27:47Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8252" uid: 16aa01b5-4710-4a0a-889a-eebfdd27db4f - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-05T06:21:10Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"ae585cc2-2e22-4aff-8728-b66b1916de0a"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-05T06:21:10Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: ae585cc2-2e22-4aff-8728-b66b1916de0a resourceVersion: "2310" uid: f29eab7d-77bc-4d47-b4a1-edde9a4ef4c8 kind: ConfigMapList metadata: resourceVersion: "58772"