--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-10T19:14:23Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"79853d66-d85b-4efb-a72f-4118f8249a6c"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T19:14:23Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 79853d66-d85b-4efb-a72f-4118f8249a6c resourceVersion: "2921" uid: b0980339-1c1a-48b0-aca5-041237f674a1 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-10T19:14:23Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-10T19:14:23Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2899" uid: 4dff4909-484d-4697-9e91-22fcbac5dc4a - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-10T19:14:23Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"79853d66-d85b-4efb-a72f-4118f8249a6c"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T19:14:23Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 79853d66-d85b-4efb-a72f-4118f8249a6c resourceVersion: "2898" uid: 0663cfa3-d1dc-4144-8424-7b592da85ef1 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIRb/fJODMU7AwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMDE5MTE0NloX DTM2MDkwNzE5MTE0NlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgZkoXmFcrsl aPYy8Z9o5Tza7eucsLEDehEcWfzDECalieX78AJ8ahngAXXShHtJgr0pMpN/6Owi MTIhXqBa0bt/mOXoDk6MKP95KaPEBA7c14h7w0cM/ZCq9t5+fLNIxVhUAPV8mRTb VCrZyXp53Tk75b9/SUV/IiKrPp8guoU3OW3HxFOCI9y8QCvzp3CbB0sW96lqxMyv 8Bl8H+ZYnF7hMjsejRiDbnIXoFG0iyvBJ8o5z+WDOJ49S13vAcLC++ackGxSjuLt NbphWqQ8PyMI9mUuMo0KU5W5P/g7eqkfusdV1f+yPyQDTqHA/Z/2sgxlmbZnzbTC 5A1tGb8XiwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAhjAmbbuVsZ3+L1SsGtaZbfbfrd7HFhhsOm3VC0Ol4pSoRwRi S+ZIE7aLhwCgA60n8SGuJlMHx4hpRSP36f18BDANBgkqhkiG9w0BAQsFAAOCAQEA tqtZWqNzAZEGIOegX1dDZ0GxYaimZt6XGh933JdW//qxu8XXVBdJSwuD8htdT+2g AY96LQzD4Y7wWIGPWjZ3XukHOu7TqYlFbDKSTvOFsPHu1VBDXKvPcziaPfgpS5PN Hew4HJ4tlFn7y6IxLH/Hb1aZRM6966CfL6gSfBCdieH4U9KrV9963P7WDDBgEKr8 u+mEtk6lGNSJosQLK6vD6uSSSeybYrC7ooYGKJ2ovnliJcevSJ4FxsuJ9juCyZkH Deux0m7XP4J8dYBKI7JEVuhi8kYLdvLQnoT93qXeLhimIuCJH3sXRyDIJ01J9G/g 3C2FHmhqt2CmQomb5bb7fA== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIGoa3hD8JWMswDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMDE5MTIyOFoX DTI3MDkxMDE5MTIyOFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKh4QnCYcy9uoexfJFIhizZt9Fo4nOkInMjfEiTm8sd+1OwzUHsS+m6zpPn6a+Us hIggCbu63ua0E6ivaYow+p+LGysa9w1+QeNJknFa+1Hc9/AmbuerLoy51gi1HEuW SPWsMG3Z7+4RYaWm8ol0QG7a7JnE0Pz7wXeH3ZaEj172ka5bchdqrxH91UYsQdAK 4y7AVgR5bIbywmReapvAB0VW3ep2z/0hnW7ZtbLR0Zyq+s0sRMc7dlz8Mep0EXtA uesI5I/Q/re5VyI+e47n248JYg2tS2kDu4ZhH62WTbD2IR5VfLbmgLk0pzk5aIQB vWa8dQkDuIOJDPlOY4tVO98CAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRA33D3KKN41GnwDEUnVYxQtLaP56Qtls5b4AXoFmjepjlT92DfAH59ujvO wAX1XEJMDqRZ0mI4PO4irnfoktsbWTBLBgNVHSMERDBCgECGMCZtu5Wxnf4vVKwa 1plt9t+t3scWGGw6bdULQ6XilKhHBGJL5kgTtouHAKADrSfxIa4mUwfHiGlFI/fp /XwEMEsGA1UdEQREMEKCQCouYXBwcy40NzdjYTliNy1jZTAxLTQ2ODMtODM0Yy02 ZjgyMWFlNTgxNzUucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAGshFg+3AIzdmIsUo2C1T/M80IENskolQa3A75SmfhXDL6MMccSbNKRejh4M m6Ki77nbPmeDwDwPn6Z/ohwDHlRpa2Sg2OJ/5aMsutOC3P46OesXnTwDz1POwEMt oQaoe94EdVYkBAxyS4QD2D3k44UXIei84c5ounDjvcTpOTBkMjeLahoMMbCsO8D2 kacqAAJcLZvBBGA8k8dd9kKCDBjgJDYPGtbjZrsdCiaQmYnSzqJ3DJkGmheXU8dY ej7ULRryJmxAOjgHtLMYfuR7LLoCeaRi23PD4f5t9gR3Nu+vumu5GyyHpFx/CxVb mzVu0TBCb6LZYzyRsbXhilWMnBU= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-10T19:14:42Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-10T19:14:42Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4125" uid: e926d4f2-6f09-4ed9-937b-6ea548b985f3 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-10T19:14:24Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"79853d66-d85b-4efb-a72f-4118f8249a6c"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T19:14:24Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 79853d66-d85b-4efb-a72f-4118f8249a6c resourceVersion: "2964" uid: 611f6968-2e7d-485d-b368-bf2ba79989c7 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIdixCp4vCpaYwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTA2ODA1NTAe Fw0yNjA5MTAxOTIwNTRaFw0yODExMDgxOTIwNTVaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkwNjgwNTUwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCl4JQVNhtRLABLoUvModLSAT0TLYSkhao LR3x1fRyamu6ct0gnikwc9/n3zlK8UsaSjih6I9KAyJ7J/kv9RpyyCKeLF5F0pLq PL4hzZOX5ADBhFm27a/Jx3xfW5hmLqaddqlKBeNarxqht8rooU9IEnPFuu73ds3q lvztfKaRejrtoxssyqt4EJLaws3tQpnS1dfaReXwoxb3d7O4CV3Z6itM1KFveMq5 xY9RN/NGXnMuKsU71Cfpi1reo7cKGcSdPVr2CezTqG73kWgrPBSwkYPJ1T1ONrPh 9dLIB/v2eM1qrt9CpdwKmQUSa7tVt1uwfhiBoo0fgeilyY7W1o1PAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRSgHzj sBmxzPHf+GzDNUHH+uN7ZzAfBgNVHSMEGDAWgBRSgHzjsBmxzPHf+GzDNUHH+uN7 ZzANBgkqhkiG9w0BAQsFAAOCAQEAsed/zOelJ2zDSbpwGNYxswZck6JMNPKtzumA P6T1Laqwj8e0yE0SnTDdeft+IXiIuh9esI+UkJ+HgHXlr12c1L473vLqKk9aspye kcIZ9lq70icOZLGLN1sQKU3td8ScdQFpl9Q+nSSx65dm/On97/6O4t5tFg7dsDqH 9in4BlqiRaECNcYvY9Q2XaVtotl7zV1ialmGUzu0oK0CFTsV2fbnXZLOhYHmU1iz 9ahFMw3/bHzsmRtHNFFqSIBWjCqlS99EUvPb4j8wVG86SlIFx7NQ8iHJ6jEbSL2w RJzdaXvELyBwP3rIqoazyq3lR42Md/8k7rUsjtj/rDWdNySVhw== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-10T19:28:00Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-10T19:28:00Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15419" uid: ff5fa210-5673-4776-a594-b45e934a9092 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIdixCp4vCpaYwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTA2ODA1NTAe Fw0yNjA5MTAxOTIwNTRaFw0yODExMDgxOTIwNTVaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkwNjgwNTUwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCl4JQVNhtRLABLoUvModLSAT0TLYSkhao LR3x1fRyamu6ct0gnikwc9/n3zlK8UsaSjih6I9KAyJ7J/kv9RpyyCKeLF5F0pLq PL4hzZOX5ADBhFm27a/Jx3xfW5hmLqaddqlKBeNarxqht8rooU9IEnPFuu73ds3q lvztfKaRejrtoxssyqt4EJLaws3tQpnS1dfaReXwoxb3d7O4CV3Z6itM1KFveMq5 xY9RN/NGXnMuKsU71Cfpi1reo7cKGcSdPVr2CezTqG73kWgrPBSwkYPJ1T1ONrPh 9dLIB/v2eM1qrt9CpdwKmQUSa7tVt1uwfhiBoo0fgeilyY7W1o1PAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRSgHzj sBmxzPHf+GzDNUHH+uN7ZzAfBgNVHSMEGDAWgBRSgHzjsBmxzPHf+GzDNUHH+uN7 ZzANBgkqhkiG9w0BAQsFAAOCAQEAsed/zOelJ2zDSbpwGNYxswZck6JMNPKtzumA P6T1Laqwj8e0yE0SnTDdeft+IXiIuh9esI+UkJ+HgHXlr12c1L473vLqKk9aspye kcIZ9lq70icOZLGLN1sQKU3td8ScdQFpl9Q+nSSx65dm/On97/6O4t5tFg7dsDqH 9in4BlqiRaECNcYvY9Q2XaVtotl7zV1ialmGUzu0oK0CFTsV2fbnXZLOhYHmU1iz 9ahFMw3/bHzsmRtHNFFqSIBWjCqlS99EUvPb4j8wVG86SlIFx7NQ8iHJ6jEbSL2w RJzdaXvELyBwP3rIqoazyq3lR42Md/8k7rUsjtj/rDWdNySVhw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-10T19:14:41Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-10T19:14:41Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-10T19:21:09Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8370" uid: 6bc09ab7-004b-444a-a8e8-486522e411e4 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-10T19:14:23Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"79853d66-d85b-4efb-a72f-4118f8249a6c"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T19:14:23Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 79853d66-d85b-4efb-a72f-4118f8249a6c resourceVersion: "2943" uid: 1cc42bf9-c5e9-4cf3-b9e7-5e7dcf4d8b2b kind: ConfigMapList metadata: resourceVersion: "57447"