--- apiVersion: v1 items: - apiVersion: v1 kind: Pod metadata: annotations: cluster-autoscaler.kubernetes.io/enable-ds-eviction: "false" creationTimestamp: "2026-07-13T23:39:14Z" generateName: multus- generation: 1 labels: app: multus component: network controller-revision-hash: 69996f47b openshift.io/component: network pod-template-generation: "1" type: infra managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:cluster-autoscaler.kubernetes.io/enable-ds-eviction: {} f:target.workload.openshift.io/management: {} f:generateName: {} f:labels: .: {} f:app: {} f:component: {} f:controller-revision-hash: {} f:openshift.io/component: {} f:pod-template-generation: {} f:type: {} f:ownerReferences: .: {} k:{"uid":"6dcfa503-dcf9-47b6-87d0-860f91d976eb"}: {} f:spec: f:affinity: .: {} f:nodeAffinity: .: {} f:requiredDuringSchedulingIgnoredDuringExecution: {} f:containers: k:{"name":"kube-multus"}: .: {} f:args: {} f:command: {} f:env: .: {} k:{"name":"DEFAULT_SOURCE_DIRECTORY"}: .: {} f:name: {} f:value: {} k:{"name":"K8S_NODE"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} k:{"name":"KUBERNETES_SERVICE_HOST"}: .: {} f:name: {} f:value: {} k:{"name":"KUBERNETES_SERVICE_PORT"}: .: {} f:name: {} f:value: {} k:{"name":"MULTUS_NODE_NAME"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} k:{"name":"RHEL8_SOURCE_DIRECTORY"}: .: {} f:name: {} f:value: {} k:{"name":"RHEL9_SOURCE_DIRECTORY"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/entrypoint"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/etc/cni/multus/certs"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/etc/cni/multus/net.d"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/etc/cni/net.d/multus.d"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} k:{"mountPath":"/etc/kubernetes"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/host/etc/cni/net.d"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/host/etc/os-release"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/host/opt/cni/bin"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/host/run/multus"}: .: {} f:mountPath: {} f:mountPropagation: {} f:name: {} k:{"mountPath":"/host/run/multus/cni/net.d"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/hostroot"}: .: {} f:mountPath: {} f:mountPropagation: {} f:name: {} k:{"mountPath":"/run/k8s.cni.cncf.io"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/run/netns"}: .: {} f:mountPath: {} f:mountPropagation: {} f:name: {} k:{"mountPath":"/var/lib/cni/bin"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/lib/cni/multus"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/lib/kubelet"}: .: {} f:mountPath: {} f:mountPropagation: {} f:name: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:hostNetwork: {} f:hostPID: {} f:nodeSelector: {} f:priorityClassName: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: {} f:terminationGracePeriodSeconds: {} f:tolerations: {} f:volumes: .: {} k:{"name":"cni-binary-copy"}: .: {} f:configMap: .: {} f:defaultMode: {} f:name: {} f:name: {} k:{"name":"cnibin"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"etc-kubernetes"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"host-run-k8s-cni-cncf-io"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"host-run-multus-certs"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"host-run-netns"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"host-var-lib-cni-bin"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"host-var-lib-cni-multus"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"host-var-lib-kubelet"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"hostroot"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"multus-cni-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"multus-conf-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"multus-daemon-config"}: .: {} f:configMap: .: {} f:defaultMode: {} f:items: {} f:name: {} f:name: {} k:{"name":"multus-socket-dir-parent"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"os-release"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"system-cni-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} manager: kube-controller-manager operation: Update time: "2026-07-13T23:39:14Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: f:observedGeneration: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:observedGeneration: {} f:phase: {} f:podIP: {} f:podIPs: .: {} k:{"ip":"10.0.128.174"}: .: {} f:ip: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2026-07-13T23:39:28Z" name: multus-79hzk namespace: openshift-multus ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: DaemonSet name: multus uid: 6dcfa503-dcf9-47b6-87d0-860f91d976eb resourceVersion: "6543" uid: 125b0bad-f492-43c8-9846-41efc776bb2d spec: affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchFields: - key: metadata.name operator: In values: - ip-10-0-128-174.ec2.internal containers: - args: - | MULTUS_DAEMON_OPT="" /entrypoint/cnibincopy.sh; exec /usr/src/multus-cni/bin/multus-daemon $MULTUS_DAEMON_OPT command: - /bin/bash - -ec - -- env: - name: RHEL8_SOURCE_DIRECTORY value: /usr/src/multus-cni/rhel8/bin/ - name: RHEL9_SOURCE_DIRECTORY value: /usr/src/multus-cni/rhel9/bin/ - name: DEFAULT_SOURCE_DIRECTORY value: /usr/src/multus-cni/bin/ - name: KUBERNETES_SERVICE_PORT value: "6443" - name: KUBERNETES_SERVICE_HOST value: aeb34d65779734456abc71354725fca2-f1d7072a2d4452bb.elb.us-east-1.amazonaws.com - name: MULTUS_NODE_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: spec.nodeName - name: K8S_NODE valueFrom: fieldRef: apiVersion: v1 fieldPath: spec.nodeName image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5228585713df6fe73e63d85efc7cb37f2a929792a1afb637a77bf56a4f2a40f9 imagePullPolicy: IfNotPresent name: kube-multus resources: requests: cpu: 10m memory: 65Mi securityContext: privileged: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /entrypoint name: cni-binary-copy - mountPath: /host/etc/os-release name: os-release - mountPath: /host/etc/cni/net.d name: system-cni-dir - mountPath: /host/run/multus/cni/net.d name: multus-cni-dir - mountPath: /host/opt/cni/bin name: cnibin - mountPath: /host/run/multus mountPropagation: HostToContainer name: multus-socket-dir-parent - mountPath: /run/k8s.cni.cncf.io name: host-run-k8s-cni-cncf-io - mountPath: /run/netns mountPropagation: HostToContainer name: host-run-netns - mountPath: /var/lib/cni/bin name: host-var-lib-cni-bin - mountPath: /var/lib/cni/multus name: host-var-lib-cni-multus - mountPath: /var/lib/kubelet mountPropagation: HostToContainer name: host-var-lib-kubelet - mountPath: /hostroot mountPropagation: HostToContainer name: hostroot - mountPath: /etc/cni/multus/net.d name: multus-conf-dir - mountPath: /etc/cni/net.d/multus.d name: multus-daemon-config readOnly: true - mountPath: /etc/cni/multus/certs name: host-run-multus-certs - mountPath: /etc/kubernetes name: etc-kubernetes - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-5lgvk readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true hostNetwork: true hostPID: true imagePullSecrets: - name: default-dockercfg-pj4hj nodeName: ip-10-0-128-174.ec2.internal nodeSelector: kubernetes.io/os: linux preemptionPolicy: PreemptLowerPriority priority: 2000001000 priorityClassName: system-node-critical restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: default serviceAccountName: default terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: - hostPath: path: /etc/kubernetes/cni/net.d type: Directory name: system-cni-dir - hostPath: path: /var/run/multus/cni/net.d type: Directory name: multus-cni-dir - hostPath: path: /var/lib/cni/bin type: Directory name: cnibin - hostPath: path: /etc/os-release type: File name: os-release - configMap: defaultMode: 484 name: cni-copy-resources name: cni-binary-copy - hostPath: path: /run/multus type: DirectoryOrCreate name: multus-socket-dir-parent - hostPath: path: /run/k8s.cni.cncf.io type: "" name: host-run-k8s-cni-cncf-io - hostPath: path: /run/netns/ type: "" name: host-run-netns - hostPath: path: /var/lib/cni/bin type: "" name: host-var-lib-cni-bin - hostPath: path: /var/lib/cni/multus type: "" name: host-var-lib-cni-multus - hostPath: path: /var/lib/kubelet type: "" name: host-var-lib-kubelet - hostPath: path: / type: "" name: hostroot - hostPath: path: /etc/cni/multus/net.d type: "" name: multus-conf-dir - configMap: defaultMode: 420 items: - key: daemon-config.json path: daemon-config.json name: multus-daemon-config name: multus-daemon-config - hostPath: path: /etc/cni/multus/certs type: "" name: host-run-multus-certs - hostPath: path: /etc/kubernetes type: "" name: etc-kubernetes - name: kube-api-access-5lgvk projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-07-13T23:39:28Z" observedGeneration: 1 status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-07-13T23:39:13Z" observedGeneration: 1 status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-07-13T23:39:28Z" observedGeneration: 1 status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-07-13T23:39:28Z" observedGeneration: 1 status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-07-13T23:39:14Z" observedGeneration: 1 status: "True" type: PodScheduled containerStatuses: - allocatedResources: cpu: 10m memory: 65Mi containerID: cri-o://59f82042e2eb6e900ddddd08c4ea0f376c32975804f113a57466e6ee9bcad448 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5228585713df6fe73e63d85efc7cb37f2a929792a1afb637a77bf56a4f2a40f9 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5228585713df6fe73e63d85efc7cb37f2a929792a1afb637a77bf56a4f2a40f9 lastState: {} name: kube-multus ready: true resources: requests: cpu: 10m memory: 65Mi restartCount: 0 started: true state: running: startedAt: "2026-07-13T23:39:28Z" user: linux: gid: 0 supplementalGroups: - 0 uid: 0 volumeMounts: - mountPath: /entrypoint name: cni-binary-copy - mountPath: /host/etc/os-release name: os-release - mountPath: /host/etc/cni/net.d name: system-cni-dir - mountPath: /host/run/multus/cni/net.d name: multus-cni-dir - mountPath: /host/opt/cni/bin name: cnibin - mountPath: /host/run/multus name: multus-socket-dir-parent - mountPath: /run/k8s.cni.cncf.io name: host-run-k8s-cni-cncf-io - mountPath: /run/netns name: host-run-netns - mountPath: /var/lib/cni/bin name: host-var-lib-cni-bin - mountPath: /var/lib/cni/multus name: host-var-lib-cni-multus - mountPath: /var/lib/kubelet name: host-var-lib-kubelet - mountPath: /hostroot name: hostroot - mountPath: /etc/cni/multus/net.d name: multus-conf-dir - mountPath: /etc/cni/net.d/multus.d name: multus-daemon-config readOnly: true recursiveReadOnly: Disabled - mountPath: /etc/cni/multus/certs name: host-run-multus-certs - mountPath: /etc/kubernetes name: etc-kubernetes - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-5lgvk readOnly: true recursiveReadOnly: Disabled hostIP: 10.0.128.174 hostIPs: - ip: 10.0.128.174 observedGeneration: 1 phase: Running podIP: 10.0.128.174 podIPs: - ip: 10.0.128.174 qosClass: Burstable startTime: "2026-07-13T23:39:13Z" - apiVersion: v1 kind: Pod metadata: annotations: cluster-autoscaler.kubernetes.io/enable-ds-eviction: "false" creationTimestamp: "2026-07-13T23:39:27Z" generateName: multus- generation: 1 labels: app: multus component: network controller-revision-hash: 69996f47b openshift.io/component: network pod-template-generation: "1" type: infra managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:cluster-autoscaler.kubernetes.io/enable-ds-eviction: {} f:target.workload.openshift.io/management: {} f:generateName: {} f:labels: .: {} f:app: {} f:component: {} f:controller-revision-hash: {} f:openshift.io/component: {} f:pod-template-generation: {} f:type: {} f:ownerReferences: .: {} k:{"uid":"6dcfa503-dcf9-47b6-87d0-860f91d976eb"}: {} f:spec: f:affinity: .: {} f:nodeAffinity: .: {} f:requiredDuringSchedulingIgnoredDuringExecution: {} f:containers: k:{"name":"kube-multus"}: .: {} f:args: {} f:command: {} f:env: .: {} k:{"name":"DEFAULT_SOURCE_DIRECTORY"}: .: {} f:name: {} f:value: {} k:{"name":"K8S_NODE"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} k:{"name":"KUBERNETES_SERVICE_HOST"}: .: {} f:name: {} f:value: {} k:{"name":"KUBERNETES_SERVICE_PORT"}: .: {} f:name: {} f:value: {} k:{"name":"MULTUS_NODE_NAME"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} k:{"name":"RHEL8_SOURCE_DIRECTORY"}: .: {} f:name: {} f:value: {} k:{"name":"RHEL9_SOURCE_DIRECTORY"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/entrypoint"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/etc/cni/multus/certs"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/etc/cni/multus/net.d"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/etc/cni/net.d/multus.d"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} k:{"mountPath":"/etc/kubernetes"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/host/etc/cni/net.d"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/host/etc/os-release"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/host/opt/cni/bin"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/host/run/multus"}: .: {} f:mountPath: {} f:mountPropagation: {} f:name: {} k:{"mountPath":"/host/run/multus/cni/net.d"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/hostroot"}: .: {} f:mountPath: {} f:mountPropagation: {} f:name: {} k:{"mountPath":"/run/k8s.cni.cncf.io"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/run/netns"}: .: {} f:mountPath: {} f:mountPropagation: {} f:name: {} k:{"mountPath":"/var/lib/cni/bin"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/lib/cni/multus"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/lib/kubelet"}: .: {} f:mountPath: {} f:mountPropagation: {} f:name: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:hostNetwork: {} f:hostPID: {} f:nodeSelector: {} f:priorityClassName: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: {} f:terminationGracePeriodSeconds: {} f:tolerations: {} f:volumes: .: {} k:{"name":"cni-binary-copy"}: .: {} f:configMap: .: {} f:defaultMode: {} f:name: {} f:name: {} k:{"name":"cnibin"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"etc-kubernetes"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"host-run-k8s-cni-cncf-io"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"host-run-multus-certs"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"host-run-netns"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"host-var-lib-cni-bin"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"host-var-lib-cni-multus"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"host-var-lib-kubelet"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"hostroot"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"multus-cni-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"multus-conf-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"multus-daemon-config"}: .: {} f:configMap: .: {} f:defaultMode: {} f:items: {} f:name: {} f:name: {} k:{"name":"multus-socket-dir-parent"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"os-release"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"system-cni-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} manager: kube-controller-manager operation: Update time: "2026-07-13T23:39:27Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: f:observedGeneration: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:observedGeneration: {} f:phase: {} f:podIP: {} f:podIPs: .: {} k:{"ip":"10.0.136.62"}: .: {} f:ip: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2026-07-13T23:40:17Z" name: multus-8wgn2 namespace: openshift-multus ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: DaemonSet name: multus uid: 6dcfa503-dcf9-47b6-87d0-860f91d976eb resourceVersion: "8455" uid: 0117ae8c-bf88-404d-9adf-025edbd8afb2 spec: affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchFields: - key: metadata.name operator: In values: - ip-10-0-136-62.ec2.internal containers: - args: - | MULTUS_DAEMON_OPT="" /entrypoint/cnibincopy.sh; exec /usr/src/multus-cni/bin/multus-daemon $MULTUS_DAEMON_OPT command: - /bin/bash - -ec - -- env: - name: RHEL8_SOURCE_DIRECTORY value: /usr/src/multus-cni/rhel8/bin/ - name: RHEL9_SOURCE_DIRECTORY value: /usr/src/multus-cni/rhel9/bin/ - name: DEFAULT_SOURCE_DIRECTORY value: /usr/src/multus-cni/bin/ - name: KUBERNETES_SERVICE_PORT value: "6443" - name: KUBERNETES_SERVICE_HOST value: aeb34d65779734456abc71354725fca2-f1d7072a2d4452bb.elb.us-east-1.amazonaws.com - name: MULTUS_NODE_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: spec.nodeName - name: K8S_NODE valueFrom: fieldRef: apiVersion: v1 fieldPath: spec.nodeName image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5228585713df6fe73e63d85efc7cb37f2a929792a1afb637a77bf56a4f2a40f9 imagePullPolicy: IfNotPresent name: kube-multus resources: requests: cpu: 10m memory: 65Mi securityContext: privileged: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /entrypoint name: cni-binary-copy - mountPath: /host/etc/os-release name: os-release - mountPath: /host/etc/cni/net.d name: system-cni-dir - mountPath: /host/run/multus/cni/net.d name: multus-cni-dir - mountPath: /host/opt/cni/bin name: cnibin - mountPath: /host/run/multus mountPropagation: HostToContainer name: multus-socket-dir-parent - mountPath: /run/k8s.cni.cncf.io name: host-run-k8s-cni-cncf-io - mountPath: /run/netns mountPropagation: HostToContainer name: host-run-netns - mountPath: /var/lib/cni/bin name: host-var-lib-cni-bin - mountPath: /var/lib/cni/multus name: host-var-lib-cni-multus - mountPath: /var/lib/kubelet mountPropagation: HostToContainer name: host-var-lib-kubelet - mountPath: /hostroot mountPropagation: HostToContainer name: hostroot - mountPath: /etc/cni/multus/net.d name: multus-conf-dir - mountPath: /etc/cni/net.d/multus.d name: multus-daemon-config readOnly: true - mountPath: /etc/cni/multus/certs name: host-run-multus-certs - mountPath: /etc/kubernetes name: etc-kubernetes - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-j98kx readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true hostNetwork: true hostPID: true imagePullSecrets: - name: default-dockercfg-pj4hj nodeName: ip-10-0-136-62.ec2.internal nodeSelector: kubernetes.io/os: linux preemptionPolicy: PreemptLowerPriority priority: 2000001000 priorityClassName: system-node-critical restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: default serviceAccountName: default terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: - hostPath: path: /etc/kubernetes/cni/net.d type: Directory name: system-cni-dir - hostPath: path: /var/run/multus/cni/net.d type: Directory name: multus-cni-dir - hostPath: path: /var/lib/cni/bin type: Directory name: cnibin - hostPath: path: /etc/os-release type: File name: os-release - configMap: defaultMode: 484 name: cni-copy-resources name: cni-binary-copy - hostPath: path: /run/multus type: DirectoryOrCreate name: multus-socket-dir-parent - hostPath: path: /run/k8s.cni.cncf.io type: "" name: host-run-k8s-cni-cncf-io - hostPath: path: /run/netns/ type: "" name: host-run-netns - hostPath: path: /var/lib/cni/bin type: "" name: host-var-lib-cni-bin - hostPath: path: /var/lib/cni/multus type: "" name: host-var-lib-cni-multus - hostPath: path: /var/lib/kubelet type: "" name: host-var-lib-kubelet - hostPath: path: / type: "" name: hostroot - hostPath: path: /etc/cni/multus/net.d type: "" name: multus-conf-dir - configMap: defaultMode: 420 items: - key: daemon-config.json path: daemon-config.json name: multus-daemon-config name: multus-daemon-config - hostPath: path: /etc/cni/multus/certs type: "" name: host-run-multus-certs - hostPath: path: /etc/kubernetes type: "" name: etc-kubernetes - name: kube-api-access-j98kx projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-07-13T23:39:49Z" observedGeneration: 1 status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-07-13T23:39:29Z" observedGeneration: 1 status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-07-13T23:39:49Z" observedGeneration: 1 status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-07-13T23:39:49Z" observedGeneration: 1 status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-07-13T23:39:27Z" observedGeneration: 1 status: "True" type: PodScheduled containerStatuses: - allocatedResources: cpu: 10m memory: 65Mi containerID: cri-o://7ac39eda3636f31c8783ccc16ee1956ec282471a1ee7db142f1ee29a58c0449c image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5228585713df6fe73e63d85efc7cb37f2a929792a1afb637a77bf56a4f2a40f9 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5228585713df6fe73e63d85efc7cb37f2a929792a1afb637a77bf56a4f2a40f9 lastState: {} name: kube-multus ready: true resources: requests: cpu: 10m memory: 65Mi restartCount: 0 started: true state: running: startedAt: "2026-07-13T23:39:49Z" user: linux: gid: 0 supplementalGroups: - 0 uid: 0 volumeMounts: - mountPath: /entrypoint name: cni-binary-copy - mountPath: /host/etc/os-release name: os-release - mountPath: /host/etc/cni/net.d name: system-cni-dir - mountPath: /host/run/multus/cni/net.d name: multus-cni-dir - mountPath: /host/opt/cni/bin name: cnibin - mountPath: /host/run/multus name: multus-socket-dir-parent - mountPath: /run/k8s.cni.cncf.io name: host-run-k8s-cni-cncf-io - mountPath: /run/netns name: host-run-netns - mountPath: /var/lib/cni/bin name: host-var-lib-cni-bin - mountPath: /var/lib/cni/multus name: host-var-lib-cni-multus - mountPath: /var/lib/kubelet name: host-var-lib-kubelet - mountPath: /hostroot name: hostroot - mountPath: /etc/cni/multus/net.d name: multus-conf-dir - mountPath: /etc/cni/net.d/multus.d name: multus-daemon-config readOnly: true recursiveReadOnly: Disabled - mountPath: /etc/cni/multus/certs name: host-run-multus-certs - mountPath: /etc/kubernetes name: etc-kubernetes - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-j98kx readOnly: true recursiveReadOnly: Disabled hostIP: 10.0.136.62 hostIPs: - ip: 10.0.136.62 observedGeneration: 1 phase: Running podIP: 10.0.136.62 podIPs: - ip: 10.0.136.62 qosClass: Burstable startTime: "2026-07-13T23:39:29Z" - apiVersion: v1 kind: Pod metadata: annotations: cluster-autoscaler.kubernetes.io/enable-ds-eviction: "false" creationTimestamp: "2026-07-13T23:39:08Z" generateName: multus-additional-cni-plugins- generation: 1 labels: app: multus-additional-cni-plugins component: network controller-revision-hash: 68cfcf5df4 openshift.io/component: network pod-template-generation: "1" type: infra managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:cluster-autoscaler.kubernetes.io/enable-ds-eviction: {} f:target.workload.openshift.io/management: {} f:generateName: {} f:labels: .: {} f:app: {} f:component: {} f:controller-revision-hash: {} f:openshift.io/component: {} f:pod-template-generation: {} f:type: {} f:ownerReferences: .: {} k:{"uid":"0cde20d8-0d93-458d-b61e-a7bee8269743"}: {} f:spec: f:affinity: .: {} f:nodeAffinity: .: {} f:requiredDuringSchedulingIgnoredDuringExecution: {} f:containers: k:{"name":"kube-multus-additional-cni-plugins"}: .: {} f:args: {} f:command: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:hostNetwork: {} f:initContainers: .: {} k:{"name":"bond-cni-plugin"}: .: {} f:command: {} f:env: .: {} k:{"name":"DEFAULT_SOURCE_DIRECTORY"}: .: {} f:name: {} f:value: {} k:{"name":"RHEL8_SOURCE_DIRECTORY"}: .: {} f:name: {} f:value: {} k:{"name":"RHEL9_SOURCE_DIRECTORY"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/entrypoint"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/host/etc/os-release"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} k:{"mountPath":"/host/opt/cni/bin"}: .: {} f:mountPath: {} f:name: {} k:{"name":"cni-plugins"}: .: {} f:command: {} f:env: .: {} k:{"name":"DEFAULT_SOURCE_DIRECTORY"}: .: {} f:name: {} f:value: {} k:{"name":"RHEL8_SOURCE_DIRECTORY"}: .: {} f:name: {} f:value: {} k:{"name":"RHEL9_SOURCE_DIRECTORY"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/entrypoint"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/host/etc/cni/tuning/"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/host/etc/os-release"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} k:{"mountPath":"/host/opt/cni/bin"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/sysctls"}: .: {} f:mountPath: {} f:name: {} k:{"name":"egress-router-binary-copy"}: .: {} f:command: {} f:env: .: {} k:{"name":"DEFAULT_SOURCE_DIRECTORY"}: .: {} f:name: {} f:value: {} k:{"name":"RHEL8_SOURCE_DIRECTORY"}: .: {} f:name: {} f:value: {} k:{"name":"RHEL9_SOURCE_DIRECTORY"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/entrypoint"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/host/etc/os-release"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} k:{"mountPath":"/host/opt/cni/bin"}: .: {} f:mountPath: {} f:name: {} k:{"name":"routeoverride-cni"}: .: {} f:command: {} f:env: .: {} k:{"name":"DEFAULT_SOURCE_DIRECTORY"}: .: {} f:name: {} f:value: {} k:{"name":"RHEL8_SOURCE_DIRECTORY"}: .: {} f:name: {} f:value: {} k:{"name":"RHEL9_SOURCE_DIRECTORY"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/entrypoint"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/host/etc/os-release"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} k:{"mountPath":"/host/opt/cni/bin"}: .: {} f:mountPath: {} f:name: {} k:{"name":"whereabouts-cni"}: .: {} f:command: {} f:env: .: {} k:{"name":"CNI_BIN_DIR"}: .: {} f:name: {} f:value: {} k:{"name":"CNI_CONF_DIR"}: .: {} f:name: {} f:value: {} k:{"name":"KUBERNETES_SERVICE_HOST"}: .: {} f:name: {} f:value: {} k:{"name":"KUBERNETES_SERVICE_PORT"}: .: {} f:name: {} f:value: {} k:{"name":"NODENAME"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} k:{"name":"SLEEP"}: .: {} f:name: {} f:value: {} k:{"name":"WHEREABOUTS_NAMESPACE"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/whereabouts/config"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/host/etc/cni/net.d"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/host/opt/cni/bin"}: .: {} f:mountPath: {} f:name: {} k:{"name":"whereabouts-cni-bincopy"}: .: {} f:command: {} f:env: .: {} k:{"name":"DEFAULT_SOURCE_DIRECTORY"}: .: {} f:name: {} f:value: {} k:{"name":"RHEL8_SOURCE_DIRECTORY"}: .: {} f:name: {} f:value: {} k:{"name":"RHEL9_SOURCE_DIRECTORY"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/entrypoint"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/host/etc/os-release"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} k:{"mountPath":"/host/opt/cni/bin"}: .: {} f:mountPath: {} f:name: {} f:nodeSelector: {} f:priorityClassName: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: {} f:serviceAccount: {} f:serviceAccountName: {} f:terminationGracePeriodSeconds: {} f:tolerations: {} f:volumes: .: {} k:{"name":"cni-binary-copy"}: .: {} f:configMap: .: {} f:defaultMode: {} f:name: {} f:name: {} k:{"name":"cni-sysctl-allowlist"}: .: {} f:configMap: .: {} f:defaultMode: {} f:name: {} f:name: {} k:{"name":"cnibin"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"multus-cni-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"os-release"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"system-cni-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"tuning-conf-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"whereabouts-flatfile-configmap"}: .: {} f:configMap: .: {} f:defaultMode: {} f:name: {} f:name: {} manager: kube-controller-manager operation: Update time: "2026-07-13T23:39:08Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: f:observedGeneration: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:initContainerStatuses: {} f:observedGeneration: {} f:phase: {} f:podIP: {} f:podIPs: .: {} k:{"ip":"10.0.137.167"}: .: {} f:ip: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2026-07-13T23:39:44Z" name: multus-additional-cni-plugins-4kw9l namespace: openshift-multus ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: DaemonSet name: multus-additional-cni-plugins uid: 0cde20d8-0d93-458d-b61e-a7bee8269743 resourceVersion: "7176" uid: 5deee0cd-e42a-4244-ae33-a0207f26dfb1 spec: affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchFields: - key: metadata.name operator: In values: - ip-10-0-137-167.ec2.internal containers: - args: - | trap : TERM INT; sleep infinity & wait command: - /bin/bash - -ec - -- image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5228585713df6fe73e63d85efc7cb37f2a929792a1afb637a77bf56a4f2a40f9 imagePullPolicy: IfNotPresent name: kube-multus-additional-cni-plugins resources: requests: cpu: 10m memory: 10Mi securityContext: privileged: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-g6xnv readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true hostNetwork: true imagePullSecrets: - name: multus-ancillary-tools-dockercfg-fnkhm initContainers: - command: - /entrypoint/cnibincopy.sh env: - name: RHEL8_SOURCE_DIRECTORY value: /usr/src/egress-router-cni/rhel8/bin/ - name: RHEL9_SOURCE_DIRECTORY value: /usr/src/egress-router-cni/rhel9/bin/ - name: DEFAULT_SOURCE_DIRECTORY value: /usr/src/egress-router-cni/bin/ image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:852e5ae3f77e551118afa777a96222c9a7806f35ebea299f3e51e6fb499967c4 imagePullPolicy: IfNotPresent name: egress-router-binary-copy resources: {} terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /entrypoint name: cni-binary-copy - mountPath: /host/opt/cni/bin name: cnibin - mountPath: /host/etc/os-release name: os-release readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-g6xnv readOnly: true - command: - /bin/bash - -c - /entrypoint/cnibincopy.sh && cp -n /sysctls/allowlist.conf /host/etc/cni/tuning/ env: - name: RHEL8_SOURCE_DIRECTORY value: /usr/src/plugins/rhel8/bin/ - name: RHEL9_SOURCE_DIRECTORY value: /usr/src/plugins/rhel9/bin/ - name: DEFAULT_SOURCE_DIRECTORY value: /usr/src/plugins/bin/ image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:fa9876144ed45044acf6e41e3149588fb90268bd17ae7a4af350137d528e49b2 imagePullPolicy: IfNotPresent name: cni-plugins resources: {} terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /entrypoint name: cni-binary-copy - mountPath: /host/opt/cni/bin name: cnibin - mountPath: /host/etc/os-release name: os-release readOnly: true - mountPath: /host/etc/cni/tuning/ name: tuning-conf-dir - mountPath: /sysctls name: cni-sysctl-allowlist - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-g6xnv readOnly: true - command: - /entrypoint/cnibincopy.sh env: - name: RHEL8_SOURCE_DIRECTORY value: /bondcni/rhel8/ - name: RHEL9_SOURCE_DIRECTORY value: /bondcni/rhel9/ - name: DEFAULT_SOURCE_DIRECTORY value: /bondcni/rhel9/ image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7e937c998073cfee310676c02696e5d44f09726dcc8bb3c901a67bb50d14de69 imagePullPolicy: IfNotPresent name: bond-cni-plugin resources: {} terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /entrypoint name: cni-binary-copy - mountPath: /host/opt/cni/bin name: cnibin - mountPath: /host/etc/os-release name: os-release readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-g6xnv readOnly: true - command: - /entrypoint/cnibincopy.sh env: - name: RHEL8_SOURCE_DIRECTORY value: /usr/src/route-override/rhel8/bin/ - name: RHEL9_SOURCE_DIRECTORY value: /usr/src/route-override/rhel9/bin/ - name: DEFAULT_SOURCE_DIRECTORY value: /usr/src/route-override/bin/ image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4db08496762789851f9fce2a983ccce4b32743c930c904e1bceb69a2f2691902 imagePullPolicy: IfNotPresent name: routeoverride-cni resources: {} terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /entrypoint name: cni-binary-copy - mountPath: /host/opt/cni/bin name: cnibin - mountPath: /host/etc/os-release name: os-release readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-g6xnv readOnly: true - command: - /entrypoint/cnibincopy.sh env: - name: RHEL8_SOURCE_DIRECTORY value: /usr/src/whereabouts/rhel8/bin/ - name: RHEL9_SOURCE_DIRECTORY value: /usr/src/whereabouts/rhel9/bin/ - name: DEFAULT_SOURCE_DIRECTORY value: /usr/src/whereabouts/bin/ image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d15a3921e540410d83e10123fa9a0086e3dec90f5e4fb6e7077d883e3c1542f8 imagePullPolicy: IfNotPresent name: whereabouts-cni-bincopy resources: requests: cpu: 10m memory: 10Mi terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /entrypoint name: cni-binary-copy - mountPath: /host/opt/cni/bin name: cnibin - mountPath: /host/etc/os-release name: os-release readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-g6xnv readOnly: true - command: - /bin/sh - -c - | #!/bin/sh set -u -e CNI_BIN_DIR=${CNI_BIN_DIR:-"/host/opt/cni/bin/"} WHEREABOUTS_KUBECONFIG_FILE_HOST=${WHEREABOUTS_KUBECONFIG_FILE_HOST:-"/etc/cni/net.d/whereabouts.d/whereabouts.kubeconfig"} CNI_CONF_DIR=${CNI_CONF_DIR:-"/host/etc/kubernetes/cni/net.d"} WHEREABOUTS_RECONCILER_CRON=${WHEREABOUTS_RECONCILER_CRON:-30 4 * * *} # Make a whereabouts.d directory (for our kubeconfig) mkdir -p $CNI_CONF_DIR/whereabouts.d WHEREABOUTS_KUBECONFIG=$CNI_CONF_DIR/whereabouts.d/whereabouts.kubeconfig WHEREABOUTS_CONF_FILE=$CNI_CONF_DIR/whereabouts.d/whereabouts.conf WHEREABOUTS_KUBECONFIG_LITERAL=$(echo "$WHEREABOUTS_KUBECONFIG" | sed -e s'|/host||') # Write the nodename to the whereabouts.d directory for standardized hostname reference across cloud providers echo $NODENAME > $CNI_CONF_DIR/whereabouts.d/nodename SERVICE_ACCOUNT_PATH=/var/run/secrets/kubernetes.io/serviceaccount KUBE_CA_FILE=${KUBE_CA_FILE:-$SERVICE_ACCOUNT_PATH/ca.crt} SERVICE_ACCOUNT_TOKEN=$(cat $SERVICE_ACCOUNT_PATH/token) SERVICE_ACCOUNT_TOKEN_PATH=$SERVICE_ACCOUNT_PATH/token SKIP_TLS_VERIFY=${SKIP_TLS_VERIFY:-false} function log() { echo "$(date -Iseconds) ${1}" } function error() { log "ERR: {$1}" } function warn() { log "WARN: {$1}" } function generateKubeConfig { # Check if we're running as a k8s pod. if [ -f "$SERVICE_ACCOUNT_PATH/token" ]; then # We're running as a k8d pod - expect some variables. if [ -z ${KUBERNETES_SERVICE_HOST} ]; then error "KUBERNETES_SERVICE_HOST not set"; exit 1; fi if [ -z ${KUBERNETES_SERVICE_PORT} ]; then error "KUBERNETES_SERVICE_PORT not set"; exit 1; fi if [ "$SKIP_TLS_VERIFY" == "true" ]; then TLS_CFG="insecure-skip-tls-verify: true" elif [ -f "$KUBE_CA_FILE" ]; then TLS_CFG="certificate-authority-data: $(cat $KUBE_CA_FILE | base64 | tr -d '\n')" fi # Kubernetes service address must be wrapped if it is IPv6 address KUBERNETES_SERVICE_HOST_WRAP=$KUBERNETES_SERVICE_HOST if [ "$KUBERNETES_SERVICE_HOST_WRAP" != "${KUBERNETES_SERVICE_HOST_WRAP#*:[0-9a-fA-F]}" ]; then KUBERNETES_SERVICE_HOST_WRAP=\[$KUBERNETES_SERVICE_HOST_WRAP\] fi # Write a kubeconfig file for the CNI plugin. Do this # to skip TLS verification for now. We should eventually support # writing more complete kubeconfig files. This is only used # if the provided CNI network config references it. touch $WHEREABOUTS_KUBECONFIG chmod ${KUBECONFIG_MODE:-600} $WHEREABOUTS_KUBECONFIG cat > $WHEREABOUTS_KUBECONFIG < $WHEREABOUTS_CONF_FILE < $CNI_CONF_DIR/whereabouts.d/nodename SERVICE_ACCOUNT_PATH=/var/run/secrets/kubernetes.io/serviceaccount KUBE_CA_FILE=${KUBE_CA_FILE:-$SERVICE_ACCOUNT_PATH/ca.crt} SERVICE_ACCOUNT_TOKEN=$(cat $SERVICE_ACCOUNT_PATH/token) SERVICE_ACCOUNT_TOKEN_PATH=$SERVICE_ACCOUNT_PATH/token SKIP_TLS_VERIFY=${SKIP_TLS_VERIFY:-false} function log() { echo "$(date -Iseconds) ${1}" } function error() { log "ERR: {$1}" } function warn() { log "WARN: {$1}" } function generateKubeConfig { # Check if we're running as a k8s pod. if [ -f "$SERVICE_ACCOUNT_PATH/token" ]; then # We're running as a k8d pod - expect some variables. if [ -z ${KUBERNETES_SERVICE_HOST} ]; then error "KUBERNETES_SERVICE_HOST not set"; exit 1; fi if [ -z ${KUBERNETES_SERVICE_PORT} ]; then error "KUBERNETES_SERVICE_PORT not set"; exit 1; fi if [ "$SKIP_TLS_VERIFY" == "true" ]; then TLS_CFG="insecure-skip-tls-verify: true" elif [ -f "$KUBE_CA_FILE" ]; then TLS_CFG="certificate-authority-data: $(cat $KUBE_CA_FILE | base64 | tr -d '\n')" fi # Kubernetes service address must be wrapped if it is IPv6 address KUBERNETES_SERVICE_HOST_WRAP=$KUBERNETES_SERVICE_HOST if [ "$KUBERNETES_SERVICE_HOST_WRAP" != "${KUBERNETES_SERVICE_HOST_WRAP#*:[0-9a-fA-F]}" ]; then KUBERNETES_SERVICE_HOST_WRAP=\[$KUBERNETES_SERVICE_HOST_WRAP\] fi # Write a kubeconfig file for the CNI plugin. Do this # to skip TLS verification for now. We should eventually support # writing more complete kubeconfig files. This is only used # if the provided CNI network config references it. touch $WHEREABOUTS_KUBECONFIG chmod ${KUBECONFIG_MODE:-600} $WHEREABOUTS_KUBECONFIG cat > $WHEREABOUTS_KUBECONFIG < $WHEREABOUTS_CONF_FILE < $CNI_CONF_DIR/whereabouts.d/nodename SERVICE_ACCOUNT_PATH=/var/run/secrets/kubernetes.io/serviceaccount KUBE_CA_FILE=${KUBE_CA_FILE:-$SERVICE_ACCOUNT_PATH/ca.crt} SERVICE_ACCOUNT_TOKEN=$(cat $SERVICE_ACCOUNT_PATH/token) SERVICE_ACCOUNT_TOKEN_PATH=$SERVICE_ACCOUNT_PATH/token SKIP_TLS_VERIFY=${SKIP_TLS_VERIFY:-false} function log() { echo "$(date -Iseconds) ${1}" } function error() { log "ERR: {$1}" } function warn() { log "WARN: {$1}" } function generateKubeConfig { # Check if we're running as a k8s pod. if [ -f "$SERVICE_ACCOUNT_PATH/token" ]; then # We're running as a k8d pod - expect some variables. if [ -z ${KUBERNETES_SERVICE_HOST} ]; then error "KUBERNETES_SERVICE_HOST not set"; exit 1; fi if [ -z ${KUBERNETES_SERVICE_PORT} ]; then error "KUBERNETES_SERVICE_PORT not set"; exit 1; fi if [ "$SKIP_TLS_VERIFY" == "true" ]; then TLS_CFG="insecure-skip-tls-verify: true" elif [ -f "$KUBE_CA_FILE" ]; then TLS_CFG="certificate-authority-data: $(cat $KUBE_CA_FILE | base64 | tr -d '\n')" fi # Kubernetes service address must be wrapped if it is IPv6 address KUBERNETES_SERVICE_HOST_WRAP=$KUBERNETES_SERVICE_HOST if [ "$KUBERNETES_SERVICE_HOST_WRAP" != "${KUBERNETES_SERVICE_HOST_WRAP#*:[0-9a-fA-F]}" ]; then KUBERNETES_SERVICE_HOST_WRAP=\[$KUBERNETES_SERVICE_HOST_WRAP\] fi # Write a kubeconfig file for the CNI plugin. Do this # to skip TLS verification for now. We should eventually support # writing more complete kubeconfig files. This is only used # if the provided CNI network config references it. touch $WHEREABOUTS_KUBECONFIG chmod ${KUBECONFIG_MODE:-600} $WHEREABOUTS_KUBECONFIG cat > $WHEREABOUTS_KUBECONFIG < $WHEREABOUTS_CONF_FILE <