--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-10T17:35:00Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"c2fb08c3-a7fe-4d6b-bbb7-e0845634748a"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T17:35:00Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c2fb08c3-a7fe-4d6b-bbb7-e0845634748a resourceVersion: "2403" uid: 3cb61e86-7b1c-4783-9082-e94761ef9df3 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-10T17:34:59Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-10T17:34:59Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2398" uid: 85ae0f8f-8861-4c90-abff-af115df61600 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-10T17:34:59Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"c2fb08c3-a7fe-4d6b-bbb7-e0845634748a"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T17:34:59Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c2fb08c3-a7fe-4d6b-bbb7-e0845634748a resourceVersion: "2397" uid: 2d1cc071-84c9-4f30-8243-de37b15d3d0c - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIZt+0tfXmaYcwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMDE3MzEzM1oX DTM2MDkwNzE3MzEzM1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtzSsfD8S7hS zF9zwdmHdVkM1coBr5RejlNcYGTHqCHZXYqFT8SxxXgKKPvFN8ijAYqDKMTu8buc Jbz8fRJNHoq5Yk4p3OSCY/InfKMAj9VYRkfxrVmdbborO1vFgDMLIbO7aVXrPRA9 xFxJ4p/JakJ5Pb1hKRFHFVytBc++XK3K79mUa4aEW6PiGtpur2yUzUFbcQu8S/oo EQyVFk5yr4hN7GxqjoM73d6rG7qAZnGLtM4Hsk3qYXDcTsOrztNlsAUU1qjnVyr0 12VP6plP9896Hsq9TVP08An8MJ1Wcwhn76OjPK4/e8Kazs0hl4bYOXmRGjTeHoUJ LAYVUcfGLwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA2hW/v6qOUPMeGXmiy9I1LJTmUdyDR8Y+k3Wotlc5q+s2PdEo cfA1V90X9eXLlRY72aeoZ1WANAJeCuTzPv7qEDANBgkqhkiG9w0BAQsFAAOCAQEA Jbw+eVmmVk+k3vtHd7cOsnfPT9jaDhaMR/Z4ccLDUMEM/0bMVAKnimOMcjbabFS0 Eyw11251geFWQH260fyqRBJ0HSCmeVPpcyqKfJSqSvikV/eeSjJIZduOGXarwqdp pdmT0FlM/qV08I9/a9Oo4exuNSbtmR5D/zqM5JHBQH+jFHvUXMEeVAR1lumQOQU4 WO6BRwH/iHhY/FmVIbAWyJwnHStWlW8IvSvVLJbD4WCPRxPh2qPgycU4i+ND2oBm vc7GFANFcklkfzJcPv/e5bFMQPhrPq9GSXEoWUfku6yHI5z/UOO3gBZHR36N98Ez zWQE0Kiqh6kKCbR4F4oN2g== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIIQ+9WA2BGDIwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMDE3MzIyMloX DTI3MDkxMDE3MzIyMlowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALRR5bwcZKvC56jJLZEppemR6M5qL2xyzbyWD81LbEK7ZAIvCYNhZyvfICr1F/oH X6vBGTzC/cDEKQh5nVHhtenX0JWaDFEmhvxERmh/fY2N/3NOmqqvXUnSTZmh1YYs J7V9YHBANJbPudHzrvJB3/qQI08/zkbtR4LEG6zDkeGsN4TqQ1vrJVqQq4VKK2U6 jL2y2IbTAjVVzm0Jwuj3JyWXCauD6g8Ywbd87vbk0S5SpJvGk4Fy6GB+3Hl8+mw5 LmDLfQGq13nWrZzkKKxVmPoPoPlllEP6A2XH7JvATKJNhrU8JqrmRTUCT338cK7k F3/XGfkddOnQ7Zc3ialVBAMCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAhKjOzj5EdfnjfHOdhqUPKbcDc6rHM3BpyzQ9uWzuyZNlDyxOHRWdmFjp 0QD+pDYjRjUrjboRsHLjEdMSO9u3ozBLBgNVHSMERDBCgEDaFb+/qo5Q8x4ZeaLL 0jUslOZR3INHxj6Tdai2Vzmr6zY90Shx8DVX3Rf15cuVFjvZp6hnVYA0Al4K5PM+ /uoQMEsGA1UdEQREMEKCQCouYXBwcy5mY2U0OTcyMy1lM2QzLTRhMTEtODY0Yi1i MmRhYmE4YTUxOTkucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAJQGsxavYoOXLdfJ2HRu74pxRzl6HcrJi0EfIr01KTcwGUb9y9hOdCgfWxkG YPG8Z9j5NXvf8X7bz2UfP6MLO0S+eXEbFIWWWv/xFqpC61K6s+i+8rL0h33fGT5X okJKbasPt3RqIql9GU9ysKy86uGhMsBKK+rwn4Q1+Da528C8eY6AZhNxdzXv9iHx +SZeenYK8WGHZfa3IMTkUmJRBjCLcn4kYsSsJpJhDQTGfu95KRPf7ko74bn+lL/e 6UVQYZs+vEtcELIuxWDB2qLWsmJ010pFKmRXC/dQonEndJCI2zwB9OEOZRQ+2/Jc t5F/53Js72CEU0r8UgHlBvAGDxE= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-10T17:34:57Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-10T17:35:53Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4397" uid: aa50e665-6d88-49c6-9712-ea95e40dea2a - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-10T17:35:00Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"c2fb08c3-a7fe-4d6b-bbb7-e0845634748a"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T17:35:00Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c2fb08c3-a7fe-4d6b-bbb7-e0845634748a resourceVersion: "2414" uid: 0e9a96a5-6886-4832-9f30-ba966d2c27bd - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIHCfSlj55HxUwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTA2MjA4NzAe Fw0yNjA5MTAxNzQxMjdaFw0yODExMDgxNzQxMjhaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkwNjIwODcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQChzxrQM5T2cZwIXKxW5J2hY3TaqNRjCOy5 ZtfyoOswCPG1IkZy2QabcHzU3ut+6Q+4wjx3JHiP0Kw95Sb51HxQwGLdkgcEYbBf +9DQZsljCqhfBz9rgI4Yizb8NYFC3liAmzS/D/w4oYaxGyNIMz3ZEig/ovfXN/1j klrxSutChz3Qcfp4Bz4ffm5DsJuL4vwCH30V770GStoO+3wbFZYuTTdnf7R+0tTQ U6hcHrZYUqzmqDXnA/lDuJFrISXGwNUOqwOf0Iif6j3yGfiMoDEHimmguvWSzQpm /dejxJlhMYmZj3+b6MggREV6X6EO4Yr6NMMuUgjap8A/rTTpkY1xAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSukBr1 /gSiYzSbRWI38duKGUznFTAfBgNVHSMEGDAWgBSukBr1/gSiYzSbRWI38duKGUzn FTANBgkqhkiG9w0BAQsFAAOCAQEAhN/mFSIfJt0uBwx4itmw5wUZQyMCiCPIH7sv qzrnVS6UssohrjQt78ST3nFT2FO2ctmokKDlrce4ecv+Kcf16xfBfr/7S4tE958u ivbxoLrWp9izcGSFr5I2shOND+JP+K+WUMoHYLa7N9xStYo7uDuaED+sfEX2wJB/ 49CpIhidVY+Np8Mgv5qcgV00kBgsw8oTCO6D3Ko9kin2LMUAOGKRJ5Rx/VpyoIga LWDq67WBZFy3Dfyybtn9DKanFgebcN8jHuyhb+rUanaGctWYxONlr3is7Nz3bLym L7ue9J198Y56L0zr15g99hy7iz805qCvHFVm8q0NJ7DRc7IP1A== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-10T17:47:24Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-10T17:47:24Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15587" uid: 4174c622-f364-43c7-ac4f-af59d006934c - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIHCfSlj55HxUwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTA2MjA4NzAe Fw0yNjA5MTAxNzQxMjdaFw0yODExMDgxNzQxMjhaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkwNjIwODcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQChzxrQM5T2cZwIXKxW5J2hY3TaqNRjCOy5 ZtfyoOswCPG1IkZy2QabcHzU3ut+6Q+4wjx3JHiP0Kw95Sb51HxQwGLdkgcEYbBf +9DQZsljCqhfBz9rgI4Yizb8NYFC3liAmzS/D/w4oYaxGyNIMz3ZEig/ovfXN/1j klrxSutChz3Qcfp4Bz4ffm5DsJuL4vwCH30V770GStoO+3wbFZYuTTdnf7R+0tTQ U6hcHrZYUqzmqDXnA/lDuJFrISXGwNUOqwOf0Iif6j3yGfiMoDEHimmguvWSzQpm /dejxJlhMYmZj3+b6MggREV6X6EO4Yr6NMMuUgjap8A/rTTpkY1xAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSukBr1 /gSiYzSbRWI38duKGUznFTAfBgNVHSMEGDAWgBSukBr1/gSiYzSbRWI38duKGUzn FTANBgkqhkiG9w0BAQsFAAOCAQEAhN/mFSIfJt0uBwx4itmw5wUZQyMCiCPIH7sv qzrnVS6UssohrjQt78ST3nFT2FO2ctmokKDlrce4ecv+Kcf16xfBfr/7S4tE958u ivbxoLrWp9izcGSFr5I2shOND+JP+K+WUMoHYLa7N9xStYo7uDuaED+sfEX2wJB/ 49CpIhidVY+Np8Mgv5qcgV00kBgsw8oTCO6D3Ko9kin2LMUAOGKRJ5Rx/VpyoIga LWDq67WBZFy3Dfyybtn9DKanFgebcN8jHuyhb+rUanaGctWYxONlr3is7Nz3bLym L7ue9J198Y56L0zr15g99hy7iz805qCvHFVm8q0NJ7DRc7IP1A== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-10T17:34:57Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-10T17:34:57Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-10T17:41:41Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8375" uid: 31eec705-b4c9-4c91-ac23-2c9e5b6203dd - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-10T17:35:00Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"c2fb08c3-a7fe-4d6b-bbb7-e0845634748a"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T17:35:00Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c2fb08c3-a7fe-4d6b-bbb7-e0845634748a resourceVersion: "2410" uid: 07b105a0-f25e-4728-8ab3-be16d7ec5e9e kind: ConfigMapList metadata: resourceVersion: "27461"