--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-08T00:27:05Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"24c4e5a0-9b3f-4605-9d51-71ba52ee0cc2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-08T00:27:05Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 24c4e5a0-9b3f-4605-9d51-71ba52ee0cc2 resourceVersion: "2269" uid: 28f01ddb-668e-4433-9cf9-1a5180c13eba - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-08T00:27:05Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-08T00:27:05Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2244" uid: 6032cc21-963d-4a79-8c43-9651a64dfbc6 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-08T00:27:05Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"24c4e5a0-9b3f-4605-9d51-71ba52ee0cc2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-08T00:27:05Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 24c4e5a0-9b3f-4605-9d51-71ba52ee0cc2 resourceVersion: "2243" uid: 3202c0f5-0ebe-4602-80d7-a1d9fd588e13 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIJxtWQ5piL1kwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwODAwMjQzNloX DTM2MDkwNTAwMjQzNlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuplimBU5Sb6c IyfBDWP/mNZWLk9vKaEKxmgtXRK1nz8asQ+WJXBUqzhSX9Q1bBiQvRPJAQBelYpe CTOK7nvWvP15g1NfFxhvDyMPdM+L7PFk6n8sUeyb5lz+DJdRYQAEqJGxSxxwLvM6 FgkAiR/eab//d8EOz55SehLHq59rVLz5+nCx6uynfVnkE0We6clkNfkBoey4hR3N TpYh9y6adLbM6oZo3qUbG827r8xeEjGaHJECaVM1C+RGEFx0cFHDphw+Mh5U70m8 UsQqy2XYf5+lopmngHdzHdeTj/3mlREmdhv95X5KlQO/i7MhVl6jrPVDjcH7sCrN 5BXwYaxjpQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAI91jVo3BUMH1xP2heP8hZ03sC0v8N+yyoa1XQX/wbV/Nkv6H rx+Wa34x2xL45OUcUTTK7uLvKTrvNT5ta5ngOTANBgkqhkiG9w0BAQsFAAOCAQEA dcjg0c8S+hbPVsO3wH40ORuDhL0hWnIH0mqUDjC5RptVtLVljc5acSMWufVykVMv W8I47T18CIX4hZKazw++0rJ/SMVwPynURCYlmFriwg62XPRISGksMj/a6GQRVRBh dZWysZ4jAaMxtPOqSZ1CYYymq4biZhHSy43elJkzkPLTNSi5wPLACONv286iIqZa nBLp8TylGVcl99ZQQ18XjPsFR/Pkxdht+YwXtO7i6p24CKtU+OyM1uWOmQ6sb2Cn oGqO6yqKVB6JA3F8n57Dfc6mQSVpSHkh9kSzdhB9ZdroQLGr+5owGym8Ym9M8u3L oOwlb2dYgnosf9dy4PWAAw== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIVzRhfxlIrGswDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwODAwMjUxNFoX DTI3MDkwODAwMjUxNFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANqyX+8oj1zqcLgqEHLSXEMdRnvoDwBchKHpOknz+Q2bGQ6Ej7J7pvD7RLSWFGt7 p9uhNyVFY7sE4CtQkY9rWsKscFJPBy1Q2MLHLr0UK9HIb4F+zwCcNLfLmSPCK/LZ ZDuyMvtQZ8SVBYEwmmGb2KEDm2LICibEhPHIIZi14iPQkQ3hrgdn3/7iMX3wY557 7ISy99Eh76+WeaI7ezhWGNywz391tzIOjrXBsvGjnu75/OJnDgX5Ek9IdHn4GPDF FYh5UpIMndIu+qB/epxskvUwci2Z1+s2SCRku2TXsrXLhtQa7OyaSRp6OsT+sH0u +LlYbNkhkD/maOo4CaJZY3ECAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAneEf2qvZFQGe9RUTEOyeLH8uS60q6w1QBPg3++6BKgSm/jwTOQYNhzY/ nqUjBAYijxjxeaeLw7ZAsbPIuKhYxTBLBgNVHSMERDBCgEAj3WNWjcFQwfXE/aF4 /yFnTewLS/w37LKhrVdBf/BtX82S/oevH5ZrfjHbEvjk5RxRNMru4u8pOu81Pm1r meA5MEsGA1UdEQREMEKCQCouYXBwcy45YTQzMDY2YS1iZDMxLTQ5NTYtYmRkYy04 OWQ0M2E0MmM2ODIucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAK5FPUvMhKQVr4ZGreuCjQsgBMPUMgbZ1MMStKUigbqVSViTFf+21MF3BPIN A1FEvYA9JYVrEfW/8c5BKqbT5j4U/+SZChaopGnA2IQMtzePXaOY4ebEY2magswZ qlc11CraT13wUpeb+ajuPuIg0LuJFgIhR6VpAbekgzg1DTkhSM41qMIThPOMCpYy ESiA2RyRt9ogzG/PG8ZtPMsedhjdwL0PTb7ThX8IVZ/kOiHyEVhfJIuvtubsc7Qz ltVpdoxalpyeoyKqSYPhPssPYUAPP4FoYkfeLB2HTyXp/q+95eOUCG+3tceizmdm cye9DzkEQeh0nhYH90QMsRWbKfI= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-08T00:27:02Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-08T00:28:31Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4581" uid: 5a6d8126-8372-4c75-a094-c5a8446ad772 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-08T00:27:06Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"24c4e5a0-9b3f-4605-9d51-71ba52ee0cc2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-08T00:27:06Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 24c4e5a0-9b3f-4605-9d51-71ba52ee0cc2 resourceVersion: "2293" uid: 6694a9b4-8393-41d3-91c6-cf2f67d0668d - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIILk9T8a+T+S0wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODgyNzY0NDAe Fw0yNjA5MDgwMDM0MDRaFw0yODExMDYwMDM0MDVaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg4Mjc2NDQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSztrfM5UG42C+1nL5SifW7Wq6OK4RDPWh DHkp6s9ZJM9H82gt6H8WzTSGayg6R9uGH8oKxNvAvrLJ0g+IRZGpZx3EmpQuCWLZ ETFGwgBt2GT81sKsI1WXeJ2w1/z/pQP6NPg8qGWGIn3MALKXvc9mOVt88f5gUGFN 6IDQ3dqPRgGS+fjI4VLLPGB4QNloZ9bZo6WE1BVr2nVjFcB5sqGpzLmMrQzTkxet gwQVjFD/UeqJnUVR9OBeV+oVPEl3rl421JyMv51Gqb92Z1JRSKxDiGug/PYZknFt dq0Emid+zDy9OfH83xBHw8f65fy9BGFeIejE7uvnvi38IwAhu3OlAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS46o9S umpAWBTOcP72usIpJF5mxjAfBgNVHSMEGDAWgBS46o9SumpAWBTOcP72usIpJF5m xjANBgkqhkiG9w0BAQsFAAOCAQEAWrQgeC/E/JmPkPHPYguhJHI0X6AvIEVUTYOH X+k1fwYAXjQsD/3N4suArTC0482Q1z1fGHsP6PhgL3utAmwyhZT6+r5NBKa1PnYL YX9rt3MdNhbEKDWYMwwvCYV8zS8knWjJIobgyjGpx55x9mX3El7Z59vnFcTYjS96 FtVN/rz8/TEVDFCN5GpY9QFF0h+h22kxzZ7fX6I+SM741YPiYCwuW/5ImnzJ5WZl AzWNmFizsYSP6VE47TdkdB1skSqIKkL8y+LG6WzNpfNSHB/a1g8EP6yxvkHdPx5M t+O5TDTbDKlFtPLUOag26pUjsne/XeQQhKecV6IYZrmToe37pg== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-08T00:39:31Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-08T00:39:31Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "20043" uid: bab312b4-8923-438e-98e9-28f3bc969bb5 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIILk9T8a+T+S0wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODgyNzY0NDAe Fw0yNjA5MDgwMDM0MDRaFw0yODExMDYwMDM0MDVaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg4Mjc2NDQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSztrfM5UG42C+1nL5SifW7Wq6OK4RDPWh DHkp6s9ZJM9H82gt6H8WzTSGayg6R9uGH8oKxNvAvrLJ0g+IRZGpZx3EmpQuCWLZ ETFGwgBt2GT81sKsI1WXeJ2w1/z/pQP6NPg8qGWGIn3MALKXvc9mOVt88f5gUGFN 6IDQ3dqPRgGS+fjI4VLLPGB4QNloZ9bZo6WE1BVr2nVjFcB5sqGpzLmMrQzTkxet gwQVjFD/UeqJnUVR9OBeV+oVPEl3rl421JyMv51Gqb92Z1JRSKxDiGug/PYZknFt dq0Emid+zDy9OfH83xBHw8f65fy9BGFeIejE7uvnvi38IwAhu3OlAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS46o9S umpAWBTOcP72usIpJF5mxjAfBgNVHSMEGDAWgBS46o9SumpAWBTOcP72usIpJF5m xjANBgkqhkiG9w0BAQsFAAOCAQEAWrQgeC/E/JmPkPHPYguhJHI0X6AvIEVUTYOH X+k1fwYAXjQsD/3N4suArTC0482Q1z1fGHsP6PhgL3utAmwyhZT6+r5NBKa1PnYL YX9rt3MdNhbEKDWYMwwvCYV8zS8knWjJIobgyjGpx55x9mX3El7Z59vnFcTYjS96 FtVN/rz8/TEVDFCN5GpY9QFF0h+h22kxzZ7fX6I+SM741YPiYCwuW/5ImnzJ5WZl AzWNmFizsYSP6VE47TdkdB1skSqIKkL8y+LG6WzNpfNSHB/a1g8EP6yxvkHdPx5M t+O5TDTbDKlFtPLUOag26pUjsne/XeQQhKecV6IYZrmToe37pg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-08T00:27:02Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-08T00:27:02Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-08T00:34:17Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8590" uid: 3faf48bf-bb66-4bd7-9e0c-f9e44cdd8f67 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-08T00:27:05Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"24c4e5a0-9b3f-4605-9d51-71ba52ee0cc2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-08T00:27:05Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 24c4e5a0-9b3f-4605-9d51-71ba52ee0cc2 resourceVersion: "2285" uid: 0043748f-7f4d-4941-bf2a-90340da4f976 kind: ConfigMapList metadata: resourceVersion: "52449"